RST Threat feed. IOC: 103.161.172.109

2021-09-25T00:00:00
ID RST:7BE5C7D5-8A2A-3D91-9B71-9A80A4F7D2F5
Type rst
Reporter RST Threat Feed
Modified 2021-08-11T00:00:00

Description

Found 103[.]161.172.109 in RST Threat Feed with score 29. First seen: 2021-08-11T03:00:00, Last seen: 2021-09-24T03:00:00. IOC tags: c2. We found that the IOC is used by: dridex. ASN 135951: (First IP 103.161.172.0, Last IP 103.161.173.255). ASN Name "WEBICOASVN" and Organisation "Webico Company Limited". ASN hosts 15551 domains. GEO IP information: City "", Country "Vietnam". In according to RST Threat Feed the IP is related to conf.bahien.com malicious domains. https://rstcloud.net/