185.225.73.165

Classification: Malicious

185.225.73.165 is a malicious IP address in Rome, IT. Linked to Guloader malware. 12 sightings from 5 threat sources (Malicious Host), last seen 2026-10-10.

Current activity

  • Command & Control server — Used by cybercriminals to control victim computers.

MITRE ATT&CK associations

Malware families: GULOADER (S0561)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Guloader Cyber Threat Alliance 2026-10-10 15:32:48 2026-10-10 15:32:48 botnet malicious-activity S0561 GuLoader
Common Raven Maltiverse 2023-02-05 04:18:59 2023-02-06 02:06:40 malicious-activity
Mail Spammer Abuseat.org 2023-02-03 07:46:12 2023-02-03 07:46:12
Hacking Maltiverse 2023-01-22 00:50:39 2023-02-02 20:33:31 malicious-activity
HTTP Scrapper Maltiverse 2023-01-22 15:17:27 2023-02-02 13:36:00 anomalous-activity
HTTP Attacker Maltiverse 2023-01-22 04:05:00 2023-02-02 13:36:00 malicious-activity
Bruteforce Maltiverse 2023-01-22 15:17:27 2023-02-02 06:54:18 malicious-activity
Malicious Host HoneyDB 2023-02-02 00:00:00 2023-02-02 00:00:00 malicious-activity
DDoS attack Maltiverse 2023-01-27 04:19:01 2023-01-27 04:19:01 malicious-activity
Malicious Host Maltiverse 2023-01-26 11:58:32 2023-01-26 11:58:32 compromised malicious-activity
Port Scanner Maltiverse 2023-01-22 16:41:41 2023-01-22 16:41:41 anomalous-activity
Malware Download URLhaus Abuse.ch 2022-08-02 18:15:04 2022-08-02 18:15:04 malicious-activity

Tags

apt malware_download

Whois information

AS name
AS211252 Delis LLC
AS registry
ripencc
AS date
2017-10-12 00:00:00
AS CIDR
185.225.73.0/24
CIDR
185.225.73.0/24
Registrant
Open Fiber S.P.A
Address
Krammer 8 3232HE Brielle NETHERLANDS
City
Rome
Postal code
00199
Country
IT — Italy 🇮🇹
Contact email
[email protected]
First indexed
2022-08-02 18:15:04
Last updated
2023-02-06 02:06:41