I had started another thread before finding this one. Sorry for the double post.
Here's the info from CBL:
IP Address 198.91.81.2 is listed in the CBL. It shows signs of being infected with a spam sending trojan, malicious link or some other form of botnet.
It was last detected at 2015-06-18...