51.68.146.19
Classification: Malicious
51.68.146.19 is a malicious IP address in Warsaw, PL. Linked to Pikabot malware. 9 sightings from 5 threat sources (Mail Spammer), last seen 2026-09-25.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: PIKABOT (S1145)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2023-10-23 10:17:06 | 2026-09-25 16:10:06 | attacker malicious-activity | |
| Pikabot | ThreatFox Abuse.ch | 2023-10-23 10:17:06 | 2024-04-06 07:19:57 | malicious-activity | S1145 Pikabot |
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2023-10-25 12:34:57 | 2023-11-30 13:45:43 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2023-11-07 12:53:52 | 2023-11-29 13:35:41 | malicious-activity | |
| Pikabot | FeodoTracker Abuse.ch | 2023-10-24 00:00:04 | 2023-10-30 00:00:04 | malicious-activity | S1145 Pikabot |
| Mail Spammer | Abuseat.org | 2023-10-23 10:17:06 | 2023-10-23 10:17:06 |
Tags
port:5242 c&c pikabotWhois information
- AS name
- AS16276 OVH SAS
- AS registry
- ripencc
- AS date
- 1993-09-01 00:00:00
- AS CIDR
- 51.68.0.0/16
- CIDR
- 51.68.144.0/22
- Registrant
- OVH SAS
- Address
- ul. Swobodna 1 50-088 Wroclaw Poland
- City
- Warsaw
- Postal code
- 00-510
- Country
- PL — Poland 🇵🇱
- Contact email
- [email protected]
- First indexed
- 2023-10-23 10:17:06
- Last updated
- 2026-09-25 16:10:07
Malicious IPs in the same CIDR
51.68.149.155 51.68.226.87 51.68.220.65 51.68.136.44 51.68.181.143 51.68.226.171 51.68.228.235 51.68.179.234 51.68.91.165 51.68.146.19 51.68.199.120 51.68.164.10 51.68.139.131 51.68.139.176 51.68.134.240 51.68.134.250 51.68.91.63 51.68.94.192 51.68.95.230 51.68.93.94 51.68.93.214 51.68.95.38 51.68.91.108 51.68.93.185 51.68.94.167