2.56.191.8
Classification: Malicious
2.56.191.8 is a malicious IP address in Dallas, US. 34 sightings from Threat Observatory and IPWhois.io (VPN nord, VPN NordVPN), last seen 2026-11-06.
Current activity
- Malware distribution — This indicator is distributing malware.
- VPN node — Provides anonymization that can hide an attacker.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in US and AR, across education, manufacturing and retail networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN nord | Maltiverse Threat Observatory | 2026-06-24 21:16:30 | 2026-11-06 09:45:41 | anonymization country_code:us industry:education-and-nonprofits malicious-activity | |
| Generic Malware | Maltiverse Threat Observatory | 2026-11-03 09:10:29 | 2026-11-03 09:10:29 | malicious-activity malware | |
| VPN | IPWhois.io | 2025-10-14 18:54:34 | 2026-11-03 08:50:02 | anonymization vpn | |
| VPN NordVPN | Maltiverse Threat Observatory | 2025-07-22 19:23:09 | 2026-03-16 08:02:26 | anonymization country_code:ar country_code:us industry:education-and-nonprofits industry:manufacturing industry:retail-and-hospitality vpn |
Tags
port:1194 port:51820 port:992 port:5555 port:500 port:4500 port:1701 port:1723 port:443Whois information
- AS name
- AS62240 Packethub S.A.
- Registrant
- Packethub S.A.
- City
- Dallas
- State
- TX
- Postal code
- 75270
- Country
- US — United States 🇺🇸
- First indexed
- 2025-10-14 18:54:32
- Last updated
- 2026-11-07 05:33:35