194.40.243.33

Classification: Malicious

194.40.243.33 is a malicious IP address in Kyiv, UA. Linked to Bazar malware. 6 sightings from 4 threat sources (Mail Spammer), last seen 2026-10-09.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2024-11-27 11:24:55 2026-10-09 07:18:25 attacker malicious-activity
ET CNC Feodo Tracker Reported CnC Server UDP Emerging Threats 2022-03-11 01:54:49 2022-03-11 01:54:49 malicious-activity
ET CNC Feodo Tracker Reported CnC Server TCP Emerging Threats 2022-02-03 04:01:34 2022-03-11 01:54:44 malicious-activity
BazarLoader FeodoTracker Abuse.ch 2022-01-31 00:00:49 2022-02-16 00:00:25 malicious-activity S0534 Bazar
BazarBackdoor ThreatFox Abuse.ch 2022-02-01 00:07:03 2022-02-01 00:07:03 malicious-activity S0534 Bazar

Tags

c&c bazaloader password-dt3101 ta571 xll beerbot kegtap team9backdoor bazarloader

Whois information

AS name
AS48693 IT WEB LTD
AS registry
ripencc
AS date
2018-05-17 00:00:00
AS CIDR
194.40.243.0/24
CIDR
194.40.243.0/24
Registrant
IT WEB LTD
Address
Dnepropetrovsk region, Mogilev, Kivskiy sst., n.9
City
Kyiv
Postal code
04215
Country
UA — Ukraine 🇺🇦
First indexed
2022-01-31 00:00:49
Last updated
2026-10-09 07:18:27

Malicious IPs in the same CIDR

194.40.243.33 194.40.243.64