91.195.240.13

Classification: Whitelisted

91.195.240.13 is a whitelisted (trusted) IP address. Reported by 10 threat sources, last seen 2026-07-26. Network: AS47846 Sedo GmbH.

Current activity

  • Hosting provider — Shared hosting infrastructure.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-26 09:18:15 2026-07-26 09:18:15 benign hosting
Malware Hybrid-Analysis 2021-06-09 17:00:19 2021-08-09 16:00:19
Phishing Phishtank 2020-04-14 09:30:02 2021-05-02 21:25:41 compromised malicious-activity
apple phishing Antiphishing.com.ar 2021-04-26 00:47:55 2021-04-26 00:47:55
Social Engineering Antiphishing.com.ar 2021-04-26 00:47:55 2021-04-26 00:47:55 malicious-activity
Phishing Maltiverse 2020-12-02 13:59:04 2021-03-25 00:43:02 compromised
Social Engineering Maltiverse 2020-12-02 13:59:04 2021-03-25 00:43:02 malicious-activity
Phishing site Hybrid-Analysis 2021-03-22 13:16:10 2021-03-23 13:30:50
Malicious Hostname Cyber Threat Coalition 2020-12-16 05:14:35 2021-03-03 18:12:51 malicious-activity
Malicious url Cyber Threat Coalition 2020-12-14 18:57:31 2021-02-08 19:05:51 malicious-activity
paypal phishing Antiphishing.com.ar 2019-11-30 08:09:25 2020-12-26 07:20:45
Covid19 scam Cyber Threat Coalition 2020-11-20 22:19:32 2020-12-13 21:44:14 malicious-activity
Phishing Mr.Looquer 2020-12-08 08:09:10 2020-12-08 08:09:10
virut Maltiverse Research Team 2019-10-18 02:02:21 2020-11-26 01:22:30 malicious-activity
suppobox Maltiverse Research Team 2020-11-24 01:15:02 2020-11-25 01:16:10 malicious-activity
Trojan.Generic Hybrid-Analysis 2020-10-20 08:00:33 2020-11-12 04:00:05
Covid19 scam DomainTools 2020-04-19 22:47:57 2020-07-07 21:32:35 malicious-activity
uber phishing Antiphishing.com.ar 2019-11-07 08:08:24 2020-07-01 03:40:55
Generic.Malware Hybrid-Analysis 2019-12-17 16:00:16 2020-06-15 18:30:27
Injector.EMBN Hybrid-Analysis 2020-06-02 00:45:23 2020-06-02 00:45:25
Malicious url Maltiverse Research Team 2020-04-27 18:17:05 2020-04-27 18:17:05
Malicious site Hybrid-Analysis 2020-04-21 21:30:22 2020-04-21 21:30:22
Covid19 scam CCN-CERT 2020-04-13 22:31:00 2020-04-13 22:31:00 malicious-activity
DangerousObject.Multi Hybrid-Analysis 2020-04-07 14:00:45 2020-04-07 14:00:48
Injector.315e5b8c Hybrid-Analysis 2020-04-03 02:00:12 2020-04-03 02:00:16
target unspecified phishing Antiphishing.com.ar 2020-04-02 08:24:25 2020-04-02 08:24:25
USAA phishing Antiphishing.com.ar 2020-03-22 01:54:49 2020-03-22 01:54:49
Trojan.Injector Hybrid-Analysis 2020-02-08 17:16:50 2020-03-16 22:45:08
Injector.WR.gen Hybrid-Analysis 2020-01-09 09:00:16 2020-01-09 09:00:19
Virut Bambernek 2019-12-04 00:38:13 2019-12-04 00:38:13
Vawtrak Bambernek 2019-11-29 00:36:54 2019-11-29 00:36:54
Ramnit Bambernek 2019-10-08 00:51:39 2019-11-23 12:38:07 anomalous-activity
MemScan:Trojan.Spy.Zbot Hybrid-Analysis 2019-11-07 21:15:09 2019-11-07 21:15:09
AIT.Cottonmouth.3 Hybrid-Analysis 2019-11-04 17:15:10 2019-11-04 17:15:11
Pizd Bambernek 2019-11-02 00:34:18 2019-11-02 00:34:18
Gen:Heur.PonyStealer Hybrid-Analysis 2019-10-28 06:30:08 2019-10-28 06:30:11
Tinba Bambernek 2019-10-08 00:51:51 2019-10-08 00:51:51
Suppobox Bambernek 2019-10-08 00:51:49 2019-10-08 00:51:49

Tags

malware ramnit c&c suppobox tinba c2 dga pizd phishing vawtrak virut covid19 coronavirus scam banking stealer backdoor keitaro tds rig exploit kit fraud

Whois information

AS name
AS47846 Sedo GmbH
AS registry
ripencc
AS date
2007-10-25 00:00:00
AS CIDR
91.195.240.0/23
CIDR
91.195.240.0/23
Registrant
Sedo GmbH
Address
Sedo GmbH Im Mediapark 6 50670 Koeln
City
Koln
Postal code
50676
Country
DE — Germany 🇩🇪
Contact email
[email protected]
First indexed
2019-10-08 00:51:39
Last updated
2026-07-26 09:18:15