52.138.148.89

Classification: Suspicious

52.138.148.89 is a suspicious IP address in Dublin, IE. 91 sightings from Hybrid-Analysis and Maltiverse (Malicious site), last seen 2019-08-26.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious site Hybrid-Analysis 2018-09-10 02:45:12 2019-08-26 14:00:26
Generic.Malware Hybrid-Analysis 2018-04-29 03:15:18 2019-01-28 08:15:04
Exploit.BypassUAC Hybrid-Analysis 2018-12-03 09:45:20 2018-12-03 09:45:20
Static engine Hybrid-Analysis 2018-09-03 13:15:08 2018-12-03 04:15:06
Generic.MSIL.DownloaderB Hybrid-Analysis 2018-12-01 17:30:03 2018-12-01 17:30:03
Trojan.Wauchos Hybrid-Analysis 2018-12-01 15:45:07 2018-12-01 15:45:07
Trojan.MSIL.Crypt Hybrid-Analysis 2018-11-30 20:00:10 2018-11-30 20:00:10
GenBl.2E7EDB1B Hybrid-Analysis 2018-11-29 16:45:13 2018-11-29 16:45:13
Malware site Hybrid-Analysis 2018-09-10 15:15:10 2018-11-28 20:15:06
Phishing site Hybrid-Analysis 2018-08-23 12:01:42 2018-11-28 09:30:14
ISB.Downloader Hybrid-Analysis 2018-11-27 14:45:13 2018-11-27 14:45:13
Gen:Variant.Symmi Hybrid-Analysis 2018-11-26 13:45:08 2018-11-26 13:45:08
suspicious.low.ml Hybrid-Analysis 2018-11-25 22:00:04 2018-11-25 22:00:04
MSIL_Troj.NT.gen Hybrid-Analysis 2018-11-23 22:15:03 2018-11-23 22:15:03
VB:Trojan.Valyria Hybrid-Analysis 2018-10-03 17:45:08 2018-11-22 16:30:06
VB.Dynamite.1 Hybrid-Analysis 2018-11-22 14:45:05 2018-11-22 14:45:05
Trojan.Agent Hybrid-Analysis 2018-11-21 00:30:05 2018-11-21 00:30:05
FileRepMalware Hybrid-Analysis 2018-09-10 10:15:12 2018-11-16 02:00:09
Trojan.Bitrep Hybrid-Analysis 2018-11-15 11:45:04 2018-11-15 11:45:04
Generic.MSIL.Bladabindi Hybrid-Analysis 2018-11-13 18:00:11 2018-11-13 18:00:11
Gen:Variant.Barys Hybrid-Analysis 2018-11-12 18:30:05 2018-11-12 18:30:05
Heuristic Hybrid-Analysis 2018-11-08 15:45:27 2018-11-08 15:45:27
Gen:Variant.RevengeRat Hybrid-Analysis 2018-11-07 21:45:06 2018-11-07 21:45:06
Trojan.Generic Hybrid-Analysis 2018-07-10 13:15:40 2018-11-07 19:00:13
VB.EmoDldr.6 Hybrid-Analysis 2018-10-09 06:00:06 2018-10-09 06:00:06
Trojan.Script Hybrid-Analysis 2018-10-09 05:45:11 2018-10-09 05:45:11
Gen:Variant.Jacard Hybrid-Analysis 2018-10-03 04:15:11 2018-10-03 04:15:11
Unsafe Hybrid-Analysis 2018-09-21 20:00:05 2018-09-26 09:30:06
AdWare.FileTour Hybrid-Analysis 2018-09-26 09:15:04 2018-09-26 09:15:04
HW32.Packed Hybrid-Analysis 2018-09-26 00:30:04 2018-09-26 00:30:04
Trojan.Bumat Hybrid-Analysis 2018-09-26 00:15:05 2018-09-26 00:15:05
Exploit.Rtf.CVE2012 Hybrid-Analysis 2018-09-25 11:17:05 2018-09-25 11:17:05
Pidief.EB Hybrid-Analysis 2018-09-25 09:45:19 2018-09-25 09:45:19
ml.Generic Hybrid-Analysis 2018-09-22 16:15:07 2018-09-25 09:15:07
W32.Malware Hybrid-Analysis 2018-09-23 17:45:07 2018-09-23 17:45:07
Trojan.Inject Hybrid-Analysis 2018-09-23 16:45:08 2018-09-23 16:45:08
Trojan.Downloader Hybrid-Analysis 2018-09-22 20:00:21 2018-09-22 20:00:21
Injector.EANM Hybrid-Analysis 2018-09-20 07:45:09 2018-09-20 07:45:09
PUA.Hacktool Hybrid-Analysis 2018-09-19 22:30:07 2018-09-19 22:30:07
FakeAlert.FY.gen Hybrid-Analysis 2018-09-18 22:30:17 2018-09-18 22:30:17
CVE-2017-0199 Hybrid-Analysis 2018-09-18 13:45:18 2018-09-18 13:45:18
Gen:Variant.Application.Keygen Hybrid-Analysis 2018-09-14 20:30:11 2018-09-14 20:30:11
Riskware.Ftpd Hybrid-Analysis 2018-09-14 14:15:20 2018-09-14 14:15:20
TROJ_GEN.R002C0OB818 Hybrid-Analysis 2018-09-13 16:30:18 2018-09-13 16:30:18
VBKrypt.EK.gen Hybrid-Analysis 2018-09-12 22:00:40 2018-09-12 22:00:40
Kryptik.GKQR Hybrid-Analysis 2018-09-12 21:45:22 2018-09-12 21:45:22
PAK_Generic.005 Hybrid-Analysis 2018-09-12 19:45:29 2018-09-12 19:45:29
