185.253.212.22
Classification: Whitelisted
185.253.212.22 is a whitelisted (trusted) IP address listed by Maltiverse. 20 sightings from 9 threat sources, last seen 2026-10-10.
Current activity
- Open proxy — Provides anonymization that can hide an attacker.
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: REVIL (S0496)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Proxy | IPWhois.io | 2026-07-20 17:18:16 | 2026-10-10 10:52:36 | anonymization proxy | |
| Hosting Provider | Maltiverse | 2026-07-20 17:18:16 | 2026-07-20 17:18:16 | benign hosting | |
| Malicious URL | Hybrid-Analysis | 2023-08-05 16:15:05 | 2023-08-05 16:15:05 | ||
| Malware site | Hybrid-Analysis | 2020-02-20 10:30:12 | 2022-01-25 10:15:29 | ||
| Phishing site | Hybrid-Analysis | 2020-05-05 14:00:04 | 2022-01-22 13:16:32 | ||
| Malicious site | Hybrid-Analysis | 2019-12-04 10:45:12 | 2022-01-22 11:30:12 | ||
| Malware | Hybrid-Analysis | 2021-09-01 18:15:59 | 2021-09-01 18:15:59 | ||
| Trojan.Generic | Hybrid-Analysis | 2021-08-16 21:15:48 | 2021-08-16 21:15:48 | ||
| Phishing | Phishtank | 2019-11-19 02:37:40 | 2021-05-02 21:43:36 | compromised malicious-activity | |
| virut | Maltiverse Research Team | 2019-10-31 01:26:39 | 2020-12-30 01:11:18 | malicious-activity | |
| Covid19 scam | DomainTools | 2020-04-19 17:44:39 | 2020-08-24 02:11:22 | malicious-activity | |
| Covid19 scam | CCN-CERT | 2020-04-12 22:00:56 | 2020-05-02 11:12:47 | malicious-activity | |
| Malicious domain | Telefonica Peru | 2020-04-08 17:57:53 | 2020-04-09 05:06:40 | ||
| Phishing PKO Polish Bank | Phishtank | 2020-03-09 02:43:37 | 2020-03-09 02:43:37 | ||
| Generic.Malware | Hybrid-Analysis | 2020-03-05 12:46:19 | 2020-03-05 12:46:19 | ||
| DeepScan:Generic.Ransom.Sodinokibi | Hybrid-Analysis | 2020-02-20 17:30:26 | 2020-02-20 17:30:26 | S0496 REvil | |
| Suppobox | Bambernek | 2019-06-28 08:08:05 | 2019-06-28 08:08:05 | ||
| Facebook phishing | Antiphishing.com.ar | 2019-06-20 01:42:31 | 2019-06-20 01:42:31 | ||
| Apple ID phishing | Antiphishing.com.ar | 2019-06-02 11:31:12 | 2019-06-02 11:31:12 |
Tags
phishing malware suppobox c&c c2 dga covid19 coronavirus scamWhois information
- AS name
- AS48707 Aftermarket.pl Limited
- AS registry
- ripencc
- AS date
- 2018-04-05 00:00:00
- AS CIDR
- 185.253.212.0/24
- CIDR
- 185.253.212.0/24
- Registrant
- Aftermarket.pl Limited
- Address
- Chytron 3, Office 301, 1075 Nicosia, Cyprus
- City
- Berlin
- Postal code
- 10173
- Country
- DE — Germany 🇩🇪
- First indexed
- 2019-06-02 11:31:12
- Last updated
- 2026-10-10 10:52:37