5.189.253.164
Classification: Suspicious
5.189.253.164 is a suspicious IP address in Meppel, NL. Linked to Icedid malware. 51 sightings from ThreatFox Abuse.ch and Abuseat.org, last seen 2024-01-29.
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| IcedID | ThreatFox Abuse.ch | 2024-01-27 07:17:07 | 2024-01-29 06:18:05 | malicious-activity | S0483 IcedID |
| Mail Spammer | Abuseat.org | 2024-01-27 07:17:10 | 2024-01-27 07:17:10 |
Tags
icedid port:443 bokbot iceidWhois information
- AS name
- AS202023 LLHost Inc
- AS registry
- ripencc
- AS date
- 2012-08-09 00:00:00
- AS CIDR
- 5.189.253.0/24
- CIDR
- 5.189.253.0/24
- Registrant
- Opened Joint Stock Company Tojiktelecom
- Address
- Street DR. Petre Herescu, 12, Parter, apt.2 050586, Romania, Bucharest
- City
- Meppel
- Postal code
- 7942 JE
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2024-01-27 07:17:07
- Last updated
- 2025-12-16 00:34:56