162.217.99.134
Classification: Suspicious
162.217.99.134 is a suspicious IP address. Linked to Conficker malware. Reported by 4 threat sources, last seen 2021-10-13.
MITRE ATT&CK associations
Malware families: CONFICKER (S0608)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malware site | Hybrid-Analysis | 2020-05-07 08:00:24 | 2021-10-13 17:16:48 | ||
| suppobox | Maltiverse Research Team | 2020-04-18 01:29:44 | 2021-03-22 01:13:08 | malicious-activity | |
| Virus.Sality | Hybrid-Analysis | 2020-04-28 09:45:15 | 2021-03-21 08:00:14 | ||
| Generic.Malware | Hybrid-Analysis | 2020-06-23 19:45:24 | 2021-03-20 01:00:12 | ||
| tempedreve | Maltiverse Research Team | 2021-03-11 06:00:06 | 2021-03-11 06:00:06 | malicious-activity | |
| gameover | Maltiverse Research Team | 2021-01-02 00:27:21 | 2021-03-08 00:28:22 | malicious-activity | |
| Malicious url | Cyber Threat Coalition | 2020-12-14 16:17:48 | 2021-03-04 08:24:18 | malicious-activity | |
| tinynuke | Maltiverse Research Team | 2020-06-09 07:18:15 | 2021-03-03 04:46:19 | malicious-activity | |
| Virus.Nimnul | Hybrid-Analysis | 2020-11-30 04:17:22 | 2021-03-02 23:15:36 | ||
| conficker | Maltiverse Research Team | 2020-07-09 00:27:33 | 2021-02-22 00:26:44 | malicious-activity | S0608 Conficker |
| murofet | Maltiverse Research Team | 2020-08-01 01:10:17 | 2021-01-30 00:52:13 | malicious-activity | |
| proslikefan | Maltiverse Research Team | 2020-08-19 00:54:56 | 2021-01-24 00:49:35 | malicious-activity | |
| Trojan.Scar | Hybrid-Analysis | 2021-01-19 12:00:17 | 2021-01-19 12:00:17 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2021-01-12 21:30:44 | 2021-01-12 21:30:44 | ||
| Trojan.Generic | Hybrid-Analysis | 2020-06-06 09:45:14 | 2021-01-01 22:17:15 | ||
| Covid19 scam | Cyber Threat Coalition | 2020-11-24 19:42:44 | 2020-12-13 15:44:36 | malicious-activity | |
| Trojan.Downloader | Hybrid-Analysis | 2020-12-10 01:15:11 | 2020-12-10 01:15:11 | ||
| Shiz.R.gen | Hybrid-Analysis | 2020-12-06 18:15:08 | 2020-12-06 18:17:09 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2020-12-01 12:45:25 | 2020-12-01 12:45:25 | ||
| Application.Bundler.InstallBrain | Hybrid-Analysis | 2020-11-18 07:45:42 | 2020-11-18 07:45:42 | ||
| Dropped:Generic.Malware.SYddld | Hybrid-Analysis | 2020-09-11 04:30:09 | 2020-09-11 04:30:09 | ||
| pykspa_v2_real | Maltiverse Research Team | 2020-08-27 00:28:27 | 2020-08-27 00:28:27 | ||
| Gen:Variant.Packy | Hybrid-Analysis | 2020-06-29 18:00:34 | 2020-06-29 18:00:34 | ||
| Gen:Variant.Kazy | Hybrid-Analysis | 2020-06-29 17:30:12 | 2020-06-29 17:30:12 | ||
| Malicious site | Hybrid-Analysis | 2020-05-07 07:00:05 | 2020-06-17 07:15:08 | ||
| Suppobox | Bambernek | 2020-06-07 01:51:24 | 2020-06-07 01:51:24 | ||
| Worm.Ngrbot | Hybrid-Analysis | 2020-05-26 05:45:12 | 2020-05-26 05:45:12 | ||
| Vawtrak | Bambernek | 2020-04-17 00:18:17 | 2020-04-17 00:18:17 | ||
| Simda | Bambernek | 2020-04-17 00:18:11 | 2020-04-17 00:18:11 | ||
| Pizd | Bambernek | 2020-04-17 00:18:03 | 2020-04-17 00:18:03 |
Tags
malware pizd c&c simda vawtrak c2 dga suppobox covid19 coronavirus scam phishingWhois information
- AS name
- AS32475 Internap Holding LLC
- AS registry
- arin
- AS date
- 2013-07-18 00:00:00
- AS CIDR
- 162.217.99.0/24
- CIDR
- 162.217.96.0/21
- Registrant
- Internap Holding LLC
- Address
- 250 Williams Street Suite E100
- City
- Norcross
- State
- GA
- Postal code
- 30071
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2020-04-17 00:18:03
- Last updated
- 2025-11-16 01:02:59