SecureFeed - Is 91.215.85.146 Malicious? Host Analysis

Results for 91.215.85.146

Classification:

malicious

IP:

91.215.85.146

EntityType:

Tags:

N/A

Malicious Tags:

malicious final ransomware malware phishing ransomware scam spy spyware attack

Country:

City:

Moscow

State:

Moscow

Postal Code:

N/A

Lat/Lon:

55.7558°, 37.6173°

ISP Name:

PROSPERO OOO

ISP Network:

91.215.85.0/24

Source	Description	Last Seen	References
Abuse.ch ThreatFox	Deemed malicious due to: Raccoon	07/13/2023 00:44:59 (UTC)	91.215.85.146,http://91.215.85.146/7add1bf8cb1967ef3a3ca10965c36f6a,http://91.215.85.146/an7jd0qo6kt5bk5bq4er8fe1xp7hl2vk/freebl3.dll,http://91.215.85.146/an7jd0qo6kt5bk5bq4er8fe1xp7hl2vk/mozglue.dll,http://91.215.85.146/an7jd0qo6kt5bk5bq4er8fe1xp7hl2vk/msvcp140.dll,http://91.215.85.146/an7jd0qo6kt5bk5bq4er8fe1xp7hl2vk/nss3.dll,http://91.215.85.146/an7jd0qo6kt5bk5bq4er8fe1xp7hl2vk/sqlite3.dll,http://91.215.85.146/an7jd0qo6kt5bk5bq4er8fe1xp7hl2vk/vcruntime140.dll
Abuse.ch ThreatFox	Deemed malicious due to: RecordBreaker	07/27/2023 18:28:45 (UTC)	91.215.85.146,http://91.215.85.146
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	01/12/2025 00:05:24 (UTC)	livraison-mondiairelais.com,mondiairelais-expedition.com
Hybrid-Analysis	Host has shown activity related to malware.	01/22/2025 07:15:09 (UTC)	abonnement-netflix.com,mondiairelais-expedition.com,wshle-sang.com
Politie.nl	Malware detected with this host, including domains and IPs used for phishing attacks and malware distribution.	12/08/2023 02:23:29 (UTC)	abonnement-netflix.com