75.90.41.108
Classification: Neutral
75.90.41.108 is a neutral IP address. Reported by 3 threat sources, last seen 2023-05-21. Network: AS7029 WINDSTREAM COMMUNICATIONS LLC.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2023-04-22 11:58:14 | 2023-05-21 10:39:30 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2023-04-22 11:58:11 | 2023-05-21 10:39:26 | malicious-activity | |
| QakBot | FeodoTracker Abuse.ch | 2023-04-21 00:00:31 | 2023-04-24 00:00:23 | malicious-activity | S0650 QakBot |
| QakBot | ThreatFox Abuse.ch | 2023-04-20 17:17:39 | 2023-04-22 16:18:50 | malicious-activity | S0650 QakBot |
Tags
c&c port:995 oakboat pinkslipbot qbot quakbotWhois information
- AS name
- AS7029 WINDSTREAM COMMUNICATIONS LLC
- AS registry
- arin
- AS date
- 2006-10-17 00:00:00
- AS CIDR
- 75.90.40.0/21
- CIDR
- 75.88.0.0/14
- Registrant
- WINDSTREAM COMMUNICATIONS LLC
- Address
- 4001 Rodney Parham Rd
- City
- Lexington
- State
- KY
- Postal code
- 40517
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2023-04-20 17:17:39
- Last updated
- 2026-09-10 03:41:06