84.38.181.66
Classification: Malicious
84.38.181.66 is a malicious IP address in Saint Petersburg, RU. Linked to Socgholish malware. 53 sightings, last seen 2026-09-20.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: SOCGHOLISH (S1124)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2024-05-16 14:00:59 | 2026-09-20 06:35:54 | attacker malicious-activity | |
| FAKEUPDATES | ThreatFox Abuse.ch | 2024-05-16 15:18:56 | 2024-05-18 14:20:38 | malicious-activity | S1124 SocGholish |
Tags
socgholish port:443 fakeupdateWhois information
- AS name
- AS49505 Selectel Network
- AS registry
- ripencc
- AS date
- 2010-07-06 00:00:00
- AS CIDR
- 84.38.180.0/22
- CIDR
- 84.38.181.0/24
- Registrant
- Selectel Network
- Address
- Russia, Saint-Petersburg, Cvetochnaya st. 21
- City
- Saint Petersburg
- Postal code
- 191186
- Country
- RU — Russian Federation 🇷🇺
- First indexed
- 2024-05-16 14:00:53
- Last updated
- 2026-09-20 06:35:55