208.91.197.27
Classification: Whitelisted
208.91.197.27 is a whitelisted (trusted) IP address listed by Maltiverse. 104 sightings from 17 threat sources, last seen 2026-07-18.
Current activity
- Content Delivery Network — Belongs to a CDN with many allocated resources.
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: CONFICKER (S0608) AZORULT (S0344) AMADEY (S1025)
Blacklist sightings showing the 100 most recent of 105
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hosting Provider | Maltiverse | 2026-07-18 17:17:47 | 2026-07-18 17:17:47 | benign hosting | |
| Malicious URL | Hybrid-Analysis | 2024-01-08 14:00:04 | 2024-01-08 14:00:04 | ||
| Phishing | OpenPhish | 2022-06-18 00:42:05 | 2022-07-01 00:42:50 | compromised | |
| virut | Maltiverse Research Team | 2018-10-04 01:41:12 | 2022-06-19 01:00:32 | malicious-activity | |
| suppobox | Maltiverse Research Team | 2021-04-27 00:47:02 | 2022-06-19 00:52:15 | malicious-activity | |
| Phishing | Maltiverse | 2021-03-23 00:43:11 | 2022-04-09 00:43:16 | compromised | |
| Anonymisation Services | Maltiverse | 2012-04-26 11:37:00 | 2022-02-21 21:40:00 | ||
| Phishing site | Hybrid-Analysis | 2019-07-03 18:15:08 | 2022-01-20 12:16:14 | ||
| Botnet Command and Control Server | Maltiverse | 2013-04-05 13:50:00 | 2021-12-27 07:52:00 | ||
| Application.Uniblue | Hybrid-Analysis | 2021-11-20 03:30:27 | 2021-11-20 03:30:27 | ||
| Gen:Variant.Application.Deceptor.Uniblue | Hybrid-Analysis | 2021-11-17 23:15:13 | 2021-11-17 23:15:13 | ||
| Malicious site | Hybrid-Analysis | 2019-01-14 16:15:09 | 2021-11-17 01:15:20 | ||
| Trojan.Generic | Hybrid-Analysis | 2020-02-10 12:45:09 | 2021-09-09 07:00:09 | ||
| Malware | Maltiverse | 2012-04-22 05:05:00 | 2021-08-22 03:06:00 | ||
| Malware.Generic | Hybrid-Analysis | 2021-06-07 13:30:28 | 2021-08-11 20:15:42 | ||
| Trojan.MSIL | Hybrid-Analysis | 2021-07-27 13:47:36 | 2021-07-27 13:47:48 | ||
| GenKryptik.FHTI | Hybrid-Analysis | 2021-07-22 08:17:08 | 2021-07-22 08:17:21 | ||
| Kryptik.ACAN | Hybrid-Analysis | 2021-07-21 16:30:27 | 2021-07-21 17:17:15 | ||
| Artemis | Hybrid-Analysis | 2021-03-05 07:30:33 | 2021-06-25 17:45:20 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2019-08-08 17:00:29 | 2021-06-09 10:15:36 | ||
| Malicious url | Cyber Threat Coalition | 2020-12-14 11:04:37 | 2021-05-03 01:18:24 | malicious-activity | |
| Generic.Malware | Hybrid-Analysis | 2018-07-25 01:00:40 | 2021-05-01 14:07:43 | ||
| PredatorTheThief | Cybercrime-tracker.net | 2020-01-24 00:00:00 | 2021-05-01 11:10:23 | malicious-activity | |
| AZORult | Cybercrime-tracker.net | 2020-01-25 00:00:00 | 2021-05-01 11:10:17 | malicious-activity | S0344 Azorult |
| Amadey | Cybercrime-tracker.net | 2020-01-25 00:00:00 | 2021-04-30 11:03:23 | malicious-activity | S1025 Amadey |
| Injector.EPFX | Hybrid-Analysis | 2021-04-29 06:30:15 | 2021-04-29 07:21:20 | ||
| Gen:Heur.MSIL.Krypt | Hybrid-Analysis | 2021-04-21 19:00:50 | 2021-04-21 19:51:48 | ||
| Cutwail | Hybrid-Analysis | 2021-03-26 22:00:46 | 2021-03-26 22:01:31 | ||
| Trojan.Injector | Hybrid-Analysis | 2019-08-30 16:00:23 | 2021-03-21 20:30:24 | ||
| Gen:Trojan.Heur.FU | Hybrid-Analysis | 2021-03-16 18:45:24 | 2021-03-16 18:45:24 | ||
| HEUR:Trojan.MSIL.Crypt | Hybrid-Analysis | 2021-03-09 17:15:53 | 2021-03-09 17:16:02 | ||
| Unauthorized scanning of hosts | Blocklist.net.ua | 2020-11-18 02:09:04 | 2021-02-22 10:55:34 | malicious-activity | |
