Ransomware IP address :: 85.25.255.238

IP Information

IP address:85.25.255.238
Hostname:ns36.kebirhost.com
AS number:AS8972
AS name:PLUSSERVER-AS , DE
Country:- Germany (DE)
Spamhaus SBL:Not listed

Associated Ransomware Infrastructure

The table below shows all Ransomware infrastructure that is associated with the IP address 85.25.255.238.

Firstseen (UTC)HostActive (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
RegistrarThreatMalware
2016-10-04 18:04:49gururmetal.comnoDYNADOT, LLCDistribution SiteLocky
2016-10-04 08:49:31gururmetal.comnoDYNADOT, LLCDistribution SiteLocky

Ransomware infrastructure associated with this IP address: 2