42.56.79.189

Classification: Neutral

42.56.79.189 is a neutral IP address. Reported by 4 threat sources, last seen 2020-08-17. Network: AS4837 CNCGROUP China169 Backbone.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious site Hybrid-Analysis 2018-06-01 20:01:02 2020-08-17 22:15:16
Malware Download Abuse.ch 2019-06-01 00:05:18 2020-08-04 15:15:15 malicious-activity
Generic.Malware Hybrid-Analysis 2018-08-10 03:00:14 2020-07-03 15:00:05
zoom phishing Antiphishing.com.ar 2020-05-29 02:57:10 2020-06-24 03:21:03
Malware site Hybrid-Analysis 2018-09-04 08:30:11 2020-04-21 23:15:14
HEUR:RiskTool.KuaiZip Hybrid-Analysis 2020-03-04 00:30:22 2020-03-04 00:30:22
Adware Hybrid-Analysis 2019-12-02 19:00:15 2019-12-02 19:00:16
Gen:Variant.Razy Hybrid-Analysis 2018-07-02 00:15:21 2018-07-02 00:15:21
Gen:Variant.Symmi Hybrid-Analysis 2018-06-01 09:15:12 2018-06-01 09:15:12
downloader,trojan Maltiverse 2017-12-28 10:16:03 2017-12-28 10:16:03

Tags

exe phishing

Whois information

AS name
AS4837 CNCGROUP China169 Backbone
AS registry
apnic
AS date
2011-02-22 00:00:00
AS CIDR
42.56.0.0/14
CIDR
42.56.0.0/14
Registrant
UNICOM Liaoning Province Network China Unicom No.21, Jin-Rong Street Beijing 100033
Address
No.21,Financial Street Beijing,100033 P.R.China
Country
CN — China 🇨🇳
Contact email
[email protected], [email protected]
First indexed
2017-12-28 10:16:03
Last updated
2020-08-17 22:15:16

Malicious IPs in the same CIDR

42.57.149.55 42.57.151.116 42.56.239.122 42.59.236.147 42.56.239.111 42.56.239.196 42.59.110.125 42.59.103.218 42.56.238.180 42.59.102.196 42.59.101.97 42.56.239.151 42.59.232.35 42.59.101.200 42.56.239.46 42.56.238.35 42.59.102.142 42.56.238.101