85.247.67.210

Classification: Neutral

85.247.67.210 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by 5 threat sources (Mail Spammer), last seen 2023-09-03.

MITRE ATT&CK associations

Malware families: QAKBOT (S0650)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET CNC Feodo Tracker Reported CnC Server UDP Emerging Threats 2023-07-11 13:22:29 2023-09-03 12:16:52 malicious-activity
ET CNC Feodo Tracker Reported CnC Server TCP Emerging Threats 2023-07-11 13:22:24 2023-09-03 12:16:49 malicious-activity
QakBot FeodoTracker Abuse.ch 2023-07-10 00:00:25 2023-08-04 00:00:21 malicious-activity S0650 QakBot
QakBot ThreatFox Abuse.ch 2023-07-09 09:17:52 2023-07-10 06:18:07 malicious-activity S0650 QakBot
Mail Spammer Barracuda 2023-07-09 09:17:52 2023-07-09 09:17:52
Mail Spammer Abuseat.org 2023-07-09 09:17:52 2023-07-09 09:17:52

Tags

c&c meo-residencial qakbot port:2222 oakboat pinkslipbot qbot quakbot

Whois information

AS name
AS3243 Servicos De Comunicacoes E Multimedia S A
AS registry
ripencc
AS date
2004-01-03 00:00:00
AS CIDR
85.240.0.0/13
CIDR
85.246.0.0/15
Registrant
PT Comunicacoes S.A. Dynamic Address Range
Address
Local Internet Registry Management MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A. Av. Fontes Pereira de Melo, 40 - 3 Bl A Forum Picoas - 1069-300 Lisboa Portugal
City
Funchal
Country
PT — Portugal 🇵🇹
Contact email
[email protected]
First indexed
2023-07-09 09:17:52
Last updated
2023-09-03 12:16:52

Malicious IPs in the same CIDR

85.242.111.238 85.245.177.113 85.246.11.101 85.245.18.192 85.242.34.174 85.242.22.146 85.243.50.247 85.243.56.213 85.246.11.103 85.243.59.111 85.241.49.127 85.246.11.106 85.243.38.169 85.242.99.198 85.246.11.107 85.243.26.226 85.243.18.117 85.244.33.245 85.241.61.101 85.244.79.227 85.246.249.7 85.242.56.188 85.246.13.223 85.244.82.145 85.242.30.235