83.7.53.157
Classification: Malicious
83.7.53.157 is a malicious IP address in Wroclaw, PL. Linked to Qakbot malware. 6 sightings from 4 threat sources (Mail Spammer), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2023-02-17 11:17:41 | 2026-10-17 03:06:07 | attacker malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2023-02-21 08:15:40 | 2023-03-26 13:14:21 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2023-02-21 08:15:37 | 2023-03-26 13:14:18 | malicious-activity | |
| QakBot | FeodoTracker Abuse.ch | 2023-02-20 00:00:21 | 2023-02-21 00:00:33 | malicious-activity | S0650 QakBot |
| QakBot | ThreatFox Abuse.ch | 2023-02-17 11:17:40 | 2023-02-19 10:18:09 | malicious-activity | S0650 QakBot |
Tags
c&c port:443 oakboat pinkslipbot qbot quakbotWhois information
- AS name
- AS5617 Orange Polska Spolka Akcyjna
- AS registry
- ripencc
- AS date
- 2003-12-03 00:00:00
- AS CIDR
- 83.0.0.0/13
- CIDR
- 83.0.0.0/11
- Registrant
- Orange Polska Spolka Akcyjna
- Address
- Al. Jerozolimskie 160 02-326 Warszawa POLAND
- City
- Wroclaw
- Postal code
- 50-027
- Country
- PL — Poland 🇵🇱
- Contact email
- [email protected]
- First indexed
- 2023-02-17 11:17:40
- Last updated
- 2026-10-17 03:06:08
Malicious IPs in the same CIDR
83.6.36.109 83.4.17.182 83.6.97.111 83.4.158.142 83.6.79.126 83.6.61.152 83.4.91.117 83.4.165.114 83.4.17.115 83.7.99.178 83.6.78.189 83.4.165.218 83.6.32.133 83.6.60.121 83.6.66.154 83.6.12.204 83.6.16.189 83.6.68.174 83.6.93.229 83.7.20.105 83.7.52.249 83.6.10.154 83.6.62.227 83.6.11.162 83.4.67.69