159.223.238.117
Classification: Malicious
159.223.238.117 is a malicious IP address in Amsterdam, NL. Linked to Sliver malware. 4 sightings from 3 threat sources, last seen 2026-10-16.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: SLIVER (S0633)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Sliver | ThreatFox Abuse.ch | 2026-10-16 14:00:08 | 2026-10-16 14:25:06 | botnet malicious-activity | S0633 Sliver |
| Malicious Host | CIArmy | 2025-06-19 15:35:45 | 2025-06-19 15:35:45 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2025-06-18 00:50:30 | 2025-06-19 12:04:04 | anomalous-activity |
Tags
shodan port:31337 sliverc2Whois information
- AS name
- AS14061 DigitalOcean, LLC
- Registrant
- DigitalOcean, LLC
- City
- Amsterdam
- Postal code
- 1012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2025-06-18 06:08:49
- Last updated
- 2026-10-17 17:08:47