85.207.13.169

Classification: Suspicious

85.207.13.169 is a suspicious IP address. Reported by 2 threat sources, last seen 2021-05-16. Network: AS25248 Server Housing Dc Tower.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET CNC Feodo Tracker Reported CnC Server TCP Emerging Threats 2021-02-02 06:22:59 2021-05-16 22:25:50 malicious-activity
ET CNC Feodo Tracker Reported CnC Server UDP Emerging Threats 2021-02-02 06:23:01 2021-05-16 22:25:50 malicious-activity
VB:Trojan.VBA.Agent Hybrid-Analysis 2020-10-31 11:00:09 2020-10-31 11:00:09
Generic.Malware Hybrid-Analysis 2020-10-30 08:17:08 2020-10-30 08:30:14
W32.AIDetectVM Hybrid-Analysis 2020-10-27 15:15:21 2020-10-27 15:15:21
Dridex.DD Hybrid-Analysis 2020-10-27 11:45:12 2020-10-27 11:45:12
Artemis Hybrid-Analysis 2020-10-26 14:00:11 2020-10-26 14:00:11

Tags

c&c

Whois information

AS name
AS25248 Server Housing Dc Tower
AS registry
ripencc
AS date
2005-01-17 00:00:00
AS CIDR
85.207.0.0/16
CIDR
85.207.13.168/29
Registrant
Server Housing Dc Tower
Address
ASKO Nabytek, spol. s r.o. Nakupni 444/6 102 00, Praha
City
Chlumec
Postal code
403 39
Country
CZ — Czechia 🇨🇿
First indexed
2020-10-26 14:00:11
Last updated
2026-02-20 06:08:42