virus.vbs.qexvmc Hybrid-Analysis 2018-09-12 06:00:08 2018-09-12 06:00:08
Rimecud.Q.gen Hybrid-Analysis 2018-09-11 15:30:32 2018-09-11 15:30:32
PAK_Generic.001 Hybrid-Analysis 2018-09-11 15:00:32 2018-09-11 15:00:32
W97M.Downloader Hybrid-Analysis 2018-09-11 13:00:34 2018-09-11 13:00:34
Java.Trojan.GenericGB Hybrid-Analysis 2018-09-11 10:45:16 2018-09-11 10:45:16
HTML_PHISH.TICOGFE Hybrid-Analysis 2018-09-10 18:00:16 2018-09-10 18:00:16
Trojan.WisdomEyes.16070401.9500 Hybrid-Analysis 2018-09-10 15:15:31 2018-09-10 15:15:31
W32.eHeur Hybrid-Analysis 2018-09-10 10:15:08 2018-09-10 10:15:08
Domepidief.A Hybrid-Analysis 2018-09-10 08:00:38 2018-09-10 08:00:38
Gen:Variant.Bodius Hybrid-Analysis 2018-09-09 14:16:03 2018-09-09 14:16:03
Gen:Trojan.Heur.D Hybrid-Analysis 2018-09-08 23:30:06 2018-09-08 23:30:06
Injector.C2687509 Hybrid-Analysis 2018-09-07 06:00:10 2018-09-07 06:00:10
Gen Hybrid-Analysis 2018-08-27 21:45:06 2018-08-27 21:45:06
Backdoor.Androm Hybrid-Analysis 2018-08-22 12:15:14 2018-08-22 12:15:14
LooksLike.Macro.Malware Hybrid-Analysis 2018-08-22 03:45:13 2018-08-22 03:45:13
Gen:Variant.Jaike Hybrid-Analysis 2018-08-17 16:01:02 2018-08-17 16:01:02
TSPY_HPLOKI.SMBD Hybrid-Analysis 2018-08-13 12:45:56 2018-08-13 12:45:56
MSIL_Kryptik.BQ2.gen Hybrid-Analysis 2018-07-30 12:02:29 2018-07-30 12:02:29
PUP.Optional.InstallCore Hybrid-Analysis 2018-07-26 08:15:46 2018-07-26 08:15:46
Possible_Powload Hybrid-Analysis 2018-06-28 10:30:19 2018-06-28 10:30:19
VBA.Trojan Hybrid-Analysis 2018-06-21 06:00:10 2018-06-21 06:00:10
Heur.Macro.Generic.Gen Hybrid-Analysis 2018-06-18 17:45:14 2018-06-18 17:45:14
njrat ,rat Maltiverse 2018-03-07 09:36:09 2018-03-07 09:36:09
pua Maltiverse 2018-02-01 06:13:02 2018-02-28 08:31:03
rat Maltiverse 2018-02-13 08:27:42 2018-02-25 08:22:18
exploit,financial,retefe,trojan Maltiverse 2018-02-12 12:33:34 2018-02-12 12:33:34
banker,lokibot,ransomware Maltiverse 2018-02-07 11:18:04 2018-02-07 11:18:04
exploit,spectre Maltiverse 2018-02-05 06:50:02 2018-02-05 06:50:02
hacktool Maltiverse 2018-02-04 20:24:54 2018-02-04 20:24:54
coinminer,miner Maltiverse 2018-02-04 17:17:40 2018-02-04 17:17:40
banker,coinminer,miner,ramnit Maltiverse 2018-02-04 16:20:53 2018-02-04 16:20:53
exploit Maltiverse 2018-02-04 07:17:57 2018-02-04 07:17:57
qrat,rat Maltiverse 2018-02-02 17:18:16 2018-02-02 17:18:16
sinkhole Maltiverse 2018-02-01 05:32:27 2018-02-01 05:32:27
evasive,miner Maltiverse 2018-01-19 08:25:17 2018-01-19 08:25:17
evasive,loadmoney,pup Maltiverse 2018-01-16 18:17:49 2018-01-16 18:17:49
adwind,evasive,qrat,rat Maltiverse 2018-01-15 06:52:18 2018-01-15 06:52:18
phishing Maltiverse 2018-01-14 16:16:10 2018-01-14 16:16:10
autoit Maltiverse 2018-01-13 18:32:19 2018-01-13 18:32:19
banker,zbot,zeus Maltiverse 2018-01-07 14:30:34 2018-01-07 14:30:34
apt,apt28,apt29,infostealer,qakbot,zemot Maltiverse 2017-12-25 18:00:49 2017-12-25 18:00:49
pony,trojan Maltiverse 2017-12-24 23:19:59 2017-12-24 23:19:59
evasive Maltiverse 2017-12-21 08:00:27 2017-12-21 08:00:27
apt,irontiger Maltiverse 2017-12-18 19:01:17 2017-12-18 19:01:17

Tags

apt irontiger sinkhole pua qrat rat exploit banker coinminer miner ramnit hacktool spectre lokibot ransomware financial retefe trojan njrat

Whois information

AS name
AS8075 Microsoft Corporation
AS registry
arin
AS date
2015-11-24 00:00:00
AS CIDR
52.136.0.0/13
CIDR
52.136.0.0/13, 52.132.0.0/14
Registrant
Microsoft Corporation
Address
One Microsoft Way
City
Dublin
State
WA
Postal code
D01 P5P5
Country
IE — Ireland 🇮🇪
Contact email
[email protected], [email protected], [email protected]
First indexed
2017-12-18 19:01:17
Last updated
2025-11-18 09:36:52