66.225.197.197
Classification: Whitelisted
66.225.197.197 is a whitelisted (trusted) IP address. Reported by 3 threat sources, last seen 2026-07-24. Network: AS30081 CacheFly.
Current activity
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: PONY (S0453) BUNDLORE (S0482)
Intrusion sets: MOLERATS (G0021)
Blacklist sightings showing the 100 most recent of 218
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hosting Provider | Maltiverse | 2026-07-24 09:16:10 | 2026-07-24 09:16:10 | benign hosting | |
| Generic.Malware | Hybrid-Analysis | 2018-04-07 10:34:21 | 2019-05-13 16:15:15 | ||
| Malware site | Hybrid-Analysis | 2018-10-02 07:15:10 | 2019-02-21 17:45:10 | ||
| HW32.Packed | Hybrid-Analysis | 2019-01-27 03:15:20 | 2019-02-21 10:00:08 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2018-11-05 23:15:07 | 2019-02-21 00:30:04 | ||
| Virus.Floxif | Hybrid-Analysis | 2019-02-18 09:30:13 | 2019-02-18 09:30:22 | ||
| Malicious site | Hybrid-Analysis | 2018-05-15 08:17:17 | 2019-02-17 03:30:09 | ||
| Phishing site | Hybrid-Analysis | 2018-10-04 08:00:20 | 2019-02-16 06:30:07 | ||
| AGeneric | Hybrid-Analysis | 2019-02-14 10:45:07 | 2019-02-14 10:45:07 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-05-04 17:16:31 | 2019-02-12 18:00:25 | ||
| Gen:Variant.Ransom.Xdata | Hybrid-Analysis | 2019-01-31 07:15:17 | 2019-01-31 07:15:18 | ||
| Generic.MSIL.PasswordStealerA | Hybrid-Analysis | 2019-01-28 15:30:04 | 2019-01-28 15:30:05 | ||
| Unsafe | Hybrid-Analysis | 2019-01-24 21:30:15 | 2019-01-24 21:30:15 | ||
| Backdoor.DTR.15 | Hybrid-Analysis | 2019-01-22 10:30:07 | 2019-01-22 10:30:08 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2018-05-01 11:30:11 | 2019-01-17 07:00:41 | ||
| RiskWare.HackTool.Agent | Hybrid-Analysis | 2019-01-13 17:30:04 | 2019-01-13 17:30:06 | ||
| BScope.Trojan | Hybrid-Analysis | 2019-01-03 09:30:05 | 2019-01-03 09:30:05 | ||
| Sality.gen | Hybrid-Analysis | 2018-12-30 15:45:10 | 2018-12-30 15:45:12 | ||
| Gen:Variant.Ursu | Hybrid-Analysis | 2018-11-29 08:00:09 | 2018-12-28 21:45:06 | ||
| CVE-2017-11882 | Hybrid-Analysis | 2018-11-11 00:15:06 | 2018-12-28 20:30:21 | ||
| TrojanDropper.Sysn | Hybrid-Analysis | 2018-12-27 14:45:06 | 2018-12-27 14:45:08 | ||
| PDF:UrlMal | Hybrid-Analysis | 2018-12-11 06:32:02 | 2018-12-11 06:32:03 | ||
| suspicious.low.ml | Hybrid-Analysis | 2018-11-25 22:00:04 | 2018-12-03 03:15:06 | ||
| Generic.MSIL.Bladabindi | Hybrid-Analysis | 2018-04-18 23:45:36 | 2018-12-02 21:15:08 | ||
| Generic.MSIL.DownloaderB | Hybrid-Analysis | 2018-12-01 17:30:03 | 2018-12-01 17:30:03 | ||
