TOR Nodes

Tor, short for The Onion Router, is free and open-source software for enabling anonymous communication. It is intended use is to protect the personal privacy of its users, as well as their freedom and ability to conduct confidential communication by keeping their Internet activities unmonitored. This Feed contains a fresh list of active TOR Nodes

Author
agomez
Created
2021-12-20 08:19:01
Last updated
2026-06-22 08:48:51
Downloads
11098143
IPv4 indicators
17537
Hostname indicators
4

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

157.90.92.107 IPv4

modified 2026-10-18 07:19:30
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

49.13.76.37 IPv4

modified 2026-10-18 07:02:41
Mail Spammer (Abuseat.org) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL) · Anonymizer (FireHOL)

51.159.34.131 IPv4

modified 2026-10-18 06:13:32
Anonymizer (FireHol) · Anonymizer (Maltiverse) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis) · TOR Node (IPWhois.io)

148.251.90.115 IPv4

modified 2026-10-18 05:56:11
Malware (Hybrid-Analysis) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

64.65.62.116 IPv4

modified 2026-10-18 05:55:08
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

51.89.40.51 IPv4

modified 2026-10-18 05:55:07
Mail Spammer (Abuseat.org) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Anonymizer (FireHOL)

165.227.34.240 IPv4

modified 2026-10-18 05:50:31
Anonymizer (Maltiverse) · Proxy (Mr.Looquer) · Anonymizer (Maltiverse Research Team) · MemScan:Trojan.Ransom.WannaCryptor (Hybrid-Analysis) · Malware (Hybrid-Analysis)

82.220.38.150 IPv4

modified 2026-10-18 05:49:32
Anonymizer (FireHol) · HTTP Attacker (Blocklist.de) · Malicious Host (CIArmy) · TOR Node (IPWhois.io) · TOR Node (Maltiverse Threat Observatory)

94.16.114.231 IPv4

modified 2026-10-18 05:49:32
Anonymizer (FireHol) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis) · Proxy (Mr.Looquer) · Anonymizer (Maltiverse)

23.111.189.202 IPv4

modified 2026-10-18 05:49:24
Anonymizer (FireHol) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Anonymizer (FireHOL) · Proxy (FireHOL) · TOR Node (Maltiverse Threat Observatory)

185.220.101.212 IPv4

modified 2026-10-18 05:48:52
Anonymizer (Maltiverse) · HTTP Spammer (Botscout) · Malicious host (Darklist) · HTTP Attacker (BadIPs) · SSH Attacker (Telefonica CO SOC)

45.136.29.221 IPv4

modified 2026-10-18 05:45:47
Anonymizer (FireHol) · Anonymizer (FireHOL) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL)

204.8.96.184 IPv4

modified 2026-10-18 05:45:31
Malicious Host (AbuseIPDB) · DDoS Attacker (Blocklist.net.ua) · Proxy (IPWhois.io) · Suspicious Host (AbuseIPDB) · VPN (IPWhois.io)

68.67.32.32 IPv4

modified 2026-10-18 05:37:38
Anonymizer (Maltiverse) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis) · TOR Node (IPWhois.io) · Mail Spammer (Barracuda)

144.168.44.26 IPv4

modified 2026-10-18 05:35:45
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

185.220.101.38 IPv4

modified 2026-10-18 05:33:57
DDoS attack (Blocklist.net.ua) · Log4j Attacker (CCN-CERT) · HTTP Spammer (Botscout) · Blacklisted IP Tracker (C-CIR-T) · Malware (Hybrid-Analysis)

87.236.195.216 IPv4

modified 2026-10-18 05:31:22
Anonymizer (FireHol) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

91.214.191.139 IPv4

modified 2026-10-18 05:29:43
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

103.149.168.234 IPv4

modified 2026-10-18 05:13:38
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

51.222.15.8 IPv4

modified 2026-10-18 05:13:30
TOR Node (Maltiverse Threat Observatory) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Proxy (FireHOL) · Anonymizer (FireHOL)

94.16.118.23 IPv4

modified 2026-10-18 05:13:12
Anonymizer (FireHol) · Anonymizer (Maltiverse) · Anonymizer (Maltiverse Research Team) · MemScan:Trojan.Ransom.WannaCryptor (Hybrid-Analysis) · Malware (Hybrid-Analysis)

