192.99.34.48
Classification: Suspicious
192.99.34.48 is a suspicious IP address. Linked to Tor malware. Reported by 5 threat sources, last seen 2025-10-31. Network: AS16276 OVH Hosting, Inc..
MITRE ATT&CK associations
Malware families: TOR (S0183)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Suspicious Host | AbuseIPDB | 2025-10-14 08:39:28 | 2025-10-31 12:24:15 | anomalous-activity | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2017-10-26 12:05:31 | 2023-06-22 11:40:49 | anonymization | |
| Malware | Hybrid-Analysis | 2021-07-20 11:17:32 | 2021-12-29 14:45:55 | ||
| Gen:Variant.Bulz | Hybrid-Analysis | 2021-11-24 12:30:19 | 2021-11-24 12:30:19 | ||
| Anonymizer | Maltiverse Research Team | 2020-11-22 09:11:31 | 2021-03-29 16:42:20 | anonymizer | |
| Trojan.Zamg | Hybrid-Analysis | 2019-07-17 13:15:16 | 2019-07-17 13:15:16 | ||
| Tiggre | Hybrid-Analysis | 2019-05-10 14:30:20 | 2019-05-10 14:30:20 | ||
| Tor | Hybrid-Analysis | 2019-03-02 23:15:04 | 2019-03-02 23:15:04 | S0183 Tor | |
| ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic | Emerging Threats | 2017-10-26 12:05:33 | 2018-08-29 07:38:08 | ||
| Gen:Variant.Jaik | Hybrid-Analysis | 2018-05-10 12:15:13 | 2018-05-10 12:15:13 | ||
| evasive ,gozi ,isfb ,papras ,ursnif | Maltiverse | 2018-03-20 09:15:30 | 2018-03-20 09:15:30 | ||
| evasive,gozi,isfb,papras,ursnif | Maltiverse | 2018-02-16 01:21:13 | 2018-02-16 01:21:13 | ||
| papras | Maltiverse | 2018-02-02 13:27:47 | 2018-02-02 13:27:47 | ||
| banker,evasive,miner,msil,ramnit | Maltiverse | 2018-01-16 10:19:59 | 2018-01-16 10:19:59 | ||
| Anonymizer | Maltiverse | 2017-12-10 02:14:38 | 2017-12-10 02:14:38 | ||
| gozi,isfb,papras,ursnif | Maltiverse | 2017-11-27 09:45:32 | 2017-11-27 09:45:32 |
Tags
tor anonymization anonymizer papras evasive gozi isfb ursnifWhois information
- AS name
- AS16276 OVH Hosting, Inc.
- AS registry
- arin
- AS date
- 2013-06-17 00:00:00
- AS CIDR
- 192.99.0.0/16
- CIDR
- 192.99.0.0/16
- Registrant
- OVH Hosting, Inc.
- Address
- 800-1801 McGill College
- City
- Montreal
- State
- QC
- Postal code
- H3A 2A6
- Country
- CA — Canada 🇨🇦
- Contact email
- [email protected], [email protected]
- First indexed
- 2017-10-26 12:05:31
- Last updated
- 2025-12-09 19:29:28
Malicious IPs in the same CIDR
192.99.232.216 192.99.101.184 192.99.44.178 192.99.247.77 192.99.228.114 192.99.34.73 192.99.0.56 192.99.147.218