| CVE-2017-0147 | Hybrid-Analysis | 2018-12-01 05:17:04 | 2018-12-01 05:17:04 | ||
| Trojan.HTML.PHISH | Hybrid-Analysis | 2018-11-29 07:00:14 | 2018-11-29 07:00:14 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2018-11-29 02:45:18 | 2018-11-29 02:45:18 | ||
| Bitrep | Hybrid-Analysis | 2018-11-28 21:30:04 | 2018-11-28 21:30:04 | ||
| Adware | Hybrid-Analysis | 2018-11-01 18:00:59 | 2018-11-23 17:15:06 | ||
| TrojanDownloader.Agent | Hybrid-Analysis | 2018-11-22 10:15:07 | 2018-11-22 10:15:07 | ||
| Trojan.Agent | Hybrid-Analysis | 2018-05-05 07:30:24 | 2018-11-21 00:30:05 | ||
| Phishing.A | Hybrid-Analysis | 2018-11-19 17:45:18 | 2018-11-19 17:45:18 | ||
| Gen:Variant.Cerbu | Hybrid-Analysis | 2018-11-17 00:30:04 | 2018-11-17 00:30:04 | ||
| FileRepMalware | Hybrid-Analysis | 2018-11-16 02:00:09 | 2018-11-16 02:00:09 | ||
| Trojan.Ekstak | Hybrid-Analysis | 2018-11-15 18:30:07 | 2018-11-15 18:30:08 | ||
| Gen:Variant.Ulise | Hybrid-Analysis | 2018-11-15 03:00:14 | 2018-11-15 03:00:14 | ||
| Gen:Variant.Application.Razy | Hybrid-Analysis | 2018-11-13 18:45:07 | 2018-11-13 18:45:07 | ||
| ml.Generic | Hybrid-Analysis | 2018-11-12 18:30:07 | 2018-11-12 18:30:07 | ||
| Trojan.Cud.Gen | Hybrid-Analysis | 2018-05-14 16:15:17 | 2018-11-11 14:30:11 | ||
| W32.Malware | Hybrid-Analysis | 2018-11-10 03:30:05 | 2018-11-10 03:30:05 | ||
| Static engine | Hybrid-Analysis | 2018-10-10 01:15:36 | 2018-11-09 18:15:08 | ||
| Application.CoinMiner | Hybrid-Analysis | 2018-11-09 03:15:06 | 2018-11-09 03:15:07 | ||
| Heuristic | Hybrid-Analysis | 2018-11-08 15:45:27 | 2018-11-08 15:45:27 | ||
| Gen:Variant.RevengeRat | Hybrid-Analysis | 2018-04-19 23:45:23 | 2018-11-07 21:45:07 | ||
| PUA.Gaofenquming | Hybrid-Analysis | 2018-11-07 19:45:06 | 2018-11-07 19:45:06 | ||
| Packed.Multi.MultiPacked | Hybrid-Analysis | 2018-11-07 00:45:06 | 2018-11-07 00:45:07 | ||
| Gen:Variant.MSIL | Hybrid-Analysis | 2018-11-06 23:17:08 | 2018-11-06 23:17:08 | ||
| TrojanSpy.Java | Hybrid-Analysis | 2018-11-04 18:45:20 | 2018-11-04 18:45:20 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2018-04-24 10:46:07 | 2018-11-04 04:30:54 | ||
| Backdoor.MSIL.Agent | Hybrid-Analysis | 2018-05-15 04:45:25 | 2018-11-04 04:30:49 | ||
| Gen:Heur.MSIL.Androm | Hybrid-Analysis | 2018-04-19 16:15:15 | 2018-11-03 23:00:41 | ||
| BehavesLike.Win64.Ransom | Hybrid-Analysis | 2018-11-03 03:17:05 | 2018-11-03 03:17:05 | ||
| Virtob.Gen.12 | Hybrid-Analysis | 2018-10-31 04:15:06 | 2018-10-31 04:15:06 | ||
