RaqibCTI
IPSUSPICIOUS

84[.]247[.]133[.]139

Sourced from shodan-c2
Type
ip
Risk score
3 / 3
First seen
Last seen
2026-09-04

Passive DNS

Historical resolution (pDNS)
No passive-DNS enrichment
Historical resolution data is pending or unavailable for this indicator.

Infrastructure fingerprint

Censys
ASN
51167 · CONTABO - Contabo GmbH

Historical hosting pivot

Validin
Co-resolved domains (42)
c2[.]lfema[.]es, aadcdn[.]lfema[.]es, login[.]lfema[.]es, logincdn[.]login[.]lfema[.]es, www[.]login[.]lfema[.]es, aadcdnmsft[.]lfema[.]es, vmi3377105[.]contaboserver[.]net, aadcdn[.]login[.]lfema[.]es, login[.]login[.]lfema[.]es, lfema[.]es, ln[.]lfema[.]es, account[.]login[.]lfema[.]es, www[.]lfema[.]es, logincdn[.]lfema[.]es, ifemaes-my[.]sharepoint[.]lfema[.]es, quarantine[.]lfema[.]es, account[.]lfema[.]es, sharepoint[.]lfema[.]es, vmi2782493[.]contaboserver[.]net, clienteplus[.]pt, www[.]clienteplus[.]pt, vmi2731372[.]contaboserver[.]net, ip-139-133-247-84[.]static[.]contabo[.]net, vmi1950283[.]contaboserver[.]net, webmail[.]rosillospizza[.]com, cpanel[.]rosillospizza[.]com, cpcontacts[.]rosillospizza[.]com, webdisk[.]rosillospizza[.]com, mail[.]rosillospizza[.]com, cpcalendars[.]rosillospizza[.]com, www[.]rosillospizza[.]com, vmi1816093[.]contaboserver[.]net, fltr[.]app, dnsseed[.]emzy[.]de, seed[.]bitcoin[.]sipa[.]be, x49[.]seed[.]bitcoin[.]jonasschnelli[.]ch, seed[.]bitcoin[.]jonasschnelli[.]ch, x49[.]seed[.]bitcoin[.]sipa[.]be, x9[.]dnsseed[.]emzy[.]de, vmi1601984[.]contaboserver[.]net

ThreatMiner

No ThreatMiner enrichment
Registrant / related-sample enrichment is pending for this indicator.