91.92.243.215
Classification: Malicious
91.92.243.215 is a malicious IP address in New York City, US. Linked to Redline Stealer malware. 214 sightings from 4 threat sources, last seen 2026-10-11.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: REDLINE STEALER (S1240)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Bruteforce | AbuseIPDB | 2026-09-20 10:38:14 | 2026-10-11 19:21:01 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-09-20 10:38:14 | 2026-10-11 13:18:57 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-10-10 03:53:48 | 2026-10-11 09:44:00 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-09-21 06:06:50 | 2026-10-10 21:07:29 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-09-21 07:32:31 | 2026-10-10 20:22:38 | attacker malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-09-21 12:15:59 | 2026-10-10 20:22:38 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-09-20 23:39:52 | 2026-10-10 13:57:30 | attacker malicious-activity | |
| Proxy | AbuseIPDB | 2026-10-08 15:37:16 | 2026-10-08 15:37:16 | anonymization proxy | |
| IMAP Attacker | AbuseIPDB | 2026-09-21 11:33:21 | 2026-09-28 02:33:40 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-03-24 00:03:52 | 2026-03-24 00:03:52 | anomalous-activity | |
| Malicious Host | AbuseIPDB | 2026-01-01 14:08:42 | 2026-02-13 15:06:11 | malicious-activity | |
| Malicious Host | HoneyDB | 2025-12-27 00:00:00 | 2026-02-10 00:00:00 | malicious-activity | |
| RedLine Stealer | ThreatFox Abuse.ch | 2025-11-15 23:07:01 | 2025-11-15 23:07:01 | malicious-activity | S1240 RedLine Stealer |
| HTTP Attacker | Maltiverse | 2023-12-27 09:15:33 | 2023-12-31 00:35:22 | malicious-activity | |
| Bruteforce | Maltiverse | 2023-12-27 09:49:11 | 2023-12-30 23:44:29 | malicious-activity | |
| Hacking | Maltiverse | 2023-12-18 09:48:42 | 2023-12-30 23:44:29 | malicious-activity | |
| Port Scanner | Maltiverse | 2023-12-27 09:15:33 | 2023-12-30 17:03:11 | anomalous-activity | |
| SSH Attacker | Maltiverse | 2023-12-30 07:48:02 | 2023-12-30 07:48:02 | malicious-activity | |
| HTTP Scrapper | Maltiverse | 2023-12-27 22:25:08 | 2023-12-29 20:31:55 | anomalous-activity | |
| Malicious Host | Maltiverse | 2023-12-27 14:52:04 | 2023-12-28 18:43:50 | compromised malicious-activity | |
| VPN | Maltiverse | 2023-12-28 17:27:43 | 2023-12-28 17:27:43 | anonymization | |
| IMAP Attacker | Maltiverse | 2023-12-27 21:14:04 | 2023-12-27 21:14:04 | malicious-activity | |
| DDoS attack | Maltiverse | 2023-12-27 16:26:49 | 2023-12-27 16:26:58 | malicious-activity |
Tags
railnet as214943 port:1911 stealer censys recordstealer c2 redlineWhois information
- AS name
- AS202412 OMEGATECH
- AS registry
- ripencc
- AS date
- 2006-08-15 00:00:00
- AS CIDR
- 91.92.243.0/24
- CIDR
- 91.92.243.0/24
- Registrant
- OMEGATECH
- Address
- 84 W Broadway, Ste 200 03038 Derry United States of America
- City
- New York City
- State
- NY
- Postal code
- 10203
- Country
- US — United States 🇺🇸
- First indexed
- 2023-12-31 01:59:44
- Last updated
- 2026-10-12 02:19:13
Malicious IPs in the same CIDR
91.92.243.235 91.92.243.151 91.92.243.15 91.92.243.195 91.92.243.61 91.92.243.197 91.92.243.212 91.92.243.216 91.92.243.234 91.92.243.247 91.92.243.241 91.92.243.215 91.92.243.20 91.92.243.63 91.92.243.115