38.240.59.97
Classification: Malicious
38.240.59.97 is a malicious IP address in Toronto, CA. Linked to Connectwise malware. Reported by Cyber Threat Alliance, last seen 2026-10-16.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: CONNECTWISE (S0591)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Connectwise | Cyber Threat Alliance | 2026-10-16 15:23:52 | 2026-10-16 15:23:52 | botnet malicious-activity | S0591 ConnectWise |
Whois information
- AS name
- AS931 Timeless Pendulum
- Registrant
- Timeless Pendulum
- City
- Toronto
- Postal code
- M4R
- Country
- CA — Canada 🇨🇦
- First indexed
- 2026-10-16 15:23:52
- Last updated
- 2026-10-16 15:23:52