91.92.243.15
Classification: Malicious
91.92.243.15 is a malicious IP address in New York City, US. Linked to Asyncrat malware. 502 sightings from 7 threat sources, last seen 2026-10-17.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| AsyncRAT | ThreatFox Abuse.ch | 2026-10-17 19:45:25 | 2026-10-17 20:25:05 | botnet malicious-activity | S1087 AsyncRAT |
| Mail Spammer | Blocklist.de | 2023-12-24 02:41:19 | 2026-06-24 12:04:13 | attacker malicious-activity | |
| IMAP Attacker | Blocklist.de | 2023-12-24 02:31:19 | 2026-06-24 11:03:34 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2024-09-22 22:50:34 | 2026-06-05 21:23:19 | compromised malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-09-20 19:31:50 | 2026-06-04 23:09:15 | anomalous-activity | |
| Mail Spammer | AbuseIPDB | 2026-02-22 02:13:37 | 2026-05-11 04:03:14 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-02-21 23:10:34 | 2026-05-11 04:03:14 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-02-22 02:04:05 | 2026-05-08 20:08:58 | anomalous-activity | |
| Hacking | AbuseIPDB | 2026-02-22 02:04:05 | 2026-05-08 20:08:58 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-02-24 14:13:15 | 2026-05-07 07:40:08 | malicious-activity | |
| IMAP Attacker | AbuseIPDB | 2026-02-22 08:35:26 | 2026-05-07 07:07:26 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-02-21 23:10:34 | 2026-05-02 19:11:11 | malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-04-04 20:41:29 | 2026-04-04 20:41:29 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-02-24 14:13:15 | 2026-02-24 16:14:43 | anomalous-activity | |
| Phishing | AbuseIPDB | 2026-02-24 14:13:15 | 2026-02-24 14:13:15 | malicious-activity | |
| HTTP Spammer | StopForumSpam.com | 2024-10-06 15:08:12 | 2024-12-21 23:02:36 | malicious-activity | |
| HTTP bot | Blocklist.de | 2024-09-24 08:56:32 | 2024-09-24 08:56:32 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2023-12-15 11:55:11 | 2023-12-26 12:35:40 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2023-12-15 11:55:03 | 2023-12-26 12:35:32 | malicious-activity | |
| Malicious Host | CIArmy | 2023-12-14 08:38:27 | 2023-12-23 08:25:06 | malicious-activity | |
| SIP Attacker | Blocklist.de | 2023-11-16 03:17:49 | 2023-11-17 03:18:09 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2023-11-16 03:17:55 | 2023-11-16 03:17:55 |
Tags
sip bruteforce bot attacker imap pop3 sasl mail spam abuse port:2006 asyncrat drb-ra ratWhois information
- AS name
- AS202412 OMEGATECH
- AS registry
- ripencc
- AS date
- 2006-08-15 00:00:00
- AS CIDR
- 91.92.243.0/24
- CIDR
- 91.92.243.0/24
- Registrant
- OMEGATECH
- Address
- 84 W Broadway, Ste 200 03038 Derry United States of America
- City
- New York City
- State
- NY
- Postal code
- 10203
- Country
- US — United States 🇺🇸
- First indexed
- 2023-11-16 03:17:49
- Last updated
- 2026-10-18 06:17:07
Malicious IPs in the same CIDR
91.92.243.235 91.92.243.151 91.92.243.15 91.92.243.195 91.92.243.61 91.92.243.197 91.92.243.212 91.92.243.216 91.92.243.234 91.92.243.247 91.92.243.241 91.92.243.215 91.92.243.20 91.92.243.63 91.92.243.115