185.251.91.214
Classification: Neutral
185.251.91.214 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by ThreatFox Abuse.ch (FAKEUPDATES), last seen 2024-06-09.
MITRE ATT&CK associations
Malware families: SOCGHOLISH (S1124)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| FAKEUPDATES | ThreatFox Abuse.ch | 2024-06-07 15:18:32 | 2024-06-09 14:20:05 | malicious-activity | S1124 SocGholish |
Tags
keitarotds socgholish port:443 fakeupdateWhois information
- AS name
- AS35278 SPRINTHOST.RU LLC
- AS registry
- ripencc
- AS date
- 2018-03-22 00:00:00
- AS CIDR
- 185.251.88.0/22
- Registrant
- SPRINTHOST.RU LLC
- City
- Saint Petersburg
- Postal code
- 191186
- Country
- RU — Russian Federation 🇷🇺
- First indexed
- 2024-06-07 15:18:32
- Last updated
- 2026-09-03 02:55:27