190.254.253.254

Classification: Malicious

190.254.253.254 is a malicious IP address in Bogota, CO. Linked to Zeroaccess malware. 8 sightings from 3 threat sources (Mail Spammer), last seen 2026-10-14.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

MITRE ATT&CK associations

Malware families: ZEROACCESS (S0027)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2026-04-29 21:28:12 2026-10-14 12:25:14 attacker malicious-activity
Trojan.Generic.KDZ Hybrid-Analysis 2020-03-02 06:45:09 2020-03-03 06:45:22
Trojan.Generic.KD Hybrid-Analysis 2020-03-02 07:00:37 2020-03-02 07:00:37
Backdoor.ZAccess Hybrid-Analysis 2019-06-06 21:31:41 2020-03-02 06:30:03 S0027 Zeroaccess
Gen:Variant.Sirefef Hybrid-Analysis 2019-07-31 14:45:21 2019-07-31 14:46:04 S0027 Zeroaccess
DeepScan:Generic.FakeAv.5 Hybrid-Analysis 2019-06-06 21:45:59 2019-06-06 21:46:33
botnet ,rootkit ,zeroaccess Maltiverse 2018-03-12 15:38:08 2018-03-12 15:38:08

Tags

botnet rootkit zeroaccess

Whois information

AS name
AS3816 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC
AS registry
lacnic
AS date
2008-04-22 00:00:00
AS CIDR
190.254.240.0/20
CIDR
190.252.0.0/14
Registrant
COLOMBIA TELECOMUNICACIONES S.A. ESP BIC
City
Bogota
Postal code
111411
Country
CO — Colombia 🇨🇴
Contact email
[email protected]
First indexed
2018-03-12 15:38:08
Last updated
2026-10-14 12:25:15

Malicious IPs in the same CIDR

190.254.253.254