163.172.138.22
Classification: Suspicious
163.172.138.22 is a suspicious IP address. Linked to Tor malware. Reported by 3 threat sources, last seen 2021-09-05. Network: AS12876 Scaleway.
MITRE ATT&CK associations
Malware families: TOR (S0183)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malware | Hybrid-Analysis | 2021-07-28 10:31:35 | 2021-09-05 12:30:40 | ||
| Tor | Hybrid-Analysis | 2019-02-04 01:15:05 | 2019-02-04 01:15:05 | S0183 Tor | |
| Trojan.NSIS.Agent | Hybrid-Analysis | 2018-11-10 21:45:10 | 2018-11-10 21:45:10 | ||
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2017-10-15 14:28:42 | 2018-09-20 07:47:15 | ||
| Trojan.Agent | Hybrid-Analysis | 2018-09-17 14:15:15 | 2018-09-17 14:15:16 | ||
| ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic | Emerging Threats | 2017-10-18 12:25:02 | 2018-08-29 07:37:32 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-08-27 06:16:06 | 2018-08-27 06:16:06 | ||
| Tinukebot.K | Hybrid-Analysis | 2018-07-26 07:31:10 | 2018-07-26 07:31:10 | ||
| Gen:Variant.Ransom.Sigma | Hybrid-Analysis | 2018-05-22 10:00:23 | 2018-05-22 10:00:23 | ||
| evasive ,gozi ,isfb ,papras ,ursnif | Maltiverse | 2018-03-20 10:03:35 | 2018-03-20 10:03:35 | ||
| Anonymizer | Maltiverse | 2017-12-09 20:49:54 | 2017-12-09 20:49:54 | ||
| evasive,gozi,isfb,papras,ursnif | Maltiverse | 2017-12-07 15:19:05 | 2017-12-07 15:19:05 | ||
| gozi,isfb,papras,ursnif | Maltiverse | 2017-10-19 13:16:10 | 2017-10-19 13:16:10 |
Tags
tor evasive gozi isfb papras ursnif anonymizerWhois information
- AS name
- AS12876 Scaleway
- AS registry
- ripencc
- AS date
- 1992-02-14 00:00:00
- AS CIDR
- 163.172.0.0/16
- Registrant
- Scaleway
- City
- Paris
- Postal code
- 75007
- Country
- FR — France 🇫🇷
- First indexed
- 2017-10-15 14:28:42
- Last updated
- 2025-11-30 15:25:15
Malicious IPs in the same CIDR
163.172.70.175 163.172.118.213 163.172.113.209 163.172.53.201 163.172.186.120 163.172.18.192 163.172.53.142 163.172.176.168 163.172.140.20 163.172.100.250 163.172.122.25 163.172.251.6 163.172.134.145 163.172.154.32 163.172.195.14 163.172.84.198 163.172.167.69 163.172.158.149 163.172.93.190 163.172.112.2 163.172.231.202 163.172.73.44 163.172.157.72