211.252.152.47
Classification: Suspicious
211.252.152.47 is a suspicious IP address. Linked to Xbash malware. Reported by 1 threat source, last seen 2025-11-25.
MITRE ATT&CK associations
Malware families: XBASH (S0341)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Xbash | ThreatFox Abuse.ch | 2025-11-25 03:34:58 | 2025-11-25 03:34:58 | malicious-activity | S0341 Xbash |
Tags
coinminerWhois information
- AS name
- AS4766 hankukbohunbokjiiryokongdan
- Registrant
- hankukbohunbokjiiryokongdan
- City
- Seongnam-si
- Postal code
- 13437
- Country
- KR — Korea, Republic of 🇰🇷
- First indexed
- 2025-11-25 03:34:58
- Last updated
- 2025-11-25 03:34:58