5.79.79.209
Classification: Suspicious
5.79.79.209 is a suspicious IP address. Reported by 5 threat sources, last seen 2020-02-07. Network: AS60781 Leaseweb Netherlands B.V..
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | Hybrid-Analysis | 2019-04-03 00:45:09 | 2020-02-07 15:00:29 | ||
| Malicious site | Hybrid-Analysis | 2019-11-26 21:15:04 | 2019-11-26 21:15:04 | ||
| Vawtrak | Bambernek | 2019-11-10 06:32:53 | 2019-11-10 06:32:53 | ||
| apt | Maltiverse Research Team | 2019-10-08 16:05:16 | 2019-10-08 16:05:16 | ||
| Spamming | Alienvault Ip Reputation Database | 2018-09-03 06:41:52 | 2019-01-29 06:36:54 | ||
| virut | Maltiverse Research Team | 2018-10-27 01:52:58 | 2018-11-16 01:58:58 | ||
| Pykspa | Bambernek | 2018-10-24 06:50:44 | 2018-10-24 06:50:44 | ||
| Botnet Command and Control Server | IBM X-Force Exchange | 2018-07-07 19:07:00 | 2018-09-13 13:09:00 | ||
| banjori | Bambernek | 2018-07-21 06:29:24 | 2018-07-21 06:29:24 | ||
| Simda | Bambernek | 2018-07-17 06:41:12 | 2018-07-17 06:41:12 |
Tags
malware simda c&c banjori pykspa c2 dga apt vawtrakWhois information
- AS name
- AS60781 Leaseweb Netherlands B.V.
- AS registry
- ripencc
- AS date
- 2012-06-14 00:00:00
- AS CIDR
- 5.79.64.0/18
- CIDR
- 5.79.64.0/18
- Registrant
- Leaseweb Netherlands B.V.
- Address
- [email protected]. To ensure proper processing of your abuse notification, please visit the website www.leaseweb.com/abuse for notification requirements. All police and other government agency requests must be sent to [email protected].
- City
- Amsterdam
- Postal code
- 1012 JS
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2018-07-17 06:41:12
- Last updated
- 2025-12-28 04:33:07
Malicious IPs in the same CIDR
5.79.66.19 5.79.98.35 5.79.86.16 5.79.64.140 5.79.83.217 5.79.115.233 5.79.71.244 5.79.109.48 5.79.72.113 5.79.77.33 5.79.78.92 5.79.73.149