nile.com.jo
Classification: Malicious
nile.com.jo is a malicious hostname. Linked to Qakbot, Pony malware. Reported by ThreatFox Abuse.ch and Cybercrime-tracker.net, last seen 2023-02-27.
Current activity
- Online — resolving/reachable. Last checked 2026-11-06 20:35:45.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650) PONY (S0453)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| QakBot | ThreatFox Abuse.ch | 2023-02-27 20:17:41 | 2023-02-27 20:17:41 | botnet malicious-activity | S0650 QakBot |
| Pony | Cybercrime-tracker.net | 2020-04-27 01:37:23 | 2022-12-28 07:22:06 | malicious-activity | S0453 Pony |
| Alexa Top 1 Million | Alexa | 2021-06-15 14:40:07 | 2021-06-29 10:43:12 | benign |
Tags
bb17 img pw764 qakbot qbot quakbot tr zip oakboat pinkslipbotIP addresses resolved by this hostname
- 62.171.151.240 (2020-04-27 01:37:23)
- 192.254.236.7 (2025-01-16 12:05:55)
- 195.201.24.74 (2025-07-24 10:18:05)
- 116.203.167.163 (2026-11-06 20:35:45)
Whois information
- AS name
- AS206617 East Pro Consulting S.r.l.
- Domain
- nile.com.jo
- TLD
- com.jo
- First indexed
- 2020-04-27 01:37:23
- Last updated
- 2026-11-06 20:35:45