5.2.67.108

Classification: Suspicious

5.2.67.108 is a suspicious IP address. Reported by 2 threat sources, last seen 2022-03-22. Network: AS60404 TIG.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
BazarLoader FeodoTracker Abuse.ch 2022-02-21 00:00:22 2022-03-22 00:00:13 malicious-activity
BazarBackdoor ThreatFox Abuse.ch 2022-02-21 00:02:10 2022-02-21 00:02:10 malicious-activity

Tags

bazarloader port:443 beerbot kegtap team9backdoor bazaloader

Whois information

AS name
AS60404 TIG
AS registry
ripencc
AS date
2012-04-27 00:00:00
AS CIDR
5.2.64.0/20
CIDR
5.2.67.0/24
Registrant
TIG
Address
Havinghastraat 32 1817DA Alkmaar (The Netherlands)
City
Dronten
Postal code
8251 RS
Country
NL — Netherlands 🇳🇱
First indexed
2022-02-21 00:00:22
Last updated
2025-10-22 17:12:44

Malicious IPs in the same CIDR

5.2.78.69 5.2.75.158 5.2.74.111 5.2.67.21 5.2.67.213 5.2.64.139 5.2.67.180 5.2.79.190 5.2.67.226 5.2.72.110 5.2.70.49