91.195.240.94

Classification: Whitelisted

91.195.240.94 is a whitelisted (trusted) IP address. Reported by 18 threat sources, last seen 2026-07-25. Network: AS47846 Sedo GmbH.

Current activity

  • VPN node — Provides anonymization that can hide an attacker.
  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: EMOTET (S0367)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-25 09:17:43 2026-07-25 09:17:43 benign hosting
VPN IPWhois.io 2026-07-25 09:17:42 2026-07-25 09:17:42 anonymization vpn
VPN V2Ray Maltiverse Threat Observatory 2025-10-18 08:00:28 2025-11-12 08:02:20
Suspicious Host AbuseIPDB 2024-12-15 14:04:09 2025-02-08 02:09:57 anomalous-activity
Unauthorized scanning of hosts Blocklist.net.ua 2020-12-03 09:40:21 2024-12-15 15:12:45 malicious-activity
virut Maltiverse Research Team 2018-10-12 01:42:28 2022-07-09 01:01:06 malicious-activity
Phishing Phishtank 2018-10-04 17:40:31 2022-06-21 07:20:27 compromised malicious-activity
Social Engineering Maltiverse 2021-01-21 08:45:47 2022-05-08 00:16:11 malicious-activity
Phishing Maltiverse 2021-01-21 08:45:47 2022-05-08 00:16:11 compromised
suppobox Maltiverse Research Team 2020-03-14 01:27:54 2022-03-22 00:51:34 malicious-activity
Malicious site Hybrid-Analysis 2019-03-08 03:48:52 2021-12-28 04:30:27
Phishing site Hybrid-Analysis 2019-01-18 19:00:07 2021-12-16 13:15:30
Artemis Hybrid-Analysis 2021-07-28 13:47:58 2021-07-28 13:48:02
Malware.Generic Hybrid-Analysis 2021-01-18 05:00:40 2021-07-23 13:16:19
Injector.EPMJ Hybrid-Analysis 2021-07-07 19:45:35 2021-07-07 20:30:47
HEUR:Trojan.MSIL.Crypt Hybrid-Analysis 2021-06-30 19:30:27 2021-06-30 19:30:39
Gen:Variant.Bulz Hybrid-Analysis 2020-10-22 14:00:35 2021-06-28 22:15:15
DangerousObject.Multi Hybrid-Analysis 2020-10-20 16:00:33 2021-06-28 12:45:32
MalwareX Hybrid-Analysis 2021-06-25 13:00:58 2021-06-25 13:01:04
TrojanSpy.MSIL.NEGASTEAL Hybrid-Analysis 2021-06-24 15:45:26 2021-06-24 15:45:41
FileRepMalware Hybrid-Analysis 2019-12-18 05:45:11 2021-06-23 08:30:50
Spyware.Noon Hybrid-Analysis 2021-06-07 13:31:03 2021-06-07 13:31:08
banjori Maltiverse Research Team 2021-02-23 07:09:45 2021-05-03 06:39:36 malicious-activity
Malicious url Cyber Threat Coalition 2020-12-14 18:47:32 2021-05-02 22:21:36 malicious-activity
Kryptik.ali2000016 Hybrid-Analysis 2021-04-13 12:45:33 2021-04-13 13:36:38
Generic.Malware Hybrid-Analysis 2019-01-06 17:45:11 2021-04-12 22:15:08
Woreflint.A Hybrid-Analysis 2021-04-07 21:00:41 2021-04-07 21:00:46
Trojan.Generic Hybrid-Analysis 2020-05-01 02:00:52 2021-03-19 07:45:53
Malicious Hostname Cyber Threat Coalition 2020-12-14 10:51:30 2021-03-04 00:55:58 malicious-activity
Phishing Mr.Looquer 2019-09-29 02:16:17 2021-03-02 13:17:22
Agent Hybrid-Analysis 2021-02-22 16:30:10 2021-02-22 16:30:13
Social Engineering Phishtank 2019-06-22 02:29:23 2021-02-22 04:39:30 malicious-activity
Gen:Heur.Zboter Hybrid-Analysis 2021-02-20 14:15:17 2021-02-20 14:15:34
paypal phishing Antiphishing.com.ar 2020-07-14 10:11:37 2021-01-30 11:36:45
Gen:Variant.Symmi Hybrid-Analysis 2020-10-16 00:45:18 2021-01-18 06:15:28
Gen:Variant.Zusy Hybrid-Analysis 2020-06-17 19:00:25 2021-01-12 21:30:45
Covid19 scam Cyber Threat Coalition 2020-11-20 20:41:41 2020-12-13 22:29:15 malicious-activity
