193.106.175.40

Classification: Neutral

193.106.175.40 is a neutral IP address: not currently flagged by Maltiverse. Network: AS50465 IQHost Ltd.

MITRE ATT&CK associations

Malware families: SOCGHOLISH (S1124)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
FAKEUPDATES ThreatFox Abuse.ch 2024-01-29 14:17:04 2024-01-31 13:18:28 malicious-activity S1124 SocGholish
NTP Open Resolver Rapid7 Open Data 2018-12-03 05:30:09 2019-08-05 03:23:44

Tags

ntp reflection amplification open resolver monlist keitarotds socgholish port:443 fakeupdate

Whois information

AS name
AS50465 IQHost Ltd
AS registry
ripencc
AS date
2010-01-12 00:00:00
AS CIDR
193.106.175.0/24
Registrant
IQHost Ltd
City
Moscow
Postal code
109012
Country
RU — Russian Federation 🇷🇺
First indexed
2018-12-03 05:30:09
Last updated
2026-09-06 17:39:33

Malicious IPs in the same CIDR

193.106.175.35