185.185.68.48
Classification: Whitelisted
185.185.68.48 is a whitelisted (trusted) IP address listed by Maltiverse. 55 sightings from 3 threat sources, last seen 2026-09-06.
Current activity
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: REDLINE STEALER (S1240) SOCGHOLISH (S1124)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hosting Provider | Maltiverse | 2026-09-06 14:55:46 | 2026-09-06 14:55:46 | benign hosting | |
| FAKEUPDATES | ThreatFox Abuse.ch | 2024-01-08 13:17:20 | 2024-01-10 12:19:10 | malicious-activity | S1124 SocGholish |
| SSH Attacker | Blocklist.de | 2023-02-23 02:36:56 | 2023-02-24 02:35:53 | malicious-activity | |
| Bruteforce | Maltiverse | 2023-02-22 11:03:10 | 2023-02-22 22:06:13 | malicious-activity | |
| SSH Attacker | Maltiverse | 2023-02-22 11:03:10 | 2023-02-22 22:06:13 | malicious-activity | |
| Port Scanner | Maltiverse | 2023-02-22 14:51:53 | 2023-02-22 14:51:53 | anomalous-activity | |
| RedLine Stealer | ThreatFox Abuse.ch | 2022-10-24 15:21:37 | 2022-10-26 14:49:24 | malicious-activity | S1240 RedLine Stealer |
Tags
ssh bruteforce bot redlinestealer port:80 keitarotds port:443 fakeupdate socgholishWhois information
- AS name
- AS35278 SPRINTHOST.RU LLC
- AS registry
- ripencc
- AS date
- 2017-01-11 00:00:00
- AS CIDR
- 185.185.68.0/22
- CIDR
- 185.185.68.0/24
- Registrant
- SPRINTHOST.RU LLC
- Address
- 197374, Saint-Petersburg, ul. Staroderevenskaya, d. 11, korp. 2, office 300
- City
- Saint Petersburg
- Postal code
- 191186
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected]
- First indexed
- 2022-10-24 15:21:37
- Last updated
- 2026-09-06 14:55:46