52.138.216.83
Classification: Suspicious
52.138.216.83 is a suspicious IP address. Linked to Bundlore malware. Reported by 2 threat sources, last seen 2019-02-21.
MITRE ATT&CK associations
Malware families: BUNDLORE (S0482)
Blacklist sightings showing the 100 most recent of 193
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious site | Hybrid-Analysis | 2018-04-22 15:17:11 | 2019-02-21 02:45:04 | ||
| suspicious.low.ml | Hybrid-Analysis | 2018-11-25 22:00:04 | 2019-02-20 22:00:05 | ||
| Gen:Variant.Symmi | Hybrid-Analysis | 2018-04-19 22:15:14 | 2019-02-20 08:45:10 | ||
| Generic.Malware | Hybrid-Analysis | 2018-04-18 23:00:17 | 2019-02-15 06:00:05 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-04-16 02:00:58 | 2019-02-13 14:00:14 | ||
| Pidief.EB | Hybrid-Analysis | 2019-02-08 04:30:05 | 2019-02-08 04:30:07 | ||
| VB.Chronos.7 | Hybrid-Analysis | 2019-02-05 22:15:18 | 2019-02-05 22:20:51 | ||
| Suspici.8FFB1840 | Hybrid-Analysis | 2019-02-05 12:30:09 | 2019-02-05 12:30:09 | ||
| Phishing site | Hybrid-Analysis | 2018-10-30 23:45:04 | 2019-02-05 00:30:04 | ||
| Trojan.Zamg | Hybrid-Analysis | 2019-02-04 08:00:05 | 2019-02-04 08:00:05 | ||
| Trojan.IcedID.4 | Hybrid-Analysis | 2019-02-02 00:17:07 | 2019-02-02 00:17:07 | ||
| Dropper.Genericr | Hybrid-Analysis | 2019-01-29 02:00:09 | 2019-01-29 02:00:09 | ||
| CVE-2018-0802 | Hybrid-Analysis | 2019-01-28 01:45:04 | 2019-01-28 01:45:04 | ||
| CVE-2017-0147 | Hybrid-Analysis | 2018-06-13 00:45:20 | 2019-01-23 19:15:03 | ||
| Gen:Variant.Application.Strictor | Hybrid-Analysis | 2019-01-22 11:30:07 | 2019-01-22 11:30:07 | ||
| Trojan.InstallCore | Hybrid-Analysis | 2019-01-19 20:15:04 | 2019-01-19 20:15:04 | ||
| Generic.MSIL.Bladabindi | Hybrid-Analysis | 2018-04-19 00:00:26 | 2019-01-13 15:30:15 | ||
| Malware site | Hybrid-Analysis | 2018-11-05 06:00:04 | 2019-01-12 19:00:05 | ||
| Heur.Macro.Downloader | Hybrid-Analysis | 2018-12-26 19:00:04 | 2018-12-26 19:00:04 | ||
| HEUR:Trojan.MSIL.DOTHETUK | Hybrid-Analysis | 2018-12-09 15:00:04 | 2018-12-09 15:00:04 | ||
| BehavesLike.Win64.CoinMiner | Hybrid-Analysis | 2018-12-03 03:45:09 | 2018-12-03 03:45:09 | ||
| Malware.Generic | Hybrid-Analysis | 2018-06-01 22:00:20 | 2018-12-03 00:00:06 | ||
| Agent.OBQ | Hybrid-Analysis | 2018-12-01 15:45:10 | 2018-12-01 15:45:10 | ||
| Sonbokli.A | Hybrid-Analysis | 2018-11-30 19:00:10 | 2018-11-30 19:00:10 | ||
| GenBl.3D08A985 | Hybrid-Analysis | 2018-11-30 16:30:06 | 2018-11-30 16:30:06 | ||
| ISB.Downloader | Hybrid-Analysis | 2018-11-30 11:15:04 | 2018-11-30 11:15:04 | ||
| Trojan.Azden | Hybrid-Analysis | 2018-11-30 08:30:04 | 2018-11-30 08:30:04 | ||
| malicious.high.ml | Hybrid-Analysis | 2018-11-25 15:30:04 | 2018-11-29 21:00:04 | ||
| GenBl.2E7EDB1B | Hybrid-Analysis | 2018-11-29 16:45:13 | 2018-11-29 16:45:13 | ||
| HEUR:Downloader.MSIL.DownloadSponsor | Hybrid-Analysis | 2018-11-29 12:45:06 | 2018-11-29 12:45:06 | ||
| Trojan.Autoruns.GenericKDS | Hybrid-Analysis | 2018-11-15 19:45:04 | 2018-11-29 03:45:06 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2018-05-01 02:00:08 | 2018-11-29 02:45:18 | ||
| Bitrep | Hybrid-Analysis | 2018-11-28 21:30:03 | 2018-11-28 21:30:03 | ||
