149.3.170.185
Classification: Suspicious
149.3.170.185 is a suspicious IP address. Linked to Bumblebee malware. Reported by 3 threat sources, last seen 2023-05-18. Network: AS213373 Ip Connect INC.
MITRE ATT&CK associations
Malware families: BUMBLEBEE (S1039)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2023-04-20 11:45:16 | 2023-05-18 10:54:05 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2023-04-20 11:45:13 | 2023-05-18 10:54:02 | malicious-activity | |
| BumbleBee | ThreatFox Abuse.ch | 2023-04-18 11:17:36 | 2023-04-20 10:19:19 | malicious-activity | S1039 Bumblebee |
| BumbleBee | FeodoTracker Abuse.ch | 2023-04-19 00:00:21 | 2023-04-19 00:00:21 | malicious-activity | S1039 Bumblebee |
Tags
c&c port:443 coldtrain shellsting shindigWhois information
- AS name
- AS213373 Ip Connect INC
- AS registry
- ripencc
- AS date
- 2020-06-24 00:00:00
- AS CIDR
- 149.3.170.0/24
- CIDR
- 149.3.170.0/24
- Registrant
- Ip Connect INC
- Address
- Suite 9, Ansuya Estate, Revolution Avenue 0000 Victoria SEYCHELLES
- City
- Amsterdam
- Postal code
- 1012 JS
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2023-04-18 11:17:36
- Last updated
- 2026-04-11 13:44:12