104.168.53.70
Classification: Malicious
104.168.53.70 is a malicious IP address in Casper, US. Linked to Icedid malware. 5 sightings from 4 threat sources (Mail Spammer), last seen 2026-10-14.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Blocklist.de | 2023-07-28 03:33:37 | 2026-10-14 12:00:30 | attacker malicious-activity | |
| IcedID | ThreatFox Abuse.ch | 2023-09-19 21:17:02 | 2023-09-21 20:19:26 | malicious-activity | S0483 IcedID |
| Mail Spammer | Abuseat.org | 2023-07-28 03:33:38 | 2023-07-28 03:33:38 | ||
| Mail Spammer | Barracuda | 2023-07-28 03:33:37 | 2023-07-28 03:33:37 |
Tags
port:80 bokbot iceid mail spamWhois information
- AS name
- AS36352 ColoCrossing
- AS registry
- arin
- AS date
- 2014-08-27 00:00:00
- AS CIDR
- 104.168.48.0/21
- CIDR
- 104.168.0.0/17
- Registrant
- ColoCrossing
- Address
- 325 Delaware Avenue Suite 300
- City
- Casper
- State
- WY
- Postal code
- 82601
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2023-07-28 03:33:37
- Last updated
- 2026-10-14 12:00:30