49.235.244.65

Classification: Neutral

49.235.244.65 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by 3 threat sources, last seen 2021-03-03.

MITRE ATT&CK associations

Malware families: POWERSTATS (S0223) EMOTET (S0367)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious Hostname Cyber Threat Coalition 2020-12-16 07:42:30 2021-03-03 17:21:56 malicious-activity
Trojan.W97M.EMOTET Hybrid-Analysis 2021-01-21 16:15:21 2021-01-21 16:15:25 S0367 Emotet
Agent Hybrid-Analysis 2021-01-06 11:45:32 2021-01-06 11:45:36
VB:Trojan.Valyria Hybrid-Analysis 2020-12-22 16:45:38 2020-12-22 16:45:39 S0223 POWERSTATS
LooksLike.Macro.Malware Hybrid-Analysis 2020-12-21 18:15:25 2020-12-21 18:17:25
Covid19 scam Cyber Threat Coalition 2020-11-20 23:29:48 2020-12-13 03:46:15 malicious-activity
VB:Trojan.VBA.Agent Hybrid-Analysis 2020-10-27 03:30:20 2020-10-27 15:30:21
Trojan.Generic Hybrid-Analysis 2020-10-26 15:15:18 2020-10-26 20:30:04
Heur.Macro.Generic.h Hybrid-Analysis 2020-10-26 20:00:08 2020-10-26 20:00:08
Downloader.dha Hybrid-Analysis 2020-10-26 20:00:06 2020-10-26 20:00:06
Parasite traffic on site katerinalisenko.com. Blocklist.net.ua 2019-11-05 00:48:36 2019-11-05 07:14:36
Parasite traffic on site sanprofi.com.ua. Blocklist.net.ua 2019-10-17 00:30:13 2019-10-17 07:25:08
Parasite traffic on site originall.in.ua. Blocklist.net.ua 2019-10-04 00:48:02 2019-10-04 07:15:07

Tags

abuse covid19 coronavirus scam phishing

Whois information

AS name
AS45090 Tencent cloud computing Beijing Co., Ltd.
Registrant
Tencent cloud computing Beijing Co., Ltd.
City
Shanghai
Postal code
202400
Country
CN — China 🇨🇳
First indexed
2019-10-03 23:44:02
Last updated
2026-10-13 21:57:04