104.168.141.89
Classification: Malicious
104.168.141.89 is a malicious IP address in Seattle, US. Linked to Remcos malware. 3 sightings from Barracuda and ThreatFox Abuse.ch, last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: REMCOS (S0332)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2025-02-11 19:17:05 | 2026-10-17 21:34:16 | attacker malicious-activity | |
| Remcos | ThreatFox Abuse.ch | 2025-02-11 19:17:03 | 2025-02-13 18:22:52 | malicious-activity | S0332 Remcos |
Tags
port:33162 remcosrat remvio socmerWhois information
- AS name
- AS54290 HostPapa
- AS registry
- arin
- AS date
- 2014-09-03 00:00:00
- AS CIDR
- 104.168.128.0/17
- CIDR
- 104.168.128.0/17
- Registrant
- HostPapa
- Address
- 12101 Tukwila International Blvd, 3rd Floor, Suite 320
- City
- Seattle
- State
- WA
- Postal code
- 98190
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2025-02-11 19:17:03
- Last updated
- 2026-10-17 21:34:17
Malicious IPs in the same CIDR
104.168.173.48 104.168.134.55 104.168.158.41 104.168.141.88 104.168.146.52 104.168.173.29 104.168.141.28 104.168.148.37 104.168.141.89 104.168.140.86 104.168.137.71 104.168.198.16 104.168.165.91 104.168.169.62 104.168.136.28 104.168.135.11 104.168.236.50 104.168.144.48 104.168.136.93 104.168.132.113 104.168.141.82 104.168.148.40 104.168.173.24 104.168.137.3 104.168.146.65