41.96.91.111
Classification: Malicious
41.96.91.111 is a malicious IP address in Oran, DZ. Linked to Qakbot malware. 54 sightings from 3 threat sources (Mail Spammer), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2024-04-01 19:19:52 | 2026-10-17 21:27:53 | attacker malicious-activity | |
| QakBot | ThreatFox Abuse.ch | 2024-04-01 19:19:50 | 2024-04-03 18:21:05 | malicious-activity | S0650 QakBot |
| Mail Spammer | Abuseat.org | 2024-04-01 19:19:52 | 2024-04-01 19:19:52 |
Tags
algtel-as qakbot port:443 oakboat pinkslipbot qbot quakbotWhois information
- AS name
- AS36947 Residentiel
- AS registry
- afrinic
- AS date
- 2009-05-04 00:00:00
- AS CIDR
- 41.96.0.0/16
- CIDR
- 41.96.0.0/16
- Registrant
- Residentiel
- Address
- Alger
- City
- Oran
- Postal code
- 31000
- Country
- DZ — Algeria 🇩🇿
- First indexed
- 2024-04-01 19:19:50
- Last updated
- 2026-10-17 21:27:54
Malicious IPs in the same CIDR
41.96.83.214 41.96.91.111 41.96.205.177 41.96.102.114 41.96.10.172