212.51.156.224
Classification: Suspicious
212.51.156.224 is a suspicious IP address. Linked to Tor malware. Reported by 4 threat sources, last seen 2021-03-28. Network: AS13030 Liip AG.
MITRE ATT&CK associations
Malware families: TOR (S0183)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Anonymizer | Maltiverse Research Team | 2020-11-22 11:18:46 | 2021-03-28 14:07:35 | anonymizer | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2017-10-15 14:32:10 | 2019-10-31 08:23:09 | ||
| Tor | Hybrid-Analysis | 2019-03-19 11:30:26 | 2019-03-19 11:30:29 | S0183 Tor | |
| ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic | Emerging Threats | 2017-10-17 12:48:24 | 2018-08-29 07:38:22 | ||
| evasive ,gozi ,isfb ,papras ,ursnif | Maltiverse | 2018-03-20 10:03:29 | 2018-03-20 10:03:29 | ||
| gozi ,isfb ,papras ,ursnif | Maltiverse | 2018-02-28 10:00:57 | 2018-02-28 10:00:57 | ||
| locker,ransomware,CryptoWall | Maltiverse | 2018-02-12 11:30:23 | 2018-02-12 11:30:23 | ||
| Anonymizer | Maltiverse | 2017-12-10 03:02:18 | 2017-12-10 03:02:18 | ||
| evasive,gozi,isfb,papras,ursnif | Maltiverse | 2017-12-07 14:45:45 | 2017-12-07 14:45:45 | ||
| evasive,pua | Maltiverse | 2017-12-05 14:01:44 | 2017-12-05 14:01:44 | ||
| ransomware | Maltiverse | 2017-11-12 09:32:48 | 2017-11-12 09:32:48 | ||
| gozi,isfb,papras,ursnif | Maltiverse | 2017-11-07 13:08:34 | 2017-11-07 13:08:34 |
Tags
tor locker ransomware cryptowall gozi isfb papras ursnif evasive anonymizerWhois information
- AS name
- AS13030 Liip AG
- AS registry
- ripencc
- AS date
- 2008-05-06 00:00:00
- AS CIDR
- 212.51.144.0/20
- Registrant
- Liip AG
- City
- Zürich
- Postal code
- 8001
- Country
- CH — Switzerland 🇨🇭
- First indexed
- 2017-10-15 14:32:10
- Last updated
- 2025-11-22 00:39:08