91.195.240.117

Classification: Whitelisted

91.195.240.117 is a whitelisted (trusted) IP address listed by Maltiverse. 40 sightings from 10 threat sources, last seen 2026-10-17.

Current activity

  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-18 09:18:18 2026-10-17 13:21:14 benign hosting
virut Maltiverse Research Team 2019-03-22 01:59:43 2022-04-30 00:56:59 malicious-activity
Malicious site Hybrid-Analysis 2018-06-01 17:15:19 2022-01-15 08:00:25
Phishing site Hybrid-Analysis 2019-06-28 15:00:27 2022-01-06 13:32:08
Malicious url Cyber Threat Coalition 2020-12-14 22:57:48 2021-05-02 23:24:29 malicious-activity
Generic.Malware Hybrid-Analysis 2018-06-29 12:30:23 2021-04-14 13:18:39
suppobox Maltiverse Research Team 2021-04-01 01:05:00 2021-04-01 01:05:00 malicious-activity
Malware.Yd.Generic Hybrid-Analysis 2021-03-30 06:45:27 2021-03-30 06:45:40
XF.Coeus Hybrid-Analysis 2021-03-18 12:36:19 2021-03-18 12:36:21
Malicious Hostname Cyber Threat Coalition 2020-12-16 03:21:52 2021-03-04 00:18:53 malicious-activity
Phishing Phishtank 2018-04-12 20:15:30 2021-03-03 01:35:37 compromised malicious-activity
Phishing Maltiverse 2021-01-24 08:40:23 2021-01-29 08:47:14 compromised
Social Engineering Maltiverse 2021-01-24 08:40:23 2021-01-29 08:47:14 malicious-activity
Covid19 scam Cyber Threat Coalition 2020-11-20 20:28:21 2020-12-13 23:31:33 malicious-activity
Trojan.Denes Hybrid-Analysis 2020-11-16 12:00:57 2020-11-16 12:01:13
Santander (BRASIL) S.A. phishing Antiphishing.com.ar 2020-10-31 09:34:33 2020-10-31 09:34:33
paypal phishing Antiphishing.com.ar 2019-11-26 08:12:58 2020-10-15 05:05:59
Social Engineering Antiphishing.com.ar 2020-10-15 05:05:59 2020-10-15 05:05:59 malicious-activity
Santander Non-US phishing Antiphishing.com.ar 2020-09-21 06:37:47 2020-09-21 06:37:47
Rakuten phishing Antiphishing.com.ar 2020-04-20 02:37:16 2020-08-20 09:17:19
uber phishing Antiphishing.com.ar 2019-11-19 08:10:39 2020-08-06 03:34:19
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2020-06-25 18:15:28 2020-06-25 18:15:28 S0496 REvil
Malicious domain Telefonica Peru 2020-04-08 17:58:07 2020-04-08 18:01:37
DangerousObject.Multi Hybrid-Analysis 2020-03-31 20:30:19 2020-03-31 20:30:19
FileRepMalware Hybrid-Analysis 2020-03-10 12:00:14 2020-03-10 12:00:23
HEUR:Trojan.MSOffice.SAgent Hybrid-Analysis 2020-03-02 10:00:25 2020-03-02 10:00:26
apple phishing Antiphishing.com.ar 2020-01-17 08:15:29 2020-01-17 08:15:29
Tinba Bambernek 2019-11-06 06:57:41 2019-11-06 06:57:41
VBA.Maldade.4 Hybrid-Analysis 2019-08-16 14:45:09 2019-08-16 14:45:09
Neshta.A Hybrid-Analysis 2019-08-14 09:15:11 2019-08-14 09:15:12
Pykspa Bambernek 2019-05-20 06:52:04 2019-05-20 06:52:04
Pizd Bambernek 2019-03-27 06:57:58 2019-03-27 06:57:58
ET CNC Zeus Tracker Reported CnC Server TCP Emerging Threats 2018-05-01 09:17:27 2019-03-14 08:21:07
ET CNC Zeus Tracker Reported CnC Server UDP Emerging Threats 2018-05-01 09:17:27 2019-03-14 08:21:07
Phishing Microsoft Phishtank 2018-05-28 00:13:49 2018-05-28 00:13:49
W32.FamVT.ExpiroPC Hybrid-Analysis 2018-05-24 00:17:13 2018-05-24 00:17:13
ZeuS Zeustracker 2018-04-27 10:16:04 2018-04-27 10:16:04
Suppobox Bambernek 2018-04-26 06:43:34 2018-04-26 06:43:34
virut Maltiverse 2018-04-10 11:29:35 2018-04-10 11:29:35
Virut Bambernek 2018-03-05 11:27:33 2018-03-05 11:27:33
banjori Bambernek 2018-03-02 11:45:29 2018-03-02 11:45:29

Tags

c&c c2 dga malware banjori virut phishing suppobox zeus trojan banker pizd pykspa tinba covid19 coronavirus scam

Whois information

AS name
AS47846 Sedo GmbH
AS registry
ripencc
AS date
2007-10-25 00:00:00
AS CIDR
91.195.240.0/23
Registrant
Sedo GmbH
City
Koln
Postal code
50602
Country
DE — Germany 🇩🇪
First indexed
2018-03-02 11:45:29
Last updated
2026-10-17 13:21:14