91.218.114.11
Classification: Malicious
91.218.114.11 is a malicious IP address in Moscow, RU. Linked to Maze malware. 35 sightings from 3 threat sources (Mail Spammer), last seen 2026-10-06.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: MAZE (S0449)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2019-10-24 11:00:14 | 2026-10-06 10:43:46 | attacker malicious-activity | |
| Malicious URL | Hybrid-Analysis | 2023-11-24 04:45:04 | 2023-11-24 04:45:04 | ||
| Generic.Ransom.Maze.Packed | Hybrid-Analysis | 2020-01-28 15:01:20 | 2021-10-29 08:31:02 | ||
| Trojan.Ransom.Cerber | Hybrid-Analysis | 2020-07-30 13:15:13 | 2020-07-30 13:15:13 | ||
| IOC_19052020 | CronUp Threat Intel | 2020-05-20 03:02:04 | 2020-05-20 03:02:04 | ||
| Malware site | Hybrid-Analysis | 2020-04-20 18:00:12 | 2020-04-20 18:00:12 | ||
| Gen:Variant.Johnnie | Hybrid-Analysis | 2020-03-05 13:00:12 | 2020-03-05 13:00:12 | ||
| Ransom.MAZE | Hybrid-Analysis | 2020-03-05 12:30:13 | 2020-03-05 12:30:16 | S0449 Maze | |
| Trojan.Generic | Hybrid-Analysis | 2019-10-24 11:00:14 | 2020-03-05 12:30:12 | ||
| Trojan.Cryptor | Hybrid-Analysis | 2020-03-05 12:30:11 | 2020-03-05 12:30:11 | ||
| Phishing site | Hybrid-Analysis | 2020-02-18 22:45:04 | 2020-02-18 22:45:04 | ||
| Kryptik.ykrex | Hybrid-Analysis | 2020-02-17 13:00:20 | 2020-02-17 13:00:20 | ||
| Ransom.Maze | Hybrid-Analysis | 2020-02-03 14:45:05 | 2020-02-03 14:45:05 | S0449 Maze | |
| Riskware | Hybrid-Analysis | 2020-01-30 16:45:08 | 2020-01-30 16:45:08 | ||
| Gen:Variant.Ransom.Maze | Hybrid-Analysis | 2020-01-19 20:30:36 | 2020-01-19 20:30:36 | S0449 Maze | |
| Trojan.Lethic.Gen | Hybrid-Analysis | 2020-01-13 19:31:26 | 2020-01-13 19:31:26 | ||
| Generic.Malware | Hybrid-Analysis | 2019-11-08 19:15:18 | 2019-12-23 20:15:10 | ||
| Kryptik.ANF.gen | Hybrid-Analysis | 2019-12-18 12:45:05 | 2019-12-18 12:45:05 | ||
| Trojan.Ransom | Hybrid-Analysis | 2019-12-16 15:15:18 | 2019-12-16 15:15:18 | ||
| Downloader.wu | Hybrid-Analysis | 2019-11-28 00:17:05 | 2019-11-28 00:17:05 | ||
| DFI | Hybrid-Analysis | 2019-11-27 10:15:12 | 2019-11-27 10:15:12 | ||
| Gen:Variant.Strictor | Hybrid-Analysis | 2019-11-21 05:30:04 | 2019-11-21 05:30:04 | ||
| Gen:Variant.Ranpack | Hybrid-Analysis | 2019-11-20 23:00:08 | 2019-11-20 23:00:08 | ||
| Obfuscation.e868ff0a | Hybrid-Analysis | 2019-11-19 17:30:10 | 2019-11-19 17:30:10 | ||
| QVM19.1.50A9.Malware | Hybrid-Analysis | 2019-11-18 22:00:08 | 2019-11-18 22:00:08 | ||
| Obfuscation.8b6f262e | Hybrid-Analysis | 2019-11-18 21:00:15 | 2019-11-18 21:00:15 | ||
| Adware.Gen2 | Hybrid-Analysis | 2019-11-10 22:15:03 | 2019-11-10 22:15:03 | ||
| BehavesLike.Ransomware | Hybrid-Analysis | 2019-11-07 13:15:05 | 2019-11-07 13:15:05 | ||
| Obfuscation.31365a38 | Hybrid-Analysis | 2019-11-07 10:45:20 | 2019-11-07 10:45:20 | ||
| Obfuscation.8492b4cd | Hybrid-Analysis | 2019-11-06 09:45:12 | 2019-11-06 09:45:12 | ||
| TROJ_FRS.VSNTJT19 | Hybrid-Analysis | 2019-10-31 12:00:08 | 2019-10-31 12:00:08 | ||
| Obfuscation.e700d6d8 | Hybrid-Analysis | 2019-10-29 09:45:12 | 2019-10-29 09:45:12 |
Tags
malwareWhois information
- AS name
- AS50867 LLC IT BASIS
- AS registry
- ripencc
- AS date
- 2010-07-12 00:00:00
- AS CIDR
- 91.218.114.0/24
- Registrant
- LLC IT BASIS
- City
- Moscow
- Postal code
- 144700
- Country
- RU — Russian Federation 🇷🇺
- First indexed
- 2019-10-24 11:00:14
- Last updated
- 2026-10-06 10:43:48