5.42.66.0

Classification: Neutral

5.42.66.0 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by 3 threat sources (Malware Download), last seen 2024-01-25.

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154) AMADEY (S1025)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Amadey ThreatFox Abuse.ch 2024-01-24 12:17:33 2024-01-25 16:18:55 malicious-activity S1025 Amadey
Malware Download URLhaus Abuse.ch 2024-01-04 03:18:43 2024-01-09 06:19:51 malicious-activity
Malicious URL Hybrid-Analysis 2024-01-04 05:15:04 2024-01-04 05:15:04
Cobalt Strike ThreatFox Abuse.ch 2023-05-18 12:17:42 2023-05-21 12:18:13 malicious-activity S0154 Cobalt Strike

Tags

cjsc kolomna-sviaz tv cobaltstrike cs-watermark-674054486 port:81 agentemis beacon cobeacon port:8081 partner-as port:8008 port:4443 32 amadey viriback port:80

Whois information

AS name
AS39493 CJSC Kolomna-Sviaz TV
AS registry
ripencc
AS date
2012-05-16 00:00:00
AS CIDR
5.42.64.0/20
CIDR
5.42.66.0/24
Registrant
CJSC Kolomna-Sviaz TV
Address
Moscow, Krasnopresnenskaya emb. 12-17
City
Kolomna
Postal code
140408
Country
RU — Russian Federation 🇷🇺
Contact email
[email protected]
First indexed
2023-05-18 12:17:42
Last updated
2026-09-13 11:41:55

Malicious IPs in the same CIDR

5.42.73.166