87.98.239.19

Classification: Whitelisted

87.98.239.19 is a whitelisted (trusted) IP address listed by Maltiverse. 21 sightings from 10 threat sources, last seen 2026-07-23. Network: AS16276 OVH SAS.

Current activity

  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: EMOTET (S0367)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-23 09:17:20 2026-07-23 09:17:20 benign hosting
Malicious site Hybrid-Analysis 2021-05-01 06:30:20 2021-05-01 06:30:21
Malicious url Cyber Threat Coalition 2020-12-14 21:20:49 2021-03-04 16:25:14 malicious-activity
Generic.Malware Hybrid-Analysis 2018-06-21 02:00:28 2021-01-21 00:30:47
Covid19 scam Cyber Threat Coalition 2020-11-25 00:16:26 2020-12-13 21:37:48 malicious-activity
Nemucod.ZZZ Hybrid-Analysis 2020-08-03 23:15:08 2020-08-03 23:15:10
Phishing Netflix Inc. OpenPhish 2020-04-19 09:46:05 2020-04-19 09:46:05
Phishing United Services Automobile Association OpenPhish 2020-02-04 10:29:19 2020-02-04 10:29:19
Trojan.JS.Obfuscated.gen Hybrid-Analysis 2019-03-09 11:00:04 2019-03-09 11:00:06
Malware Download Abuse.ch 2018-12-10 19:28:32 2018-12-10 19:28:32
FakejQuery.B Hybrid-Analysis 2018-10-24 04:30:08 2018-10-24 04:30:12
Ponmocup Dyndns.org 2017-11-10 21:53:13 2018-10-07 07:49:24
Emotet Telefonica CO SOC 2018-07-26 05:17:40 2018-10-06 09:36:04 S0367 Emotet
Phishing PayPal Phishtank 2018-07-02 08:39:06 2018-07-02 08:39:06
Phishing Phishtank 2018-07-02 08:20:51 2018-07-02 08:20:51
Outlook.com phishing Maltiverse 2018-06-22 07:40:16 2018-06-22 07:40:16
Social Engineering Google Safebrowsing 2018-04-25 01:15:04 2018-06-22 07:40:16
Phishing Generic/Spear Phishing OpenPhish 2018-04-25 01:15:04 2018-04-25 01:15:04
Phishing Office365 OpenPhish 2018-01-12 17:30:16 2018-01-12 17:30:16
Phishing PayPal Inc. OpenPhish 2017-12-26 19:45:04 2017-12-26 19:45:04
Ransomware Ransomware Tracker 2017-10-15 18:13:22 2017-10-15 18:13:22
Ransomware Locky distribution site Ransomware Tracker 2017-10-15 17:09:17 2017-10-15 17:09:17

Tags

phishing emotet banker compromised payload delivery ponmocup redirects to trafficsources.org exe sector:financial united services automobile association sector:online services netflix inc. covid19 coronavirus scam

Whois information

AS name
AS16276 OVH SAS
AS registry
ripencc
AS date
2005-08-15 00:00:00
AS CIDR
87.98.128.0/17
CIDR
87.98.236.0/22
Registrant
OVH SAS
Address
Ul. Szkocka 5 lok. 1 54-402 Wroclaw Poland
City
Paris
Postal code
75004
Country
FR — France 🇫🇷
Contact email
[email protected]
First indexed
2017-10-15 17:09:17
Last updated
2026-09-04 03:32:26

Malicious IPs in the same CIDR

87.98.237.152 87.98.242.239 87.98.229.15 87.98.222.18 87.98.178.234