| HEUR:Trojan.NanoBot | Hybrid-Analysis | 2021-01-30 23:00:10 | 2021-01-30 23:00:15 | ||
| Trojan.Agent | Hybrid-Analysis | 2019-04-11 17:00:36 | 2021-01-05 00:17:56 | ||
| EncDoc.TET | Hybrid-Analysis | 2020-12-21 08:30:27 | 2020-12-21 08:30:37 | ||
| Covid19 scam | Cyber Threat Coalition | 2020-12-11 06:32:49 | 2020-12-13 08:39:21 | malicious-activity | |
| Phishing | Phishtank | 2017-10-15 17:29:24 | 2020-12-08 08:26:31 | compromised malicious-activity | |
| Crypt.XPACK | Hybrid-Analysis | 2020-11-10 08:30:16 | 2020-11-10 08:30:25 | ||
| DangerousObject.Multi | Hybrid-Analysis | 2019-06-19 13:30:28 | 2020-10-30 14:00:35 | ||
| Covid19 scam | DomainTools | 2020-04-19 17:39:21 | 2020-08-24 02:11:50 | malicious-activity | |
| uber phishing | Antiphishing.com.ar | 2019-10-22 08:24:10 | 2020-07-31 04:05:40 | ||
| GenKryptik.EKLE | Hybrid-Analysis | 2020-07-23 09:45:54 | 2020-07-23 09:46:00 | ||
| AGEN.1116674 | Hybrid-Analysis | 2020-07-20 19:45:11 | 2020-07-20 19:45:16 | ||
| Covid19 scam | CCN-CERT | 2020-04-13 21:48:15 | 2020-06-02 11:04:19 | malicious-activity | |
| Scanning IPs | Maltiverse | 2013-05-04 03:06:00 | 2020-04-27 10:04:00 | ||
| Malicious domain | Telefonica Peru | 2020-04-08 17:49:16 | 2020-04-10 04:37:32 | ||
| Gen:Trojan.Heur.IEC | Hybrid-Analysis | 2020-03-10 11:17:05 | 2020-03-10 11:17:09 | ||
| Gen:NN.ZemsilF.34090 | Hybrid-Analysis | 2020-02-25 15:00:13 | 2020-02-25 15:00:14 | ||
| GenKryptik.EEUM | Hybrid-Analysis | 2020-02-21 15:30:10 | 2020-02-21 15:30:14 | ||
| Gen:Variant.Ulise | Hybrid-Analysis | 2019-06-20 11:15:07 | 2020-02-21 00:30:10 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2020-01-16 00:33:23 | 2020-02-21 00:15:04 | ||
| Kryptik.BCI.gen | Hybrid-Analysis | 2020-02-19 01:15:41 | 2020-02-19 01:15:43 | ||
| Gen:Trojan.Heur | Hybrid-Analysis | 2018-08-09 10:45:59 | 2020-02-18 00:30:38 | ||
| Shyape.F.gen | Hybrid-Analysis | 2020-02-16 00:30:22 | 2020-02-16 00:30:22 | ||
| Dropper.VB | Hybrid-Analysis | 2020-02-12 15:30:53 | 2020-02-12 15:30:55 | ||
| BancorpSouth phishing | Antiphishing.com.ar | 2020-02-12 08:06:30 | 2020-02-12 08:06:30 | ||
| suspicious.low.ml | Hybrid-Analysis | 2020-02-11 00:17:04 | 2020-02-11 00:17:14 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2020-01-28 20:15:18 | 2020-01-28 20:15:41 | ||
| Trojan.Shyape | Hybrid-Analysis | 2020-01-21 00:30:13 | 2020-01-21 00:30:13 | ||
| Injector.EJVM | Hybrid-Analysis | 2020-01-10 07:00:13 | 2020-01-10 07:00:18 | ||
| HEUR:Hoax.Uniblue | Hybrid-Analysis | 2019-12-08 14:45:04 | 2019-12-08 14:45:04 | ||
| Suppobox | Bambernek | 2017-10-16 01:19:59 | 2019-11-23 12:41:26 | anomalous-activity | |
| Pykspa | Bambernek | 2017-11-04 20:00:38 | 2019-11-23 12:32:28 | anomalous-activity | |
| Pizd | Bambernek | 2017-10-15 13:01:34 | 2019-11-23 12:31:22 | anomalous-activity | |
| Phishing Grupo Santander | OpenPhish | 2019-09-13 03:14:30 | 2019-09-13 03:14:30 | ||
| VBKrypt.SQ.gen | Hybrid-Analysis | 2019-07-11 20:15:18 | 2019-07-11 20:15:22 | ||
| BehavesLike.Generic | Hybrid-Analysis | 2019-07-09 17:30:17 | 2019-07-09 17:30:25 | ||
| Backdoor.Tofsee | Hybrid-Analysis | 2019-05-13 10:02:01 | 2019-06-13 07:33:26 | ||
| Malicious url | Maltiverse Research Team | 2019-04-18 11:28:36 | 2019-04-18 11:28:36 | ||
| Social Engineering | Maltiverse Research Team | 2019-04-18 11:28:36 | 2019-04-18 11:28:36 | ||
