80.249.144.188
Classification: Suspicious
80.249.144.188 is a suspicious IP address in Saint Petersburg, RU. Linked to Socgholish malware. 53 sightings from 3 threat sources, last seen 2026-09-03.
MITRE ATT&CK associations
Malware families: SOCGHOLISH (S1124)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2026-09-03 02:55:28 | 2026-09-03 02:55:28 | attacker malicious-activity | |
| FAKEUPDATES | ThreatFox Abuse.ch | 2024-05-12 19:27:33 | 2024-05-14 18:22:04 | malicious-activity | S1124 SocGholish |
| SSH Attacker | Blocklist.de | 2020-04-19 01:21:10 | 2023-03-30 05:46:58 | malicious-activity | |
| Mail Spammer | Blocklist.de | 2019-12-06 00:43:12 | 2019-12-22 07:10:09 |
Tags
ssh bruteforce bot mail spam keitarotds socgholish port:443 fakeupdateWhois information
- AS name
- AS49505 JSC Selectel
- Registrant
- JSC Selectel
- City
- Saint Petersburg
- Postal code
- 191186
- Country
- RU — Russian Federation 🇷🇺
- First indexed
- 2019-12-06 00:43:12
- Last updated
- 2026-09-03 02:55:29