212.60.21.144

Classification: Whitelisted

212.60.21.144 is a whitelisted (trusted) IP address listed by Maltiverse. 41 sightings from 6 threat sources, last seen 2026-09-06.

Current activity

  • Open proxy — Provides anonymization that can hide an attacker.
  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: SOCGHOLISH (S1124)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-09-06 13:51:24 2026-09-06 13:51:24 benign hosting
Proxy IPWhois.io 2026-09-06 13:51:23 2026-09-06 13:51:23 anonymization proxy
Proxy FireHOL 2023-01-05 06:00:28 2025-10-06 14:43:49 anonymization
FAKEUPDATES ThreatFox Abuse.ch 2024-01-01 16:17:02 2024-01-03 15:18:38 malicious-activity S1124 SocGholish
Anonymizer Maltiverse Research Team 2020-11-22 11:19:19 2021-03-28 14:08:11 anonymizer
HTTP Spammer StopForumSpam.com 2020-06-03 04:29:05 2020-06-03 04:29:05
Anonymizer Maltiverse 2020-04-28 03:37:51 2020-04-28 03:37:51

Tags

anonymization anonymizer bot abuse keitarotds port:443 fakeupdate socgholish

Whois information

AS name
AS9123 JSC TIMEWEB
AS registry
ripencc
AS date
2018-11-01 00:00:00
AS CIDR
212.60.21.0/24
CIDR
212.60.20.0/23
Registrant
JSC TIMEWEB
Address
20-22 Wenlock Road London England N1 7GU United Kingdom
City
Saint Petersburg
Postal code
191186
Country
RU — Russian Federation 🇷🇺
First indexed
2020-04-28 03:37:51
Last updated
2026-09-06 13:51:24