199.201.89.145
Classification: Malicious
199.201.89.145 is a malicious IP address in Lansing, US. Linked to Revil malware. Reported by 3 threat sources (Mail Spammer), last seen 2026-10-15.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: REVIL (S0496)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2026-10-15 15:39:49 | 2026-10-15 15:39:49 | attacker malicious-activity | |
| DeepScan:Generic.Ransom.Sodinokibi | Hybrid-Analysis | 2020-04-03 11:15:25 | 2020-04-03 11:15:25 | S0496 REvil | |
| Mail Spammer | Blocklist.de | 2019-01-26 07:16:34 | 2019-03-31 06:46:09 |
Tags
mail spamWhois information
- AS name
- AS32244 Liquid Web, L.L.C
- Registrant
- Liquid Web, L.L.C
- City
- Lansing
- State
- MI
- Postal code
- 48918
- Country
- US — United States 🇺🇸
- First indexed
- 2019-01-26 07:16:34
- Last updated
- 2026-10-15 15:39:50