| Gen:Variant.Jaik | Hybrid-Analysis | 2018-10-20 05:00:06 | 2018-10-28 23:00:36 | ||
| Bundled.Toolbar.Google | Hybrid-Analysis | 2018-10-26 22:00:39 | 2018-10-26 22:00:39 | ||
| Gen:Malware.wmGfa4JhNzgi | Hybrid-Analysis | 2018-10-26 21:45:06 | 2018-10-26 21:45:06 | ||
| Trojan.JS.Agent.JS | Hybrid-Analysis | 2018-10-24 05:00:15 | 2018-10-24 05:15:15 | ||
| Trojan.JS.Redirector | Hybrid-Analysis | 2018-10-24 04:15:50 | 2018-10-24 04:15:50 | ||
| JS:Redirector | Hybrid-Analysis | 2018-10-24 04:00:51 | 2018-10-24 04:00:51 | ||
| Trojan.Script.JS | Hybrid-Analysis | 2018-10-24 03:45:19 | 2018-10-24 03:45:19 | ||
| HTML:Iframe | Hybrid-Analysis | 2018-10-17 07:00:08 | 2018-10-24 03:30:22 | ||
| JS.FakejQuery | Hybrid-Analysis | 2018-10-17 02:30:13 | 2018-10-23 03:30:17 | ||
| Iframe.AE | Hybrid-Analysis | 2018-10-17 03:00:16 | 2018-10-23 03:15:40 | ||
| GameHack.AUM potentially unsafe | Hybrid-Analysis | 2018-10-19 21:52:09 | 2018-10-19 21:52:09 | ||
| Trojan.Winlock | Hybrid-Analysis | 2018-10-19 11:00:17 | 2018-10-19 11:00:17 | ||
| LuluSoftware.A potentially unwanted | Hybrid-Analysis | 2018-10-18 13:45:14 | 2018-10-18 13:45:14 | ||
| Adware.Ranapama | Hybrid-Analysis | 2018-10-17 17:45:07 | 2018-10-17 17:45:07 | ||
| Trojan.Iframe | Hybrid-Analysis | 2018-10-17 06:45:10 | 2018-10-17 06:45:10 | ||
| Backdoor.MSIL.Bladabindi | Hybrid-Analysis | 2018-10-16 18:00:08 | 2018-10-16 18:00:08 | ||
| Riskware.RemoteAdmin | Hybrid-Analysis | 2018-10-15 18:30:09 | 2018-10-15 18:30:11 | ||
| Trojan.Script | Hybrid-Analysis | 2018-10-03 05:15:13 | 2018-10-03 05:15:15 | ||
| Redirector.db | Hybrid-Analysis | 2018-10-03 04:45:24 | 2018-10-03 04:45:24 | ||
| JS:Trojan.HideLink | Hybrid-Analysis | 2018-10-03 04:15:23 | 2018-10-03 04:15:24 | ||
| JS:Trojan.JS.Likejack | Hybrid-Analysis | 2018-10-03 03:45:33 | 2018-10-03 04:00:14 | ||
| Gen:Heur.Ransom.HiddenTears | Hybrid-Analysis | 2018-05-22 09:00:15 | 2018-05-22 09:00:15 | ||
| Trojan.Wanna | Hybrid-Analysis | 2018-04-25 10:16:52 | 2018-05-21 12:00:18 | ||
| Generic.ServStart.A | Hybrid-Analysis | 2018-05-20 18:30:09 | 2018-05-20 18:30:09 | ||
| Ransom.WannaCrypt | Hybrid-Analysis | 2018-04-17 18:15:25 | 2018-05-19 14:15:30 | ||
| Exploit.CVE | Hybrid-Analysis | 2018-04-24 14:16:15 | 2018-05-18 20:00:06 | ||
| Trojan.WebCompanion | Hybrid-Analysis | 2018-05-18 15:15:27 | 2018-05-18 15:15:29 | ||
| Gen:Variant.Kazy | Hybrid-Analysis | 2018-05-17 09:00:12 | 2018-05-17 09:00:12 | ||
| W64.HfsAutoB | Hybrid-Analysis | 2018-05-17 01:15:29 | 2018-05-17 01:15:30 | ||
