2.21.242.227
Classification: Suspicious
2.21.242.227 is a suspicious IP address in Johannesburg, ZA. 180 sightings from 3 threat sources (adware, Generic.Malware), last seen 2019-02-22.
Blacklist sightings showing the 100 most recent of 180
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | Hybrid-Analysis | 2018-04-30 18:15:12 | 2019-02-22 10:30:10 | ||
| HEUR:Trojan.PDF.Alien | Hybrid-Analysis | 2019-02-15 15:45:05 | 2019-02-15 15:45:05 | ||
| Malicious site | Hybrid-Analysis | 2018-05-22 18:00:10 | 2019-02-14 15:45:14 | ||
| Virus.Virut | Hybrid-Analysis | 2019-02-12 17:30:04 | 2019-02-12 17:30:04 | ||
| Phishing site | Hybrid-Analysis | 2018-05-30 17:00:14 | 2019-02-12 16:30:04 | ||
| Adware | Hybrid-Analysis | 2018-07-24 11:00:22 | 2019-02-07 09:30:08 | ||
| WebCompanion.A potentially unwanted | Hybrid-Analysis | 2019-02-04 13:45:05 | 2019-02-04 13:45:05 | ||
| Generic.Ransom.Matrix | Hybrid-Analysis | 2019-02-03 23:45:16 | 2019-02-03 23:45:16 | ||
| BehavesLike.Suspicious | Hybrid-Analysis | 2019-02-01 09:45:04 | 2019-02-01 09:45:04 | ||
| Trojan.Iframe | Hybrid-Analysis | 2019-01-31 09:15:03 | 2019-01-31 09:15:03 | ||
| Dh | Hybrid-Analysis | 2019-01-26 03:30:03 | 2019-01-26 03:30:03 | ||
| Trojan.W97M.POWLOAD | Hybrid-Analysis | 2019-01-24 18:30:07 | 2019-01-24 18:30:07 | ||
| VB:Trojan.Valyria | Hybrid-Analysis | 2018-05-31 15:00:11 | 2019-01-22 19:15:10 | ||
| malicious.moderate.ml | Hybrid-Analysis | 2018-11-29 02:15:07 | 2019-01-22 17:00:40 | ||
| Malware site | Hybrid-Analysis | 2018-06-04 05:00:17 | 2019-01-22 09:30:12 | ||
| Adwind-FDVW.jar | Hybrid-Analysis | 2019-01-18 10:45:06 | 2019-01-18 10:45:06 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-05-01 11:45:08 | 2019-01-17 12:45:04 | ||
| Trojan.PowerMacro | Hybrid-Analysis | 2019-01-13 19:45:08 | 2019-01-13 19:45:08 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2018-06-11 08:00:35 | 2019-01-08 23:00:05 | ||
| Gen:Variant.Ursu | Hybrid-Analysis | 2018-05-02 04:45:28 | 2018-12-26 08:45:16 | ||
| QVM07.1.BDDB.Malware | Hybrid-Analysis | 2018-12-22 17:45:03 | 2018-12-22 17:45:03 | ||
| Trojan.Zpevdo | Hybrid-Analysis | 2018-12-16 00:30:04 | 2018-12-16 00:30:04 | ||
| Trojan.Gimemo | Hybrid-Analysis | 2018-12-07 20:15:09 | 2018-12-07 20:15:09 | ||
| Macro.Trojan | Hybrid-Analysis | 2018-04-30 19:15:25 | 2018-12-07 11:15:04 | ||
| Adware.MyWebSearch | Hybrid-Analysis | 2018-12-01 13:45:05 | 2018-12-01 13:45:05 | ||
| Bitrep | Hybrid-Analysis | 2018-11-28 21:30:03 | 2018-11-28 21:30:03 | ||
| CVE-2017-11882 | Hybrid-Analysis | 2018-07-18 13:00:12 | 2018-11-27 06:15:05 | ||
| Iframe.AE | Hybrid-Analysis | 2018-10-24 05:30:11 | 2018-10-24 05:30:11 | ||
| Malware.Generic | Hybrid-Analysis | 2018-09-24 15:00:07 | 2018-09-24 15:00:07 | ||
| Trojan.Script.Vbs | Hybrid-Analysis | 2018-09-19 18:00:15 | 2018-09-19 18:00:15 | ||
| PAK_Generic.001 | Hybrid-Analysis | 2018-06-08 07:15:13 | 2018-09-19 12:30:32 | ||
| MSIL_Injector.KK.gen | Hybrid-Analysis | 2018-09-19 07:30:18 | 2018-09-19 07:30:18 | ||
| Gen:Variant.Kazy | Hybrid-Analysis | 2018-09-19 07:15:21 | 2018-09-19 07:15:21 | ||
| Trojan.Alien | Hybrid-Analysis | 2018-09-19 06:45:25 | 2018-09-19 06:45:25 | ||
