91.238.50.114
Classification: Suspicious
91.238.50.114 is a suspicious IP address in Bucharest, RO. Linked to Icedid malware. 2 sightings from ThreatFox Abuse.ch (PhotoLoader), last seen 2022-08-12.
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| IcedID | ThreatFox Abuse.ch | 2022-08-10 21:18:56 | 2022-08-12 20:18:34 | malicious-activity | S0483 IcedID |
| PhotoLoader | ThreatFox Abuse.ch | 2022-08-06 16:18:41 | 2022-08-08 15:19:27 | malicious-activity |
Tags
port:443 bokbot iceid port:80Whois information
- AS name
- AS50578 Steamvps SRL
- AS registry
- ripencc
- AS date
- 2012-04-10 00:00:00
- AS CIDR
- 91.238.50.0/24
- CIDR
- 91.238.50.0/24
- Registrant
- Steamvps SRL
- Address
- Bucuresti, Romania
- City
- Bucharest
- Postal code
- 030163
- Country
- RO — Romania 🇷🇴
- Contact email
- [email protected]
- First indexed
- 2022-08-06 16:18:41
- Last updated
- 2026-03-02 09:33:31