173.249.33.80

173.249.33.80 is an IP address that one published source reports in connection with Andariel activity, which public reporting attributes to North Korea (DPRK). It is cited here from DCSO. The report is dated 2023-05-16.

ip address Andariel MATCHED IN SOURCE

First seen 2023-05-16 · last seen 2023-05-16

Network

Kinddata centre
NetworkContabo GmbH
Announced byAS51167 Contabo GmbH
CountryFrance
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

  • …infectious diseases.” Technical Details Investigating the Command & Control The Command & Control projectcell.niv.co.in resolves to 173.249.33.80 , which is allocated to German mass-hosting provider Contabo GmbH.…
    Andariel’s “Jupiter” malware and the case of the curious C2 — DCSO · under “Investigating the Command & Control” · published 2023-05-16 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Andariel’s “Jupiter” malware and the case of the curious C2

DCSO lists 4 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.