142.93.110.250
Classification: Whitelisted
142.93.110.250 is a whitelisted (trusted) IP address listed by Maltiverse. 17 sightings from 4 threat sources, last seen 2026-10-14.
Current activity
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: REVIL (S0496)
Intrusion sets: GAMAREDON GROUP (G0047)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hosting Provider | Maltiverse | 2026-10-14 04:35:03 | 2026-10-14 04:35:03 | benign hosting | |
| Malicious site | Hybrid-Analysis | 2019-06-19 15:00:20 | 2021-11-08 14:15:31 | ||
| NetSupportManager RAT | ThreatFox Abuse.ch | 2021-10-28 00:06:28 | 2021-10-28 00:06:28 | malicious-activity | |
| Malware site | Hybrid-Analysis | 2019-10-01 18:45:10 | 2021-09-07 18:15:38 | ||
| Malicious Hostname | Cyber Threat Coalition | 2020-12-16 05:14:10 | 2021-03-03 19:11:39 | malicious-activity | |
| BV:Gamaredon | Hybrid-Analysis | 2021-03-01 10:45:46 | 2021-03-01 10:45:46 | G0047 Gamaredon Group | |
| Trojan.VBKryjetor | Hybrid-Analysis | 2021-02-23 01:00:08 | 2021-02-23 01:00:08 | ||
| Dropper.Trojan.Agent | Hybrid-Analysis | 2020-12-15 15:46:24 | 2020-12-15 15:46:24 | ||
| Covid19 scam | Cyber Threat Coalition | 2020-11-20 22:19:20 | 2020-12-13 05:00:54 | malicious-activity | |
| CVE-2017-0199 | Hybrid-Analysis | 2020-08-24 17:45:10 | 2020-10-01 08:30:20 | ||
| Ransomware Revil Sodinokibi | Telefonica Peru | 2020-08-04 14:13:40 | 2020-08-04 14:13:40 | ||
| Ransomware, Sodinokibi, Revil | Telefonica Peru | 2020-08-04 14:11:42 | 2020-08-04 14:11:42 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2020-07-24 10:45:10 | 2020-07-24 10:45:10 | ||
| DeepScan:Generic.Ransom.Sodinokibi | Hybrid-Analysis | 2020-03-25 13:00:17 | 2020-07-15 14:30:18 | S0496 REvil | |
| Heur.BZC.YAX.Nioc.1 | Hybrid-Analysis | 2020-07-03 14:17:04 | 2020-07-03 14:17:04 | ||
| Virus.Neshta | Hybrid-Analysis | 2020-04-01 16:45:36 | 2020-04-01 16:45:46 | ||
| Trojan.Autoruns.GenericKD | Hybrid-Analysis | 2020-01-28 00:30:06 | 2020-01-28 00:30:06 | ||
| Generic.Malware | Hybrid-Analysis | 2019-11-18 15:00:10 | 2019-11-23 01:15:05 |
Tags
netsupport port:2909 ransomware sodinokibi revil telecom argentina covid19 coronavirus scam phishingWhois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- arin
- AS date
- 2018-07-12 00:00:00
- AS CIDR
- 142.93.96.0/20
- CIDR
- 142.93.0.0/16
- Registrant
- DigitalOcean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Frankfurt am Main
- State
- NY
- Postal code
- 60256
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected], [email protected]
- First indexed
- 2019-06-19 15:00:20
- Last updated
- 2026-10-14 04:35:03
Malicious IPs in the same CIDR
142.93.105.96 142.93.103.195 142.93.106.199 142.93.96.156 142.93.107.211 142.93.106.64 142.93.99.249 142.93.110.76 142.93.100.12 142.93.99.178