Ransomware IP address :: 212.159.9.91

IP Information

IP address:212.159.9.91
Hostname:homepages.plus.net
AS number:AS6871
AS name:PLUSNET UK Internet Service Provider, GB
Country:- United Kingdom (GB)
Spamhaus SBL:Not listed

Associated Ransomware Infrastructure

The table below shows all Ransomware infrastructure that is associated with the IP address 212.159.9.91.

Firstseen (UTC)HostActive (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
RegistrarThreatMalware
2016-09-08 10:12:37www.alanmorgan.plus.comyesENOM, INC.Distribution SiteLocky
2016-09-01 05:29:43a-tconsulting.co.ukyesPlusnet Plc t/a Plusnet PLCDistribution SiteLocky
2016-09-01 05:24:26a-tconsulting.co.ukyesPlusnet Plc t/a Plusnet PLCDistribution SiteLocky
2016-09-01 05:01:44www.sashraf.plus.comyesENOM, INC.Distribution SiteLocky
2016-08-22 16:26:38www.makarm.plus.comnoENOM, INC.Distribution SiteLocky
2016-08-16 11:52:19www.netman.plus.comyesENOM, INC.Distribution SiteLocky
2016-08-03 06:11:01www.sashraf.plus.comyesENOM, INC.Distribution SiteLocky

Ransomware infrastructure associated with this IP address: 7