162.33.179.240
Classification: Malicious
162.33.179.240 is a malicious IP address in Chicago, US. Linked to Icedid malware. 24 sightings from 4 threat sources, last seen 2026-10-01.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-09-30 10:14:15 | 2026-10-01 10:13:53 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-09-30 10:14:14 | 2026-10-01 10:13:51 | malicious-activity | |
| Malicious Host | CIArmy | 2026-09-29 20:02:21 | 2026-09-29 20:02:21 | attacker malicious-activity | |
| IcedID | ThreatFox Abuse.ch | 2023-09-08 14:17:03 | 2023-09-10 13:18:04 | malicious-activity | S0483 IcedID |
| Mail Spammer | Abuseat.org | 2023-09-08 14:17:03 | 2023-09-08 14:17:03 | ||
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2021-12-11 02:28:42 | 2021-12-14 06:33:06 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2021-12-11 02:28:39 | 2021-12-14 06:33:04 | malicious-activity | |
| BazarBackdoor | ThreatFox Abuse.ch | 2021-11-24 00:06:36 | 2021-11-24 00:06:36 | malicious-activity |
Tags
backconnect icedid port:433 bokbot iceid c&c bazarbackdoor bazarloader port:443 beerbot kegtap team9backdoor bazaloaderWhois information
- AS name
- AS399629 BL Networks
- AS registry
- arin
- AS date
- 2021-05-19 00:00:00
- AS CIDR
- 162.33.179.0/24
- CIDR
- 162.33.176.0/22
- Registrant
- BL Networks
- Address
- 30 N Gould St Ste R
- City
- Chicago
- State
- IL
- Postal code
- 60666
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2021-11-24 00:06:36
- Last updated
- 2026-10-01 10:14:15