Essential information

Value / Name

165.172.252.162

Confidence

100/100

Revoked

Yes

Valid from

02/02/2026 11:52

Valid until

26/02/2026 13:38

Pattern type

stix

Published

02/02/2026 12:05

Modified

26/02/2026 13:39

Author / Source

AlienVault

Description

No description.

Pattern

[ipv4-addr:value = '165.172.252.162']

Labels / Tags

Labels: amsi bypass cybercrime microsoft teams netsupport manager powershell powershell web-socket remote access trojan quick assist remote access trojan voice-phishing

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.