185.6.242.251

Classification: Neutral

185.6.242.251 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by 8 threat sources (LiteHTTP, Citadel), last seen 2021-05-01.

MITRE ATT&CK associations

Malware families: PONY (S0453) LOKIBOT (S0447)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Lokibot Cybercrime-tracker.net 2018-04-15 00:00:00 2021-05-01 11:22:04 malicious-activity S0447 Lokibot
LiteHTTP Cybercrime-tracker.net 2018-04-15 00:00:00 2021-05-01 11:22:03 malicious-activity
Pony Cybercrime-tracker.net 2018-04-15 00:00:00 2021-05-01 11:22:02 malicious-activity S0453 Pony
Citadel Cybercrime-tracker.net 2018-04-19 00:00:00 2021-05-01 11:21:56 malicious-activity
Stealer Cybercrime-tracker.net 2018-04-15 00:00:00 2021-04-27 11:02:37 malicious-activity
ET CNC Zeus Tracker Reported CnC Server UDP Emerging Threats 2018-05-01 09:17:25 2019-07-09 08:19:13
ET CNC Zeus Tracker Reported CnC Server TCP Emerging Threats 2018-05-01 09:17:25 2019-07-07 01:45:16
ZeuS Zeustracker 2018-04-27 10:16:03 2018-10-07 09:55:15
Mining pool Telefonica CO SOC 2018-07-04 09:55:31 2018-08-18 09:21:30
Generic.Malware Hybrid-Analysis 2018-04-24 22:00:41 2018-06-20 11:01:11
Trojan.Z.Injector.583680 Hybrid-Analysis 2018-06-19 06:45:46 2018-06-19 06:45:46
TSPY_HPLOKI.SMBD Hybrid-Analysis 2018-05-08 15:16:04 2018-06-19 04:17:12
W32.eHeur Hybrid-Analysis 2018-06-15 04:00:22 2018-06-15 04:00:22
TSPY_HPLOKI.SMALY Hybrid-Analysis 2018-06-15 03:45:25 2018-06-15 03:45:25
Malware site Hybrid-Analysis 2018-06-12 13:15:16 2018-06-12 13:15:16
Trojan.Agent Hybrid-Analysis 2018-04-23 01:45:28 2018-06-08 11:30:17
CVE-2017-0199 Hybrid-Analysis 2018-06-08 10:30:25 2018-06-08 10:30:25
Gen:Variant.Strictor Hybrid-Analysis 2018-05-22 14:30:22 2018-06-01 05:15:43
CVE-2017-1188 Hybrid-Analysis 2018-05-23 09:15:08 2018-05-31 02:00:27
Gen:Variant.Zusy Hybrid-Analysis 2018-04-25 02:30:21 2018-05-30 05:15:15
Phishing Phishtank 2018-05-20 20:14:26 2018-05-20 20:14:26
Gen:Variant.Graftor Hybrid-Analysis 2018-05-16 00:15:54 2018-05-16 00:15:54
W97M.Downloader Hybrid-Analysis 2018-05-14 11:30:22 2018-05-14 11:30:22
Gen:Variant.Razy Hybrid-Analysis 2018-05-10 17:00:11 2018-05-10 17:00:11
ML.Attribute Hybrid-Analysis 2018-05-10 09:00:23 2018-05-10 09:00:23
VB:Trojan.Valyria Hybrid-Analysis 2018-05-07 06:45:21 2018-05-09 14:16:02
TSPY_HPLOKI.SMAL1 Hybrid-Analysis 2018-05-09 14:00:16 2018-05-09 14:00:16
Injector.DXRT Hybrid-Analysis 2018-05-04 16:45:23 2018-05-08 08:45:22
Gen:Variant.MSILPerseus Hybrid-Analysis 2018-05-05 23:17:11 2018-05-05 23:17:11
Gen:Variant.Ursu Hybrid-Analysis 2018-05-05 23:15:08 2018-05-05 23:15:08
Malware.HighConfidence Hybrid-Analysis 2018-05-04 10:45:46 2018-05-04 10:45:46
DangerousObject.Multi Hybrid-Analysis 2018-04-26 05:15:06 2018-05-03 01:30:17
Injector.DXRU Hybrid-Analysis 2018-05-02 14:15:39 2018-05-02 14:15:39
Trojan.Generic Hybrid-Analysis 2018-04-16 02:00:50 2018-04-28 12:00:09
QVM05.1.BFEC.Malware Hybrid-Analysis 2018-04-26 09:30:08 2018-04-26 09:30:08
Trojan.BEJ.gen Hybrid-Analysis 2018-04-24 15:00:08 2018-04-24 15:00:08
Malware Hybrid-Analysis 2018-04-24 04:45:24 2018-04-24 04:45:24
TSPY_HPLOKI.SM1 Hybrid-Analysis 2018-04-23 01:45:17 2018-04-23 01:45:17
Injector.DXHZ Hybrid-Analysis 2018-04-16 16:07:24 2018-04-16 16:07:24
Injector.DXJB Hybrid-Analysis 2018-04-16 09:15:11 2018-04-16 09:15:11
evasive Maltiverse 2018-03-20 02:15:24 2018-03-20 02:15:24
SSH Attacker Blocklist.de 2017-11-22 15:25:49 2017-11-22 15:25:49

Tags

ssh bruteforce bot evasive zeus c2 c&c trojan banker phishing miner coinminer bitcoin

Whois information

AS name
AS203591 TECNO GENERAL S.R.L
AS registry
ripencc
AS date
2012-10-16 00:00:00
AS CIDR
185.6.240.0/22
CIDR
185.6.242.0/24
Registrant
TECNO GENERAL S.R.L
Address
TECNO GENERAL SRL VIA INDUSTRIA 10 63023 FERMO Italy
City
Civitanova Marche
Postal code
62012
Country
IT — Italy 🇮🇹
First indexed
2017-11-22 15:25:49
Last updated
2026-09-07 11:56:56