| Phishing Office365 | OpenPhish | 2019-04-18 11:21:26 | 2019-04-18 11:21:26 | ||
| Social Engineering | OpenPhish | 2019-04-18 11:21:26 | 2019-04-18 11:21:26 | ||
| CVE-2017-0147 | Hybrid-Analysis | 2019-04-13 03:30:04 | 2019-04-13 03:30:08 | ||
| conficker | Maltiverse Research Team | 2019-01-28 00:08:15 | 2019-01-28 00:08:15 | S0608 Conficker | |
| Malicious Host | APT Notes | 2019-01-12 08:42:07 | 2019-01-12 08:42:07 | ||
| Phishing Meridian Credit Union | OpenPhish | 2019-01-02 18:32:57 | 2019-01-02 18:32:57 | ||
| Phishing Internal Revenue Service | Phishtank | 2018-12-13 08:41:36 | 2018-12-13 08:41:36 | ||
| Phishing IRS | OpenPhish | 2018-12-13 08:39:22 | 2018-12-13 08:39:22 | ||
| Anonymisation Services | IBM X-Force Exchange | 2012-04-26 11:37:00 | 2018-11-14 12:17:00 | ||
| matsnu | Maltiverse Research Team | 2018-10-11 08:47:09 | 2018-10-11 08:47:09 | ||
| Botnet Command and Control Server | IBM X-Force Exchange | 2013-04-05 13:50:00 | 2018-09-20 06:53:00 | ||
| HEUR:Exploit.MSOffice | Hybrid-Analysis | 2018-09-14 08:30:15 | 2018-09-14 08:30:15 | ||
| Gen:Variant.Rodecap | Hybrid-Analysis | 2018-04-18 14:15:27 | 2018-04-18 14:15:29 | ||
| RTF.Agent | Hybrid-Analysis | 2018-04-17 09:17:12 | 2018-04-17 09:17:12 | ||
| suppobox | Maltiverse | 2018-03-24 14:53:17 | 2018-03-24 14:53:17 | ||
| virut | Maltiverse | 2018-03-12 23:16:03 | 2018-03-12 23:16:03 | ||
| banker ,formbook | Maltiverse | 2018-03-08 10:46:53 | 2018-03-08 10:46:53 | ||
| netsky ,worm | Maltiverse | 2018-03-07 19:21:07 | 2018-03-07 19:21:07 | ||
| exploit | Maltiverse | 2018-03-05 03:00:56 | 2018-03-05 03:00:56 | ||
| banker,evasive | Maltiverse | 2018-02-21 02:17:52 | 2018-02-21 02:17:52 | ||
| Defacement | Zone-H | 2018-01-01 22:22:46 | 2018-01-01 22:22:46 | ||
| Nymaim | Bambernek | 2017-12-19 12:38:40 | 2017-12-19 12:38:40 | ||
| Malicious host | IBM X-Force Exchange | 2017-12-10 17:38:46 | 2017-12-10 17:38:46 | ||
| apt | Maltiverse | 2017-11-10 01:36:21 | 2017-11-10 01:36:21 | ||
| ransomware,shade,troldesh,tvrat | Maltiverse | 2017-11-06 10:04:32 | 2017-11-06 10:04:32 | ||
| banker,ransomware,shade,troldesh,tvrat,zbot | Maltiverse | 2017-10-18 06:12:43 | 2017-10-18 06:12:43 | ||
| Blackhole | Cybercrime-tracker.net | 2012-08-27 00:00:00 | 2017-10-15 16:23:16 | malicious-activity | |
| Phishing PayPal | Phishtank | 2017-10-15 16:09:55 | 2017-10-15 16:09:55 | ||
| Inmortal malware domain | Malware Domains | 2017-10-15 15:22:18 | 2017-10-15 15:22:18 | ||
| ZeuS | Cybercrime-tracker.net | 2017-10-15 13:57:17 | 2017-10-15 13:57:17 |
Tags
phishing c&c c2 dga malware virut pizd banker evasive exploit netsky worm formbook sector:government irs sector:financial meridian credit union https://www.threatminer.org/report.php?q=a song of intel and fancy _ exploiting fancy bear’s use of ssl certificate.pdf&y=2018 sector:online services office365 grupo santander pykspa suppobox covid19 coronavirus scam abuseWhois information
- AS name
- AS40034 Confluence Networks Inc
- AS registry
- arin
- AS date
- 2011-04-15 00:00:00
- AS CIDR
- 208.91.197.0/24
- CIDR
- 208.91.196.0/23
- Registrant
- Confluence Networks Inc
- Address
- 3rd Floor, J & C Building, P.O. Box 362
- City
- Washington
- State
- DC
- Postal code
- 20511
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2017-10-15 13:01:34
- Last updated
- 2026-10-10 20:25:49