158.160.106.57
Classification: Neutral
158.160.106.57 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by ThreatFox Abuse.ch and Abuseat.org, last seen 2023-12-21.
MITRE ATT&CK associations
Malware families: SOCGHOLISH (S1124)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| FAKEUPDATES | ThreatFox Abuse.ch | 2023-12-19 07:17:09 | 2023-12-21 06:19:57 | malicious-activity | S1124 SocGholish |
| Mail Spammer | Abuseat.org | 2023-12-19 07:17:09 | 2023-12-19 07:17:09 |
Tags
keitarotds socgholish port:443 fakeupdateWhois information
- AS name
- AS200350 Yandex.Cloud LLC
- AS registry
- ripencc
- AS date
- 1992-03-17 00:00:00
- AS CIDR
- 158.160.0.0/16
- CIDR
- 158.160.0.0/16
- Registrant
- Yandex.Cloud LLC
- Address
- 16 Lva Tolstovo str 119021 Moscow RUSSIAN FEDERATION
- City
- Moscow
- Postal code
- 109012
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected]
- First indexed
- 2023-12-19 07:17:09
- Last updated
- 2026-09-07 03:29:09