164.90.226.23
Classification: Malicious
164.90.226.23 is a malicious IP address in Frankfurt, DE. Linked to Bazar malware. 6 sightings from 3 threat sources (Malicious Host), last seen 2026-09-30.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: BAZAR (S0534)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-09-30 10:14:22 | 2026-09-30 10:14:22 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-09-30 10:14:17 | 2026-09-30 10:14:17 | malicious-activity | |
| Malicious Host | CIArmy | 2026-09-29 20:02:22 | 2026-09-29 20:02:22 | attacker malicious-activity | |
| BazarBackdoor | ThreatFox Abuse.ch | 2021-10-07 00:05:14 | 2021-10-07 00:05:14 | malicious-activity | S0534 Bazar |
Tags
bazarbackdoor bazarloader port:443 beerbot kegtap team9backdoor bazaloaderWhois information
- AS name
- AS14061 Digitalocean, LLC
- AS registry
- arin
- AS date
- 2019-08-19 00:00:00
- AS CIDR
- 164.90.224.0/20
- CIDR
- 164.90.128.0/17
- Registrant
- Digitalocean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Frankfurt
- State
- NY
- Postal code
- 60311
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected], [email protected]
- First indexed
- 2021-10-07 00:05:14
- Last updated
- 2026-09-30 10:14:26
Malicious IPs in the same CIDR
164.90.228.79 164.90.237.71 164.90.236.196 164.90.226.23 164.90.227.148 164.90.232.245