91.218.114.31
Classification: Neutral
91.218.114.31 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by 3 threat sources (Ransom.Maze), last seen 2020-12-24.
MITRE ATT&CK associations
Malware families: MAZE (S0449)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | Hybrid-Analysis | 2019-11-08 19:15:18 | 2020-12-24 14:30:35 | ||
| Generic.Ransom.Maze.Packed | Hybrid-Analysis | 2020-01-28 15:01:21 | 2020-12-01 12:00:20 | ||
| Phishing Generic/Spear Phishing | OpenPhish | 2020-07-10 04:48:17 | 2020-07-10 04:48:17 | ||
| IOC_19052020 | CronUp Threat Intel | 2020-05-20 03:02:08 | 2020-05-20 03:02:08 | ||
| Malware site | Hybrid-Analysis | 2020-04-20 18:00:05 | 2020-04-20 18:00:05 | ||
| Gen:Variant.Johnnie | Hybrid-Analysis | 2020-03-05 13:00:12 | 2020-03-05 13:00:12 | ||
| Ransom.MAZE | Hybrid-Analysis | 2020-03-05 12:30:13 | 2020-03-05 12:30:16 | S0449 Maze | |
| Trojan.Generic | Hybrid-Analysis | 2019-10-24 11:00:14 | 2020-03-05 12:30:12 | ||
| Kryptik.ykrex | Hybrid-Analysis | 2020-02-17 13:00:20 | 2020-02-17 13:00:20 | ||
| Ransom.Maze | Hybrid-Analysis | 2020-02-03 14:45:05 | 2020-02-03 14:45:05 | S0449 Maze | |
| Riskware | Hybrid-Analysis | 2020-01-30 16:45:08 | 2020-01-30 16:45:08 | ||
| Gen:Variant.Ransom.Maze | Hybrid-Analysis | 2020-01-19 20:30:36 | 2020-01-19 20:30:36 | S0449 Maze | |
| Trojan.Lethic.Gen | Hybrid-Analysis | 2020-01-13 19:31:26 | 2020-01-13 19:31:26 | ||
| Downloader.wu | Hybrid-Analysis | 2019-11-28 00:17:05 | 2019-11-28 00:17:05 | ||
| DFI | Hybrid-Analysis | 2019-11-27 10:15:12 | 2019-11-27 10:15:12 | ||
| Gen:Variant.Strictor | Hybrid-Analysis | 2019-11-21 05:30:04 | 2019-11-21 05:30:04 | ||
| Gen:Variant.Ranpack | Hybrid-Analysis | 2019-11-20 23:00:08 | 2019-11-20 23:00:08 | ||
| Obfuscation.e868ff0a | Hybrid-Analysis | 2019-11-19 17:30:10 | 2019-11-19 17:30:10 | ||
| QVM19.1.50A9.Malware | Hybrid-Analysis | 2019-11-18 22:00:08 | 2019-11-18 22:00:08 | ||
| Obfuscation.8b6f262e | Hybrid-Analysis | 2019-11-18 21:00:15 | 2019-11-18 21:00:15 | ||
| Adware.Gen2 | Hybrid-Analysis | 2019-11-10 22:15:03 | 2019-11-10 22:15:03 | ||
| BehavesLike.Ransomware | Hybrid-Analysis | 2019-11-07 13:15:05 | 2019-11-07 13:15:05 | ||
| Obfuscation.31365a38 | Hybrid-Analysis | 2019-11-07 10:45:20 | 2019-11-07 10:45:20 | ||
| Obfuscation.8492b4cd | Hybrid-Analysis | 2019-11-06 09:45:12 | 2019-11-06 09:45:12 | ||
| TROJ_FRS.VSNTJT19 | Hybrid-Analysis | 2019-10-31 12:00:08 | 2019-10-31 12:00:08 | ||
| Obfuscation.e700d6d8 | Hybrid-Analysis | 2019-10-29 09:45:12 | 2019-10-29 09:45:12 |
Tags
malware phishing generic/spear phishingWhois information
- AS name
- AS50867 LLC IT BASIS
- AS registry
- ripencc
- AS date
- 2010-07-12 00:00:00
- AS CIDR
- 91.218.114.0/24
- Registrant
- LLC IT BASIS
- City
- Moscow
- Postal code
- 144700
- Country
- RU — Russian Federation 🇷🇺
- First indexed
- 2019-10-24 11:00:14
- Last updated
- 2026-10-06 21:34:18