99.83.154.118

Classification: Whitelisted

99.83.154.118 is a whitelisted (trusted) IP address listed by Maltiverse. 30 sightings from 8 threat sources, last seen 2026-07-22.

Current activity

  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: REDLINE STEALER (S1240)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-22 17:15:44 2026-07-22 17:15:44 benign hosting
Phishing Phishtank 2021-05-02 21:29:20 2022-06-26 12:27:20 compromised malicious-activity
virut Maltiverse Research Team 2022-02-19 00:57:21 2022-06-23 00:59:54 malicious-activity
Anonymisation Services Maltiverse 2021-04-29 08:20:00 2022-04-19 20:59:00
Botnet Command and Control Server Maltiverse 2021-04-29 18:54:00 2022-04-19 20:59:00
Cryptocurrency Mining Maltiverse 2021-05-10 04:31:00 2022-04-19 20:59:00
suppobox Maltiverse Research Team 2022-03-23 00:49:49 2022-04-05 00:51:08 malicious-activity
Phishing Maltiverse 2022-03-31 12:42:44 2022-03-31 12:42:44 compromised
Social Engineering Maltiverse 2022-03-31 12:42:44 2022-03-31 12:42:44 malicious-activity
Gameover-zeus tunPOT 2022-03-17 19:44:40 2022-03-17 19:44:48 malicious-activity
Malware Maltiverse 2021-04-30 02:47:00 2022-03-07 19:39:00
Social Engineering Phishtank 2022-03-07 17:20:11 2022-03-07 17:20:11 malicious-activity
Malicious site Hybrid-Analysis 2021-07-08 10:00:19 2022-01-21 13:15:15
Phishing site Hybrid-Analysis 2021-07-15 18:15:05 2022-01-21 12:45:11
Gen:Variant.Graftor Hybrid-Analysis 2021-12-29 15:30:07 2021-12-29 15:30:07
RedLine Stealer ThreatFox Abuse.ch 2021-11-24 00:06:58 2021-11-24 00:06:58 malicious-activity S1240 RedLine Stealer
Trojan.Generic Hybrid-Analysis 2021-11-21 17:45:07 2021-11-21 17:45:07
TrojanSpy.Stealer Hybrid-Analysis 2021-11-15 19:45:14 2021-11-15 19:45:17
BlackMatter Hybrid-Analysis 2021-11-03 12:15:32 2021-11-03 12:15:33
Gen:Heur.Mint.Zard Hybrid-Analysis 2021-11-03 12:15:23 2021-11-03 12:15:30
DeepScan:Generic.Ransom.BlackMatter.A Hybrid-Analysis 2021-11-03 12:15:21 2021-11-03 12:15:30
Trojan.Ransom.80896 Hybrid-Analysis 2021-11-03 12:15:24 2021-11-03 12:15:24
Phishing.HTML Hybrid-Analysis 2021-09-24 17:45:10 2021-09-24 17:45:15
Trojan.Agent Hybrid-Analysis 2021-08-22 15:00:09 2021-08-22 15:00:09
TrojanDownloader.Zload Hybrid-Analysis 2021-07-13 12:45:40 2021-07-13 12:45:41
CVE-2017-11882 Hybrid-Analysis 2021-06-18 05:17:07 2021-06-18 05:17:07
Malicious url Cyber Threat Coalition 2021-05-02 20:17:18 2021-05-03 00:01:29 malicious-activity
Phishing Caixa Phishtank 2021-05-02 21:48:07 2021-05-02 21:48:07 compromised malicious-activity
Phishing Internal Revenue Service Phishtank 2021-05-02 21:41:49 2021-05-02 21:42:06 compromised malicious-activity
Social Engineering Cyber Threat Coalition 2021-05-02 20:17:18 2021-05-02 21:01:29 malicious-activity
National Police Agency JAPAN phishing Antiphishing.com.ar 2021-04-30 04:17:26 2021-04-30 04:17:26

Tags

phishing c&c c2 dga redlinestealer port:80

Whois information

AS name
AS16509 Amazon Data Services Northern Virginia
AS registry
arin
AS date
2018-01-10 00:00:00
AS CIDR
99.83.144.0/20
CIDR
99.83.128.0/17, 99.84.0.0/16, 99.83.64.0/18
Registrant
Amazon Data Services Northern Virginia
Address
Amazon Web Services, Inc. P.O. Box 81226
City
Seattle
State
WA
Postal code
98057
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2021-04-30 04:17:26
Last updated
2026-07-22 17:15:45