195.154.164.243
Classification: Suspicious
195.154.164.243 is a suspicious IP address. Linked to Tor malware. Reported by 4 threat sources, last seen 2021-12-30. Network: AS12876 Scaleway.
MITRE ATT&CK associations
Malware families: TOR (S0183)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malware | Hybrid-Analysis | 2021-07-18 12:18:29 | 2021-12-30 13:31:28 | ||
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2017-10-15 14:31:33 | 2021-11-28 05:06:21 | anonymization | |
| AIT:Trojan.Nymeria | Hybrid-Analysis | 2021-06-23 22:46:02 | 2021-11-23 07:16:02 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-05-08 11:00:30 | 2021-11-08 18:15:56 | ||
| Gen:Variant.Mikey | Hybrid-Analysis | 2021-04-03 12:33:15 | 2021-04-03 12:33:15 | ||
| Anonymizer | Maltiverse Research Team | 2020-11-22 09:42:41 | 2021-03-29 17:10:31 | anonymizer | |
| Generic.Malware | Hybrid-Analysis | 2019-08-20 13:45:27 | 2019-10-21 21:45:19 | ||
| Tor | Hybrid-Analysis | 2019-02-04 01:15:05 | 2019-03-22 14:01:56 | S0183 Tor | |
| AGEN.1020711 | Hybrid-Analysis | 2018-11-11 20:45:11 | 2018-11-11 20:45:12 | ||
| ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic | Emerging Threats | 2017-10-17 12:45:46 | 2018-08-29 07:38:11 | ||
| Packed.MUPX | Hybrid-Analysis | 2018-04-19 19:31:06 | 2018-04-19 19:31:06 | ||
| gozi ,isfb ,papras ,ursnif | Maltiverse | 2018-03-21 08:30:43 | 2018-03-21 08:30:43 | ||
| evasive ,gozi ,isfb ,papras ,ursnif | Maltiverse | 2018-03-20 09:15:26 | 2018-03-20 09:15:26 | ||
| Anonymizer | Maltiverse | 2017-12-10 02:16:30 | 2017-12-10 02:16:30 | ||
| evasive,pua | Maltiverse | 2017-12-05 14:01:30 | 2017-12-05 14:01:30 | ||
| ransomware | Maltiverse | 2017-11-12 09:32:47 | 2017-11-12 09:32:47 | ||
| gozi,isfb,papras,ursnif | Maltiverse | 2017-10-18 18:01:47 | 2017-10-18 18:01:47 |
Tags
tor anonymizer evasive gozi isfb papras ursnifWhois information
- AS name
- AS12876 Scaleway
- AS registry
- ripencc
- AS date
- 1996-08-27 00:00:00
- AS CIDR
- 195.154.0.0/16
- Registrant
- Scaleway
- City
- Paris
- Postal code
- 75007
- Country
- FR — France 🇫🇷
- First indexed
- 2017-10-15 14:31:33
- Last updated
- 2025-11-26 00:26:05
Malicious IPs in the same CIDR
195.154.200.146 195.154.104.174 195.154.123.53 195.154.47.231 195.154.61.169 195.154.48.38 195.154.237.92 195.154.48.22 195.154.215.76 195.154.178.122 195.154.220.76 195.154.169.177 195.154.176.37 195.154.49.22 195.154.61.146 195.154.60.99 195.154.46.190 195.154.43.121 195.154.60.83 195.154.47.163 195.154.194.72 195.154.114.92 195.154.86.36 195.154.56.83 195.154.119.56