| Gen:Trojan.Heur2.LPTbHW@aex | Hybrid-Analysis | 2018-05-16 13:17:17 | 2018-05-16 13:17:17 | ||
| Trojan.DOC.Downloader | Hybrid-Analysis | 2018-05-14 23:17:11 | 2018-05-14 23:17:11 | ||
| Exploit.W32.Agent | Hybrid-Analysis | 2018-05-14 02:16:02 | 2018-05-14 02:16:02 | ||
| DeepScan:Generic.ServStart.A | Hybrid-Analysis | 2018-05-13 11:45:12 | 2018-05-13 11:45:12 | ||
| Gen:Variant.Jaiko | Hybrid-Analysis | 2018-05-12 08:45:32 | 2018-05-12 08:45:32 | ||
| Auslogics | Hybrid-Analysis | 2018-04-08 14:15:31 | 2018-05-11 15:17:53 | ||
| Ransom_WCRY.SMJ | Hybrid-Analysis | 2018-05-10 07:45:22 | 2018-05-10 07:45:40 | ||
| Ransom_WCRY.SMALYM | Hybrid-Analysis | 2018-04-29 08:00:17 | 2018-05-09 21:15:32 | ||
| Gen:Variant.Symmi | Hybrid-Analysis | 2018-05-07 09:45:42 | 2018-05-07 09:45:42 | ||
| Trojan.PHP.Agent | Hybrid-Analysis | 2018-05-04 15:30:12 | 2018-05-04 15:30:12 | ||
| Backdoor.Agent | Hybrid-Analysis | 2018-05-03 01:15:11 | 2018-05-03 01:15:11 | ||
| Trojan.MSIL | Hybrid-Analysis | 2018-04-29 12:30:25 | 2018-04-29 12:30:25 | ||
| Backdoor.Xtreme | Hybrid-Analysis | 2018-04-29 09:00:09 | 2018-04-29 09:00:09 | ||
| Gen:Variant.Barys | Hybrid-Analysis | 2018-04-29 04:00:12 | 2018-04-29 04:00:15 | ||
| HEUR:WebToolbar.Generic | Hybrid-Analysis | 2018-04-28 01:30:23 | 2018-04-28 01:30:25 | ||
| Trojan.WisdomEyes.16070401.9500 | Hybrid-Analysis | 2018-04-27 11:15:18 | 2018-04-27 11:15:18 | ||
| Kryptik.NOE | Hybrid-Analysis | 2018-04-26 09:30:09 | 2018-04-26 09:30:09 |
Tags
miner downloader adware backdoor evasive pup bladabindi rat banker retefe coinminer ramnit autorun crypt exploit injector keylogger ransomware riskware toolbar worm njrat sinkhole afitsec shade troldesh tvrat ponmocup pua hawkeye quantloader lokibot installcore easterjackpos gamarue phishing pos trojan zvuzona bundlore fareit pony emotet qrat expiro apt apt28 apt29 cozer cozybear cozycar cozyduke dukes euroapt fancybear group-4127 group100 group74 hammertoss infostealer irontwilight minidionis officemonkeys pawnstorm qakbot seaduke sednit sofacy strontium swallowtail tag_0700 tg-4127 thedukes tsarteam zemot spectre nymaim gozi isfb papras ursnif msil zbot zeus fake promethiumm strongpityWhois information
- AS name
- AS30081 CacheFly
- AS registry
- arin
- AS date
- 2003-06-10 00:00:00
- AS CIDR
- 66.225.197.0/24
- CIDR
- 66.225.192.0/18
- Registrant
- CacheFly
- Address
- 111 W. Jackson Blvd. Suite 1600
- City
- Elk Grove
- State
- IL
- Postal code
- 60007
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2017-10-17 19:32:07
- Last updated
- 2026-07-24 09:16:10