162.33.178.248
Classification: Malicious
162.33.178.248 is a malicious IP address in Chicago, US. Linked to Bazar malware. 4 sightings, last seen 2026-10-14. Network: AS399629 BL Networks.
MITRE ATT&CK associations
Malware families: BAZAR (S0534)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Evilginx | ThreatFox Abuse.ch | 2026-10-14 19:43:47 | 2026-10-14 20:25:07 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2021-12-11 02:28:41 | 2021-12-14 06:33:05 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2021-12-11 02:28:38 | 2021-12-14 06:33:03 | malicious-activity | |
| BazarBackdoor | ThreatFox Abuse.ch | 2021-11-24 00:06:45 | 2021-11-24 00:06:45 | malicious-activity | S0534 Bazar |
Tags
c&c bazarbackdoor bazarloader port:443 beerbot kegtap team9backdoor bazaloader port:2030 drb-ra evilginx evilgophishWhois information
- AS name
- AS399629 BL Networks
- AS registry
- arin
- AS date
- 2021-05-19 00:00:00
- AS CIDR
- 162.33.178.0/24
- CIDR
- 162.33.176.0/22
- Registrant
- BL Networks
- Address
- 30 N Gould St Ste R
- City
- Chicago
- State
- IL
- Postal code
- 60666
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2021-11-24 00:06:45
- Last updated
- 2026-10-14 23:08:50
Malicious IPs in the same CIDR
162.33.178.221 162.33.178.200 162.33.178.248 162.33.178.10 162.33.178.71