Is 72.56.6.238 malicious?
Checked against 1.5M+ indicators of compromise from honeypots, blocklists and OSINT feeds.
MALICIOUS
This indicator is flagged as hostile. Consider blocking it.
Public Record
Type
ip
Country
RU
First Seen
29 May 2026
Status
ACTIVE
Source
Cowrie Honeypot
ssh-brute-forcessh-attackcommand-executionids-alerthoneypotssh-success
Full report is free — sign in to unlock
Confidence score, last-seen date, abuse reports, open CVEs (Shodan), attack context and API access.