206.189.137.229

Classification: Malicious

206.189.137.229 is a malicious IP address in Bengaluru, IN. Linked to Icedid malware. 6 sightings from 3 threat sources, last seen 2026-10-06.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

MITRE ATT&CK associations

Malware families: ICEDID (S0483)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious Host CIArmy 2026-10-06 20:02:20 2026-10-06 20:02:20 attacker malicious-activity
Malicious Host HoneyDB 2026-09-27 00:00:00 2026-09-27 00:00:00 attacker malicious-activity
IcedID ThreatFox Abuse.ch 2021-10-17 00:06:57 2021-10-18 00:05:02 malicious-activity S0483 IcedID

Tags

icedid port:443 bokbot iceid

Whois information

AS name
AS14061 DigitalOcean, LLC
AS registry
arin
AS date
1995-11-15 00:00:00
AS CIDR
206.189.128.0/20
CIDR
206.189.0.0/16
Registrant
DigitalOcean, LLC
Address
101 Ave of the Americas 10th Floor
City
Bengaluru
State
NY
Postal code
560001
Country
IN — India 🇮🇳
Contact email
[email protected], [email protected]
First indexed
2021-10-17 00:06:57
Last updated
2026-10-06 20:02:20

Malicious IPs in the same CIDR

206.189.129.166 206.189.143.178 206.189.130.210 206.189.137.34 206.189.140.30 206.189.128.234 206.189.142.61 206.189.136.53 206.189.136.55 206.189.137.57 206.189.140.54 206.189.136.61 206.189.128.182 206.189.142.11 206.189.137.229 206.189.143.2 206.189.136.10 206.189.132.239 206.189.142.144 206.189.132.238 206.189.131.101 206.189.133.78 206.189.136.85