179.43.154.179
Classification: Malicious
179.43.154.179 is a malicious IP address in Zurich, CH. Linked to Icedid malware. 12 sightings from 4 threat sources (Mail Spammer), last seen 2026-09-25.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2023-02-07 05:19:48 | 2026-09-25 00:57:09 | attacker malicious-activity | |
| Mail Spammer | Abuseat.org | 2023-02-07 05:19:48 | 2023-02-07 05:19:48 | ||
| Bruteforce | Blocklist.net.ua | 2023-02-07 05:19:47 | 2023-02-07 05:19:47 | malicious-activity | |
| IcedID | ThreatFox Abuse.ch | 2022-07-05 21:18:27 | 2022-07-07 19:37:43 | malicious-activity | S0483 IcedID |
| PhotoLoader | ThreatFox Abuse.ch | 2022-07-05 12:19:07 | 2022-07-07 11:37:38 | malicious-activity |
Tags
abuse port:443 bokbot iceid port:80Whois information
- AS name
- AS51852 Private Layer INC
- AS registry
- lacnic
- AS date
- 2013-11-12 00:00:00
- AS CIDR
- 179.43.128.0/18
- CIDR
- 179.43.128.0/18
- Registrant
- Private Layer INC
- City
- Zurich
- Postal code
- 8098
- Country
- CH — Switzerland 🇨🇭
- Contact email
- [email protected]
- First indexed
- 2022-07-05 12:19:07
- Last updated
- 2026-09-25 00:57:09
Malicious IPs in the same CIDR
179.43.141.195 179.43.180.109 179.43.177.243 179.43.159.78 179.43.182.232 179.43.182.58 179.43.169.179 179.43.180.59 179.43.139.58 179.43.171.234 179.43.134.242 179.43.178.70 179.43.182.16 179.43.159.200 179.43.159.197 179.43.159.198 179.43.158.176 179.43.182.217 179.43.182.252 179.43.159.196 179.43.159.199 179.43.134.188 179.43.133.154 179.43.161.178 179.43.140.227