184.168.221.11
Classification: Whitelisted
184.168.221.11 is a whitelisted (trusted) IP address. Reported by 10 threat sources, last seen 2026-09-03. Network: AS26496 GoDaddy.com, LLC.
Current activity
- Open proxy — Provides anonymization that can hide an attacker.
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: PONY (S0453)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Proxy | IPWhois.io | 2025-06-19 00:09:35 | 2026-09-03 03:41:15 | anonymization proxy | |
| Hosting Provider | Maltiverse | 2026-07-26 09:15:54 | 2026-07-26 09:15:54 | benign hosting | |
| Proxy | FireHOL | 2023-01-02 17:29:19 | 2025-10-06 23:40:56 | anonymization | |
| Anonymizer | Maltiverse Research Team | 2020-11-22 06:26:53 | 2021-05-19 17:37:36 | anonymizer | |
| Anonymizer | Maltiverse | 2020-08-03 08:56:39 | 2020-08-03 08:56:39 | ||
| Phishing | Phishtank | 2017-10-15 16:34:22 | 2019-10-10 03:14:15 | ||
| virut | Maltiverse Research Team | 2018-10-05 18:31:50 | 2018-10-15 01:49:57 | ||
| Suppobox | Bambernek | 2017-11-17 11:52:05 | 2018-10-10 06:50:04 | ||
| virut | Telefonica CO SOC | 2018-09-30 19:19:18 | 2018-09-30 19:19:18 | ||
| Simda | Bambernek | 2018-08-31 06:48:12 | 2018-08-31 06:48:12 | ||
| Phishing Generic/Spear Phishing | OpenPhish | 2017-12-15 08:00:04 | 2018-08-29 23:30:05 | ||
| Malware site | Hybrid-Analysis | 2018-05-29 16:30:52 | 2018-05-29 16:30:52 | ||
| virut | Maltiverse | 2018-04-10 11:31:58 | 2018-04-10 11:31:58 | ||
| banjori | Bambernek | 2018-04-05 06:40:24 | 2018-04-05 06:40:24 | ||
| backdoor ,sinkhole | Maltiverse | 2018-03-14 09:17:49 | 2018-03-14 09:17:49 | ||
| Phishing Microsoft | Phishtank | 2018-01-01 21:41:02 | 2018-01-01 21:41:02 | ||
| backdoor | Maltiverse | 2017-12-04 04:08:58 | 2017-12-04 04:08:58 | ||
| backdoor,ransomware,svg | Maltiverse | 2017-12-02 19:18:54 | 2017-12-02 19:18:54 | ||
| Virut | Bambernek | 2017-11-27 12:43:29 | 2017-11-27 12:43:29 | ||
| Pony | Cybercrime-tracker.net | 2017-10-15 14:32:12 | 2017-10-15 14:32:12 | S0453 Pony |
Tags
anonymization backdoor sinkhole malware banjori c&c c2 dga phishing simda suppobox anonymizerWhois information
- AS name
- AS26496 GoDaddy.com, LLC
- AS registry
- arin
- AS date
- 2010-09-21 00:00:00
- AS CIDR
- 184.168.220.0/22
- CIDR
- 184.168.0.0/16
- Registrant
- GoDaddy.com, LLC
- Address
- 14455 N Hayden Road Suite 226
- City
- Phoenix
- State
- AZ
- Postal code
- 85004
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2017-10-15 14:32:12
- Last updated
- 2026-09-03 03:41:16