5.134.122.237
Classification: Malicious
5.134.122.237 is a malicious IP address in Venafro, IT. Linked to Get2 malware. 73 sightings from 6 threat sources (DDoS Attacker), last seen 2026-10-14.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: GET2 (S0460)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DDoS Attacker | Blocklist.net.ua | 2026-04-20 12:01:40 | 2026-10-14 16:01:51 | attacker malicious-activity | |
| Empty reason | Blocklist.net.ua | 2026-09-04 16:02:59 | 2026-09-11 16:00:22 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-04-19 20:35:07 | 2026-06-02 04:46:28 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2026-05-09 05:00:45 | 2026-05-11 05:00:55 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2026-05-09 03:00:54 | 2026-05-11 03:01:03 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-03-31 00:06:12 | 2026-05-06 05:00:38 | anomalous-activity | |
| Malicious site | Hybrid-Analysis | 2020-08-24 13:30:19 | 2020-08-24 13:30:19 | ||
| Get2 | Maltiverse Research Team | 2020-08-19 14:17:54 | 2020-08-19 14:17:54 | S0460 Get2 | |
| Phishing Generic/Spear Phishing | OpenPhish | 2018-07-26 11:45:03 | 2018-07-26 11:45:03 |
Tags
phishing downloader captcha xl4 macros html covid19 abuse apache ddos rfi attacker login bruteforce bot joomla wordpressWhois information
- AS name
- AS3242 Fabio Mascio
- AS registry
- ripencc
- AS date
- 2012-07-10 00:00:00
- AS CIDR
- 5.134.120.0/21
- Registrant
- Fabio Mascio
- City
- Venafro
- Postal code
- 86079
- Country
- IT — Italy 🇮🇹
- First indexed
- 2018-07-26 11:45:03
- Last updated
- 2026-10-14 16:01:52