BehavesLike.Fareit Hybrid-Analysis 2020-11-26 16:15:15 2020-11-26 16:15:20
Kryptik.XTU Hybrid-Analysis 2020-11-12 14:30:11 2020-11-12 14:30:16
Win64:MalwareX Hybrid-Analysis 2020-10-06 12:17:06 2020-10-06 12:17:08
HEUR:HackTool.Agent Hybrid-Analysis 2020-09-24 19:00:06 2020-09-24 19:00:08
Covid19 scam DomainTools 2020-04-19 17:38:57 2020-08-25 01:51:50 malicious-activity
Gen:Variant.Barys Hybrid-Analysis 2020-08-21 13:30:26 2020-08-21 13:30:37
Rakuten phishing Antiphishing.com.ar 2020-08-20 09:17:19 2020-08-20 09:17:19
uber phishing Antiphishing.com.ar 2019-12-09 01:42:38 2020-08-06 14:34:29
AGEN.1104233 Hybrid-Analysis 2020-08-04 09:30:18 2020-08-04 09:30:20
MSIL_Kryptik.AHE.gen Hybrid-Analysis 2020-07-28 07:00:26 2020-07-28 07:00:29
Phishing La Banque postale OpenPhish 2020-06-03 04:13:24 2020-06-03 04:13:24
Social Engineering OpenPhish 2020-06-03 04:13:24 2020-06-03 04:13:24 malicious-activity
linkedin phishing Antiphishing.com.ar 2020-05-30 02:54:19 2020-05-30 02:54:19
IOC_19052020 CronUp Threat Intel 2020-05-20 03:02:36 2020-05-20 03:02:36
Covid19 scam CCN-CERT 2020-04-13 15:13:50 2020-05-02 11:13:02 malicious-activity
VBKrypt.AJS.gen Hybrid-Analysis 2020-05-01 20:45:14 2020-05-01 20:45:15
Phishing Itau Phishtank 2020-04-23 04:30:52 2020-04-23 04:30:52
Malicious domain Telefonica Peru 2020-04-08 17:47:37 2020-04-09 05:11:26
Phishing Apple Inc. OpenPhish 2020-03-25 02:45:48 2020-03-25 02:45:48
Threats200220200050 CronUp Threat Intel 2020-02-20 03:53:33 2020-02-20 03:53:33
Phishing Bradesco Phishtank 2019-05-23 11:26:40 2019-05-23 11:26:40
Phishing DHL Phishtank 2019-05-06 03:08:53 2019-05-06 03:08:53
Apple ID phishing Antiphishing.com.ar 2019-04-09 08:09:32 2019-04-09 08:09:32
Pizd Bambernek 2019-03-04 06:58:48 2019-03-04 06:58:48
Nymaim Bambernek 2019-02-13 07:03:50 2019-02-13 07:03:50
Phishing PayPal Phishtank 2019-01-27 08:47:15 2019-01-27 08:47:15
Malicious Host APT Notes 2019-01-12 08:41:04 2019-01-12 08:41:04
Gen:Variant.Ursu Hybrid-Analysis 2018-11-26 23:17:04 2018-11-26 23:17:05
Phishing Microsoft Phishtank 2018-11-06 09:45:15 2018-11-06 09:45:15
Suppobox Bambernek 2018-11-06 06:52:07 2018-11-06 06:52:07
banjori Bambernek 2018-09-19 06:47:58 2018-10-06 20:21:28
Downloader.cpi Hybrid-Analysis 2018-10-06 11:43:29 2018-10-06 11:43:29
Emotet Hybrid-Analysis 2018-10-06 11:43:29 2018-10-06 11:43:29 S0367 Emotet
W32.eHeur Hybrid-Analysis 2018-10-04 09:15:08 2018-10-04 09:15:11
Phishing Steam Phishtank 2018-09-01 14:29:01 2018-09-02 09:15:16

Tags

c&c c2 dga phishing malware banjori emotet banker compromised payload delivery suppobox https://www.threatminer.org/report.php?q=jpcert_cc blog_ malware tscookie_jp-cert.pdf&y=2018 nymaim pizd fraud sector:retail/service apple inc. covid19 coronavirus scam sector:financial la banque postale abuse port:1194 port:51820 port:992 port:5555 port:500 port:4500 port:1701 port:1723

Whois information

AS name
AS47846 Sedo GmbH
AS registry
ripencc
AS date
2007-10-25 00:00:00
AS CIDR
91.195.240.0/23
CIDR
91.195.240.0/23
Registrant
Sedo GmbH
Address
Sedo GmbH Im Mediapark 6 50670 Koeln
City
Koln
Postal code
50676
Country
DE — Germany 🇩🇪
Contact email
[email protected]
First indexed
2018-09-01 14:29:01
Last updated
2026-07-25 09:17:43