| EncDoc | Hybrid-Analysis | 2018-09-19 06:00:09 | 2018-09-19 06:00:09 | ||
| W32.eHeur | Hybrid-Analysis | 2018-05-06 11:30:33 | 2018-09-19 02:00:07 | ||
| FakeAlert.FY.gen | Hybrid-Analysis | 2018-09-18 22:30:17 | 2018-09-18 22:30:17 | ||
| W32.Malware | Hybrid-Analysis | 2018-09-18 21:00:13 | 2018-09-18 21:00:13 | ||
| Gen:Variant.Barys | Hybrid-Analysis | 2018-09-18 20:30:10 | 2018-09-18 20:30:10 | ||
| Spursint.P | Hybrid-Analysis | 2018-09-18 19:15:31 | 2018-09-18 19:15:31 | ||
| VB.PwShell.2 | Hybrid-Analysis | 2018-09-18 18:45:14 | 2018-09-18 18:45:14 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2018-08-06 02:45:43 | 2018-09-09 19:15:23 | ||
| Trojan.Script | Hybrid-Analysis | 2018-08-10 13:15:51 | 2018-08-31 18:30:06 | ||
| Trojan.Inject | Hybrid-Analysis | 2018-08-31 12:15:09 | 2018-08-31 12:15:09 | ||
| Application.Bundler.InstallMonster | Hybrid-Analysis | 2018-08-31 07:45:10 | 2018-08-31 07:45:10 | ||
| Trojan.Ole2.Vbs | Hybrid-Analysis | 2018-06-04 09:30:59 | 2018-08-28 13:00:08 | ||
| Trojan.Agent | Hybrid-Analysis | 2018-05-13 06:30:26 | 2018-08-23 11:46:14 | ||
| TSPY_HPLOKI.SMBD | Hybrid-Analysis | 2018-08-22 17:30:32 | 2018-08-22 17:30:32 | ||
| ML.Attribute | Hybrid-Analysis | 2018-08-22 16:30:39 | 2018-08-22 16:30:39 | ||
| LooksLike.Macro.Malware | Hybrid-Analysis | 2018-05-01 14:30:08 | 2018-08-22 09:00:30 | ||
| Gen:Variant.Strictor | Hybrid-Analysis | 2018-05-02 09:01:02 | 2018-08-17 07:45:34 | ||
| Gen:Variant.Ransom.Scarab | Hybrid-Analysis | 2018-08-16 14:30:30 | 2018-08-16 14:30:30 | ||
| Trojan.KillProc | Hybrid-Analysis | 2018-08-14 17:15:22 | 2018-08-14 17:15:22 | ||
| Trojan.WisdomEyes.16070401.9500 | Hybrid-Analysis | 2018-04-30 19:45:09 | 2018-08-13 18:30:42 | ||
| Gen:Variant.Johnnie | Hybrid-Analysis | 2018-08-13 16:00:53 | 2018-08-13 16:00:53 | ||
| Backdoor.MSIL.Agent | Hybrid-Analysis | 2018-08-13 13:32:33 | 2018-08-13 13:32:33 | ||
| PAK_Generic.005 | Hybrid-Analysis | 2018-07-16 09:45:56 | 2018-08-13 04:17:09 | ||
| Trojan.Fuery | Hybrid-Analysis | 2018-08-10 23:17:13 | 2018-08-10 23:17:13 | ||
| Phishing.A | Hybrid-Analysis | 2018-05-04 02:15:16 | 2018-08-10 21:00:11 | ||
| BehavesLike.PDF.Evasion | Hybrid-Analysis | 2018-08-10 12:45:24 | 2018-08-10 12:45:24 | ||
| PDF_MALPHISH.AUSJEQYR | Hybrid-Analysis | 2018-08-10 05:30:10 | 2018-08-10 05:30:10 | ||
| Cossta | Hybrid-Analysis | 2018-08-09 14:15:49 | 2018-08-09 14:15:49 | ||
| Gen:Variant.Midie | Hybrid-Analysis | 2018-08-09 13:45:39 | 2018-08-09 13:45:39 | ||
| CVE-2017-8759 | Hybrid-Analysis | 2018-05-29 11:00:14 | 2018-08-08 01:45:10 | ||
| Trojan.MicroFake | Hybrid-Analysis | 2018-08-05 22:15:29 | 2018-08-05 22:15:30 | ||
| BehavesLike.AdwareFileTour | Hybrid-Analysis | 2018-08-05 10:01:35 | 2018-08-05 10:01:35 | ||
| Trojan.Hesv | Hybrid-Analysis | 2018-08-05 06:15:43 | 2018-08-05 06:15:43 | ||
| Injector.DZOO | Hybrid-Analysis | 2018-08-03 08:45:46 | 2018-08-03 08:45:46 | ||
| Gen:Variant.Application.Bundler.InstallMonster | Hybrid-Analysis | 2018-07-31 09:15:32 | 2018-07-31 09:15:32 | ||
| Troj.Psw.Win64.Mimikatz | Hybrid-Analysis | 2018-07-27 16:30:38 | 2018-07-27 16:30:38 | ||
| Java.Trojan.GenericGB | Hybrid-Analysis | 2018-05-02 10:15:33 | 2018-07-27 12:15:55 | ||
