5.79.79.212
Classification: Suspicious
5.79.79.212 is a suspicious IP address. Reported by 4 threat sources, last seen 2021-02-11. Network: AS60781 Leaseweb Netherlands B.V..
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | Hybrid-Analysis | 2019-02-27 16:00:10 | 2021-02-11 19:15:50 | ||
| Phishing site | Hybrid-Analysis | 2020-03-04 03:45:04 | 2020-03-04 03:45:04 | ||
| banjori | Bambernek | 2018-07-04 06:46:26 | 2019-11-23 12:13:34 | anomalous-activity | |
| Vawtrak | Bambernek | 2019-11-07 06:58:39 | 2019-11-07 06:58:39 | ||
| virut | Maltiverse Research Team | 2019-05-11 01:47:07 | 2019-05-11 01:47:07 | ||
| Spamming | Alienvault Ip Reputation Database | 2018-09-04 06:42:20 | 2019-01-29 06:36:49 | ||
| Simda | Bambernek | 2018-07-20 06:47:34 | 2018-07-20 06:47:34 |
Tags
malware banjori c&c simda c2 dga vawtrakWhois information
- AS name
- AS60781 Leaseweb Netherlands B.V.
- AS registry
- ripencc
- AS date
- 2012-06-14 00:00:00
- AS CIDR
- 5.79.64.0/18
- Registrant
- Leaseweb Netherlands B.V.
- City
- Amsterdam
- Postal code
- 1012 JS
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2018-07-04 06:46:26
- Last updated
- 2025-12-28 04:33:03
Malicious IPs in the same CIDR
5.79.98.35 5.79.86.16 5.79.64.140 5.79.83.217 5.79.115.233 5.79.71.244 5.79.66.19 5.79.109.48 5.79.72.113 5.79.77.33 5.79.78.92 5.79.73.149