85.25.159.65
Classification: Suspicious
85.25.159.65 is a suspicious IP address. Linked to Tor malware. Reported by 4 threat sources, last seen 2022-01-01.
MITRE ATT&CK associations
Malware families: TOR (S0183)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malware | Hybrid-Analysis | 2021-07-22 11:16:23 | 2022-01-01 09:45:24 | ||
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2018-07-07 07:53:15 | 2021-11-28 05:09:48 | anonymization | |
| Anonymizer | Maltiverse Research Team | 2020-11-21 18:15:30 | 2021-05-23 02:01:29 | anonymizer | |
| Generic.Malware | Hybrid-Analysis | 2020-04-07 16:30:15 | 2020-04-07 16:30:15 | ||
| Trojan.Script.ExpKit | Hybrid-Analysis | 2019-07-31 11:30:11 | 2019-07-31 11:30:11 | ||
| Tor | Hybrid-Analysis | 2019-02-04 01:15:05 | 2019-02-04 01:15:05 | S0183 Tor | |
| ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic | Emerging Threats | 2018-06-20 22:18:42 | 2018-08-29 07:39:38 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-08-27 06:16:06 | 2018-08-27 06:16:06 | ||
| Tinukebot.K | Hybrid-Analysis | 2018-07-26 07:31:10 | 2018-07-26 07:31:10 | ||
| Malware site | Hybrid-Analysis | 2018-07-20 13:30:53 | 2018-07-20 13:30:53 | ||
| Trojan.Script | Hybrid-Analysis | 2018-05-25 08:30:37 | 2018-05-25 08:30:37 | ||
| Packed.MUPX | Hybrid-Analysis | 2018-04-19 19:31:06 | 2018-04-19 19:31:06 | ||
| locker,ransomware,CryptoWall | Maltiverse | 2018-02-12 11:30:40 | 2018-02-12 11:30:40 | ||
| evasive | Maltiverse | 2018-01-31 03:18:49 | 2018-01-31 03:18:49 |
Tags
tor anonymizer evasive locker ransomware cryptowallWhois information
- AS name
- AS29066 Bsb service Dedicated Server Hosting
- AS registry
- ripencc
- AS date
- 2005-12-05 00:00:00
- AS CIDR
- 85.25.159.0/24
- Registrant
- Bsb service Dedicated Server Hosting
- City
- Strasbourg
- Postal code
- 67000
- Country
- FR — France 🇫🇷
- First indexed
- 2018-01-31 03:18:49
- Last updated
- 2026-02-20 05:47:43