| Gen:Variant.Symmi | Hybrid-Analysis | 2018-07-25 00:15:42 | 2018-07-25 00:15:42 | ||
| Macro.Downloader.ZA | Hybrid-Analysis | 2018-07-20 14:00:18 | 2018-07-20 14:00:18 | ||
| DangerousObject.Multi | Hybrid-Analysis | 2018-05-02 03:15:23 | 2018-07-19 08:45:40 | ||
| Adware.AdWrapper | Hybrid-Analysis | 2018-07-18 16:01:28 | 2018-07-18 16:01:28 | ||
| Static engine | Hybrid-Analysis | 2018-06-20 11:45:51 | 2018-07-18 14:45:50 | ||
| Generic.Ransom.Rapid | Hybrid-Analysis | 2018-07-18 13:00:57 | 2018-07-18 13:00:57 | ||
| Injector.DZHF | Hybrid-Analysis | 2018-07-18 06:00:24 | 2018-07-18 06:00:24 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2018-05-01 16:30:47 | 2018-07-17 11:00:19 | ||
| TrojanDropper.Injector | Hybrid-Analysis | 2018-07-17 10:45:55 | 2018-07-17 10:45:55 | ||
| Gen:Trojan.Heur2.FU | Hybrid-Analysis | 2018-07-16 17:30:08 | 2018-07-16 17:30:08 | ||
| BKDR_ZEGOST.SM51 | Hybrid-Analysis | 2018-07-16 08:00:59 | 2018-07-16 08:00:59 | ||
| Program.Unwanted | Hybrid-Analysis | 2018-07-15 07:45:10 | 2018-07-15 07:45:10 | ||
| Heur.Macro.Generic.Gen | Hybrid-Analysis | 2018-06-05 01:30:33 | 2018-07-11 15:15:25 | ||
| Trojan.Autoit | Hybrid-Analysis | 2018-07-05 15:15:18 | 2018-07-05 15:15:18 | ||
| Trojan.HTML | Hybrid-Analysis | 2018-05-02 15:00:18 | 2018-07-05 12:30:18 | ||
| Trojan.Injector | Hybrid-Analysis | 2018-06-25 15:30:53 | 2018-06-25 15:30:53 | ||
| Trojan.Banker | Hybrid-Analysis | 2018-06-25 12:30:23 | 2018-06-25 12:30:23 | ||
| Trojan.Ransom.Crysis | Hybrid-Analysis | 2018-06-23 19:45:25 | 2018-06-23 19:45:25 | ||
| VBA:Downloader | Hybrid-Analysis | 2018-06-22 17:45:27 | 2018-06-22 17:45:27 | ||
| Trojan.Script.Suspic | Hybrid-Analysis | 2018-06-21 18:45:17 | 2018-06-21 18:45:17 | ||
| Trojan.Script.Dropper | Hybrid-Analysis | 2018-06-21 15:00:21 | 2018-06-21 15:00:21 | ||
| Injector.DYMP | Hybrid-Analysis | 2018-06-07 04:15:33 | 2018-06-07 04:15:33 | ||
| Adware.BrowseFox | Hybrid-Analysis | 2018-06-06 13:00:06 | 2018-06-06 13:00:06 | ||
| CVE-2017-1188 | Hybrid-Analysis | 2018-06-06 03:15:07 | 2018-06-06 03:15:07 | ||
| TrojanSpy.Webmoner | Hybrid-Analysis | 2018-06-05 14:30:10 | 2018-06-05 14:30:10 | ||
| StartPage.alxn | Hybrid-Analysis | 2018-06-05 13:45:27 | 2018-06-05 13:45:27 | ||
| PUP.Optional.InstallCore | Hybrid-Analysis | 2018-05-01 22:45:38 | 2018-06-05 13:30:08 | ||
| Trojan.Mlw | Hybrid-Analysis | 2018-06-05 11:45:09 | 2018-06-05 11:45:09 | ||
| Unsafe | Hybrid-Analysis | 2018-05-02 07:45:22 | 2018-06-04 16:45:24 |
Tags
exploit ransomware wanacrypt0r wannacry wcry phishing qrat rat honeypot evasive adwind backdoor coinminer miner trojan dofoil sharik smokeloader apt apt17 axiom barium blackfly deputydog dogfish group72 lead ragebeast tailgater tailgaterteam wickedpanda wickedspider winntigroup banker tinba tinbanker tinybanker gozi isfb papras ursnif downloader adware clicker msil pup pua formbook emotet betabot infostealer shamoonWhois information
- AS name
- AS20940 Akamai Technologies
- AS registry
- ripencc
- AS date
- 2010-09-10 00:00:00
- AS CIDR
- 2.21.242.0/24
- Registrant
- Akamai Technologies
- City
- Johannesburg
- Postal code
- 2001
- Country
- ZA — South Africa 🇿🇦
- First indexed
- 2018-01-31 06:22:17
- Last updated
- 2025-11-27 00:05:04