automatia.in
Classification: Malicious
automatia.in is a malicious hostname. Linked to Azorult malware. 53 sightings from ThreatFox Abuse.ch and Hybrid-Analysis, last seen 2024-05-25.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 00:37:21.
MITRE ATT&CK associations
Malware families: AZORULT (S0344)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Loki Password Stealer (PWS) | ThreatFox Abuse.ch | 2024-05-23 18:15:56 | 2024-05-25 18:22:47 | malicious-activity | |
| Azorult | ThreatFox Abuse.ch | 2023-09-27 22:44:07 | 2023-09-27 22:44:07 | malicious-activity | S0344 Azorult |
| Generic.Malware | Hybrid-Analysis | 2019-05-10 13:15:07 | 2019-05-20 14:30:50 | ||
| Trojan.Generic | Hybrid-Analysis | 2019-05-17 19:45:09 | 2019-05-17 19:45:09 |
Tags
azorult c2 historicalandnew puffstealer rultazo infostealer lokibot stealer burkina loki lokipwsIP addresses resolved by this hostname
- 198.27.105.228 (2019-05-10 13:15:07)
- 148.113.208.33 (2026-10-18 00:37:21)
Whois information
- AS name
- AS16276 OVH SAS
- Domain
- automatia.in
- TLD
- in
- First indexed
- 2019-05-10 13:15:07
- Last updated
- 2026-10-18 00:37:21