Ransomware IP address :: 91.195.240.240

IP Information

IP address:91.195.240.240
AS number:AS47846
AS name:SEDO-AS, DE
Country:- Germany (DE)
Spamhaus SBL:Not listed

Associated Ransomware Infrastructure

The table below shows all Ransomware infrastructure that is associated with the IP address 91.195.240.240.

Firstseen (UTC)HostActive (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
RegistrarThreatMalware
2016-12-20 19:32:02friedensschlag.denoDistribution SiteLocky
2016-12-09 06:24:44vilalusa.comnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-11-30 17:03:22psouutarnow.orgnoKey-Systems GmbHDistribution SiteLocky
2016-11-21 11:45:52psouutarnow.orgnoKey-Systems GmbHDistribution SiteLocky
2016-11-13 09:11:10it.grnoDistribution SiteLocky
2016-11-04 06:34:50fastbitcoin.netnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-11-04 06:26:29evogelbacher.denoDistribution SiteLocky
2016-11-03 15:16:35fastbitcoin.netnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-11-03 05:53:11evogelbacher.denoDistribution SiteLocky
2016-11-02 07:47:27psouutarnow.orgnoKey-Systems GmbHDistribution SiteLocky
2016-10-05 06:28:04ocscexpo.netnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-09-22 11:51:33mutterundkind.comnoTUCOWS DOMAINS INC.Distribution SiteLocky
2016-09-15 11:17:50ocscexpo.netnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-08-30 14:21:22og-kaiserslautern-kft.denoDistribution SiteLocky
2016-08-23 09:04:09vilalusa.comnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-08-03 12:42:39vilalusa.comnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky

Ransomware infrastructure associated with this IP address: 16