I'm just a newbie but it's possible the IP was a tor exit node in the past and their database just hasn't been updated.