217.12.199.190

Classification: Suspicious

217.12.199.190 is a suspicious IP address. Linked to Tor malware. Reported by 5 threat sources, last seen 2021-11-14. Network: AS15626 Green Floid LLC.

MITRE ATT&CK associations

Malware families: TOR (S0183)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malware Hybrid-Analysis 2021-07-19 10:31:34 2021-11-14 15:00:22
AIT:Trojan.Nymeria Hybrid-Analysis 2021-06-23 22:46:00 2021-06-23 23:01:22
Wacapew.C Hybrid-Analysis 2021-04-04 17:30:34 2021-04-04 17:30:34
Malicious Host Alienvault Ip Reputation Database 2020-10-19 00:13:36 2020-11-07 06:35:04
Malicious Host CIArmy 2020-10-01 01:43:46 2020-10-18 08:34:17
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2017-10-15 14:32:21 2019-08-15 08:11:13
Tor Hybrid-Analysis 2019-03-22 14:01:56 2019-03-22 14:01:56 S0183 Tor
FileRepMalware Hybrid-Analysis 2019-01-18 15:30:13 2019-01-18 15:30:14
ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic Emerging Threats 2017-10-17 12:49:17 2018-08-29 07:38:25
Trojan.Downloader Hybrid-Analysis 2018-06-03 22:00:46 2018-06-03 22:00:46
gozi ,isfb ,papras ,ursnif Maltiverse 2018-03-20 16:15:55 2018-03-20 16:15:55
evasive ,gozi ,isfb ,miner ,papras ,ursnif Maltiverse 2018-03-20 11:06:20 2018-03-20 11:06:20
locker,ransomware,CryptoWall Maltiverse 2018-02-12 11:30:33 2018-02-12 11:30:33
Anonymizer Maltiverse 2017-12-10 03:03:53 2017-12-10 03:03:53
gozi,isfb,papras,ursnif Maltiverse 2017-11-28 07:00:22 2017-11-28 07:00:22

Tags

tor locker ransomware cryptowall evasive gozi isfb miner papras ursnif anonymizer

Whois information

AS name
AS15626 Green Floid LLC
AS registry
ripencc
AS date
2000-08-25 00:00:00
AS CIDR
217.12.199.0/24
Registrant
Green Floid LLC
City
Kyiv
Postal code
01001
Country
UA — Ukraine 🇺🇦
First indexed
2017-10-15 14:32:21
Last updated
2026-04-15 02:36:41