| Trojan.Emotet | Hybrid-Analysis | 2018-11-28 19:30:06 | 2018-11-28 19:30:06 | ||
| Gen:Heur.MSIL.Bladabindi | Hybrid-Analysis | 2018-11-28 11:45:05 | 2018-11-28 11:45:05 | ||
| Trojan.JS.Agent | Hybrid-Analysis | 2018-11-28 05:15:08 | 2018-11-28 05:15:08 | ||
| Static engine | Hybrid-Analysis | 2018-11-09 18:15:08 | 2018-11-28 04:00:04 | ||
| TROJ_GEN.R002C0OGA18 | Hybrid-Analysis | 2018-11-28 03:15:06 | 2018-11-28 03:15:06 | ||
| Dropper.da | Hybrid-Analysis | 2018-11-27 17:15:12 | 2018-11-27 17:15:12 | ||
| Dropper.A | Hybrid-Analysis | 2018-11-27 13:15:18 | 2018-11-27 13:15:18 | ||
| RP.Generic | Hybrid-Analysis | 2018-11-27 04:45:05 | 2018-11-27 04:45:05 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2018-04-27 08:00:10 | 2018-11-27 04:15:04 | ||
| VEX.Webshell | Hybrid-Analysis | 2018-11-26 09:45:06 | 2018-11-26 09:45:06 | ||
| BehavesLike.Backdoor | Hybrid-Analysis | 2018-11-25 20:15:04 | 2018-11-25 20:15:04 | ||
| Genetic.gen | Hybrid-Analysis | 2018-11-25 04:30:04 | 2018-11-25 04:30:04 | ||
| FileRepMalware | Hybrid-Analysis | 2018-11-14 13:30:04 | 2018-11-24 17:30:04 | ||
| HackTool.CheatEngine | Hybrid-Analysis | 2018-11-24 15:15:04 | 2018-11-24 15:15:04 | ||
| Malware.Heuristic | Hybrid-Analysis | 2018-11-22 17:15:05 | 2018-11-24 08:15:04 | ||
| virus.vbs.qexvmc | Hybrid-Analysis | 2018-11-23 11:45:04 | 2018-11-23 11:45:04 | ||
| Riskware | Hybrid-Analysis | 2018-04-18 16:15:35 | 2018-11-23 10:15:07 | ||
| CVE-2017-8570 | Hybrid-Analysis | 2018-11-23 07:15:05 | 2018-11-23 07:15:05 | ||
| Gen:Variant.Babar | Hybrid-Analysis | 2018-11-23 05:45:04 | 2018-11-23 05:45:04 | ||
| HackTool.Wpakill | Hybrid-Analysis | 2018-11-22 17:30:04 | 2018-11-22 17:30:04 | ||
| BackDoor.IRC.Bot | Hybrid-Analysis | 2018-11-22 08:45:13 | 2018-11-22 08:45:13 | ||
| CVE-2017-11882 | Hybrid-Analysis | 2018-11-09 13:00:10 | 2018-11-22 05:00:07 | ||
| Gen:Variant.Barys | Hybrid-Analysis | 2018-11-22 04:00:04 | 2018-11-22 04:00:04 | ||
| Katusha.m | Hybrid-Analysis | 2018-11-21 14:15:04 | 2018-11-21 14:15:04 | ||
| AIT:Trojan.Nymeria | Hybrid-Analysis | 2018-11-20 18:45:16 | 2018-11-20 18:45:16 | ||
| Trojan.Patched | Hybrid-Analysis | 2018-11-20 13:15:29 | 2018-11-20 13:15:29 | ||
| Outbreak | Hybrid-Analysis | 2018-11-20 10:15:14 | 2018-11-20 10:15:14 | ||
| Application.Hacktool.KMSActivator | Hybrid-Analysis | 2018-11-20 09:30:05 | 2018-11-20 09:30:05 | ||
| VB:Trojan.Valyria | Hybrid-Analysis | 2018-04-16 10:00:10 | 2018-11-19 19:45:10 | ||
| HEUR:Trojan.Staser | Hybrid-Analysis | 2018-11-19 11:45:05 | 2018-11-19 11:45:05 | ||
| CVE-2014-4114 | Hybrid-Analysis | 2018-11-19 08:45:09 | 2018-11-19 08:45:09 | ||
| Trojan.Ole2.Vbs | Hybrid-Analysis | 2018-11-16 17:30:13 | 2018-11-19 08:15:04 | ||
| Unsafe | Hybrid-Analysis | 2018-04-25 08:15:08 | 2018-11-19 04:45:04 | ||
| Trojan.Moneyinst | Hybrid-Analysis | 2018-11-19 00:15:04 | 2018-11-19 00:15:06 | ||
| Trojan.Kryptik | Hybrid-Analysis | 2018-11-18 22:15:05 | 2018-11-18 22:15:05 | ||
| ML.Attribute | Hybrid-Analysis | 2018-04-22 17:45:13 | 2018-11-18 19:00:05 | ||
| QVM41.1.0000.Malware | Hybrid-Analysis | 2018-11-18 12:30:04 | 2018-11-18 12:30:04 | ||
