151.213.67.195
Classification: Neutral
151.213.67.195 is a neutral IP address. Reported by 4 threat sources, last seen 2023-08-06. Network: AS7029 WINDSTREAM COMMUNICATIONS LLC.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2023-07-04 13:41:15 | 2023-08-06 12:48:04 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2023-07-04 13:41:10 | 2023-08-06 12:48:00 | malicious-activity | |
| QakBot | ThreatFox Abuse.ch | 2023-07-01 03:17:02 | 2023-07-03 03:17:50 | malicious-activity | S0650 QakBot |
| QakBot | FeodoTracker Abuse.ch | 2023-07-02 00:00:27 | 2023-07-03 00:00:26 | malicious-activity | S0650 QakBot |
| Mail Spammer | Abuseat.org | 2023-07-01 03:17:02 | 2023-07-01 03:17:02 |
Tags
c&c port:995 oakboat pinkslipbot qbot quakbotWhois information
- AS name
- AS7029 WINDSTREAM COMMUNICATIONS LLC
- AS registry
- arin
- AS date
- 1991-09-25 00:00:00
- AS CIDR
- 151.213.64.0/21
- CIDR
- 151.213.0.0/16
- Registrant
- WINDSTREAM COMMUNICATIONS LLC
- Address
- 4001 Rodney Parham Rd
- City
- Ashland
- State
- KY
- Postal code
- 41101
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2023-07-01 03:17:02
- Last updated
- 2026-09-13 18:40:19