5.2.68.67
Classification: Malicious
5.2.68.67 is a malicious IP address in Alkmaar, NL. Linked to Warzonerat malware. 5 sightings from 3 threat sources (Mail Spammer), last seen 2026-10-07.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: WARZONERAT (S0670)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2023-09-26 05:17:13 | 2026-10-07 02:41:46 | attacker malicious-activity | |
| Ave Maria | ThreatFox Abuse.ch | 2023-09-26 05:17:10 | 2023-09-28 10:53:11 | malicious-activity | S0670 WarzoneRAT |
| Mail Spammer | Abuseat.org | 2023-09-26 05:17:13 | 2023-09-26 05:17:13 |
Tags
avemariarat c2 historicalandnew warzonerat port:1198 ave_maria warzone rat avemaria port:443 port:11940Whois information
- AS name
- AS60404 The Infrastructure Group B.V.
- AS registry
- ripencc
- AS date
- 2012-04-27 00:00:00
- AS CIDR
- 5.2.64.0/20
- CIDR
- 5.2.64.0/20
- Registrant
- The Infrastructure Group B.V.
- Address
- Havinghastraat 32 1817DA Alkmaar NETHERLANDS
- City
- Alkmaar
- Postal code
- 1811
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2023-09-26 05:17:10
- Last updated
- 2026-10-07 02:41:52
Malicious IPs in the same CIDR
5.2.68.9 5.2.78.69 5.2.74.111 5.2.75.158 5.2.67.21 5.2.67.213 5.2.64.139 5.2.67.180 5.2.79.190 5.2.67.226 5.2.78.37 5.2.68.67 5.2.70.49