| Trojan.BXNY | Hybrid-Analysis | 2018-11-18 09:15:05 | 2018-11-18 09:15:05 | ||
| HW32.Packed | Hybrid-Analysis | 2018-04-20 05:00:29 | 2018-11-18 03:45:04 | ||
| Gen:Variant.Ser.Jaik | Hybrid-Analysis | 2018-11-17 08:15:04 | 2018-11-17 08:15:04 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2018-04-24 11:30:07 | 2018-11-16 22:15:04 | ||
| QVM06.1.3F4D.Malware | Hybrid-Analysis | 2018-11-16 17:30:14 | 2018-11-16 17:30:14 | ||
| W97M.Downloader | Hybrid-Analysis | 2018-11-16 13:00:23 | 2018-11-16 13:00:23 | ||
| Trojan.Cloptern | Hybrid-Analysis | 2018-11-16 13:00:09 | 2018-11-16 13:00:09 | ||
| Worm.VBNA | Hybrid-Analysis | 2018-11-16 12:15:03 | 2018-11-16 12:15:03 | ||
| Dropper.Daws | Hybrid-Analysis | 2018-11-16 06:15:04 | 2018-11-16 06:15:04 | ||
| Trojan.Bitrep | Hybrid-Analysis | 2018-11-15 11:45:04 | 2018-11-15 11:45:04 | ||
| BehavesLike.Fareit | Hybrid-Analysis | 2018-11-15 08:15:06 | 2018-11-15 08:15:06 | ||
| JS:Trojan.Cryxos | Hybrid-Analysis | 2018-11-15 07:45:09 | 2018-11-15 07:45:09 | ||
| Gen:Variant.Ulise | Hybrid-Analysis | 2018-11-15 03:00:16 | 2018-11-15 03:00:16 | ||
| InstallCore | Hybrid-Analysis | 2018-11-15 02:45:04 | 2018-11-15 02:45:04 | ||
| Injector.EBQV | Hybrid-Analysis | 2018-11-15 02:30:04 | 2018-11-15 02:30:04 | ||
| Trojan.Shelma | Hybrid-Analysis | 2018-11-14 22:17:04 | 2018-11-14 22:17:04 | ||
| VB:Trojan.VBA.Agent | Hybrid-Analysis | 2018-11-14 20:45:20 | 2018-11-14 20:45:20 | ||
| BehavesLike.Win64.Generic | Hybrid-Analysis | 2018-11-14 09:15:06 | 2018-11-14 09:15:06 | ||
| AGEN.1004697 | Hybrid-Analysis | 2018-11-14 08:30:10 | 2018-11-14 08:30:10 | ||
| HackTool.Patcher | Hybrid-Analysis | 2018-11-14 01:00:10 | 2018-11-14 01:00:10 | ||
| Adware.GenericKD | Hybrid-Analysis | 2018-11-13 22:00:04 | 2018-11-13 22:00:04 | ||
| Gen:Variant.Application.Razy | Hybrid-Analysis | 2018-11-13 18:45:07 | 2018-11-13 18:45:07 | ||
| Injector.A.gen | Hybrid-Analysis | 2018-11-13 10:15:04 | 2018-11-13 10:15:04 | ||
| BehavesLike.Generic | Hybrid-Analysis | 2018-11-13 10:00:08 | 2018-11-13 10:00:08 | ||
| DllInject.VR potentially unsafe | Hybrid-Analysis | 2018-11-13 05:30:03 | 2018-11-13 05:30:03 | ||
| Application.CoinMiner | Hybrid-Analysis | 2018-11-12 19:15:03 | 2018-11-12 19:15:03 | ||
| Dotdo.E.gen | Hybrid-Analysis | 2018-11-12 17:15:04 | 2018-11-12 17:15:04 | ||
| Trojan.Nymaim | Hybrid-Analysis | 2018-11-12 06:45:16 | 2018-11-12 06:45:16 | ||
| TROJ_GEN.R002C0OFJ18 | Hybrid-Analysis | 2018-11-12 01:00:09 | 2018-11-12 01:00:09 | ||
| HackTool.Cobalt | Hybrid-Analysis | 2018-11-11 21:45:11 | 2018-11-11 21:45:11 |
Tags
evasive infostealer bundlore coinminer miner pua exploit phishing rat qrat banker downloader ransomware wanacrypt0r wannacry wcry xtreme adware autorun backdoor crypt injector riskware wormWhois information
- AS name
- AS8075 Microsoft Corporation
- AS registry
- arin
- AS date
- 2015-11-24 00:00:00
- AS CIDR
- 52.136.0.0/13
- CIDR
- 52.136.0.0/13, 52.132.0.0/14
- Registrant
- Microsoft Corporation
- Address
- One Microsoft Way
- City
- Dublin
- State
- WA
- Postal code
- D01 P5P5
- Country
- IE — Ireland 🇮🇪
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2018-03-15 07:51:28
- Last updated
- 2025-10-08 16:35:23