5.230.74.102
Classification: Neutral
5.230.74.102 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by 4 threat sources (Mail Spammer), last seen 2025-02-15.
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Proxy | IPWhois.io | 2025-02-15 19:05:41 | 2025-02-15 19:05:41 | anonymization | |
| Mail Spammer | Barracuda | 2024-01-04 21:34:23 | 2025-02-15 19:05:41 | ||
| IcedID | ThreatFox Abuse.ch | 2024-01-04 21:17:02 | 2024-01-06 20:18:49 | malicious-activity | S0483 IcedID |
| Mail Spammer | Abuseat.org | 2024-01-04 21:34:23 | 2024-01-04 21:34:23 |
Tags
port:80 bokbot iceidWhois information
- AS name
- AS12586 GHOSTnet Network used for VPS Hosting Services
- AS registry
- ripencc
- AS date
- 2012-09-11 00:00:00
- AS CIDR
- 5.230.0.0/15
- CIDR
- 5.230.74.0/24
- Registrant
- GHOSTnet Network used for VPS Hosting Services
- Address
- Am Dachsbau 17 65812 Bad Soden a. Ts. Deutschland
- City
- Bonn
- Postal code
- 53111
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected]
- First indexed
- 2024-01-04 21:17:02
- Last updated
- 2025-02-15 19:05:41