159.195.7.151 IPv4

modified 2026-10-18 05:11:46
HTTP Scrapper (AbuseIPDB) · Bruteforce (AbuseIPDB) · SSH Attacker (AbuseIPDB) · HTTP Attacker (AbuseIPDB) · Port Scanner (AbuseIPDB)

89.100.212.29 IPv4

modified 2026-10-18 05:10:25
Mail Spammer (Barracuda) · TOR Node (Maltiverse Threat Observatory) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats)

135.125.202.252 IPv4

modified 2026-10-18 05:10:20
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

179.43.141.195 IPv4

modified 2026-10-18 05:09:58
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

152.53.16.13 IPv4

modified 2026-10-18 05:09:39
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

77.173.106.70 IPv4

modified 2026-10-18 05:08:30
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Anonymizer (FireHOL)

207.244.78.230 IPv4

modified 2026-10-18 05:08:29
TOR Node (IPWhois.io) · VPN (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

94.16.123.67 IPv4

modified 2026-10-18 05:05:15
Anonymizer (FireHol) · Anonymizer (Maltiverse) · locker,ransomware,CryptoWall (Maltiverse) · gozi ,isfb ,papras ,ursnif (Maltiverse) · evasive ,financial ,zeus ,zeus1134 (Maltiverse)

193.30.123.113 IPv4

modified 2026-10-18 05:03:13
Anonymizer (Maltiverse) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis) · TOR Node (IPWhois.io) · TOR Node (Maltiverse Threat Observatory)

185.220.101.194 IPv4

modified 2026-10-18 05:03:13
SSH Attacker (Telefonica CO SOC) · HTTP bot (Blocklist.de) · Malicious host (Darklist) · HTTP Attacker (BadIPs) · SSH Attacker (Blocklist.net.ua)

89.25.152.215 IPv4

modified 2026-10-18 05:03:12
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

142.132.230.17 IPv4

modified 2026-10-18 05:03:11
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Proxy (IPWhois.io)

82.27.94.2 IPv4

modified 2026-10-18 05:02:42
TOR Node (Maltiverse Threat Observatory) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats)

46.4.32.184 IPv4

modified 2026-10-18 05:02:42
Anonymizer (FireHol) · Anonymizer (Maltiverse) · Proxy (Mr.Looquer) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis)

217.154.191.103 IPv4

modified 2026-10-18 05:02:42
Suspicious Host (AbuseIPDB) · TOR Exit Node (TorProject.org) · ET TOR Known Tor Exit Node TCP Traffic (Emerging Threats) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · HTTP Spammer (StopForumSpam.com)

135.125.201.99 IPv4

modified 2026-10-18 05:02:40
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

202.61.224.179 IPv4

modified 2026-10-18 05:02:39
Malware (Hybrid-Analysis) · Anonymizer (Maltiverse) · TOR Node (IPWhois.io) · TOR Node (Maltiverse Threat Observatory) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats)

192.42.116.117 IPv4

modified 2026-10-18 05:02:39
Suspicious Host (AbuseIPDB) · Mail Spammer (Blocklist.de) · HTTP bot (Blocklist.de) · SSH Attacker (Blocklist.de) · HTTP Spammer (Sblam)

64.65.0.110 IPv4

modified 2026-10-18 05:02:38
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

64.65.63.80 IPv4

modified 2026-10-18 05:02:38
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL) · Anonymizer (FireHOL) · Proxy (IPWhois.io)

51.15.20.180 IPv4

modified 2026-10-18 05:02:29
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL) · Anonymizer (FireHOL)

144.76.166.199 IPv4

modified 2026-10-18 05:02:06
Malware (Hybrid-Analysis) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

81.7.18.7 IPv4

modified 2026-10-18 05:02:05
Anonymizer (FireHol) · Anonymizer (Maltiverse) · Generic.Malware (Hybrid-Analysis) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis)

103.149.168.189 IPv4

modified 2026-10-18 05:01:33
TOR Node (Maltiverse Threat Observatory) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Proxy (IPWhois.io)

148.251.33.107 IPv4

modified 2026-10-18 05:01:15
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

82.38.63.99 IPv4

modified 2026-10-18 05:00:59
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

130.225.244.90 IPv4

modified 2026-10-18 04:59:51
Anonymizer (Maltiverse) · Proxy (Mr.Looquer) · HTTP Spammer (Botscout) · Mail Spammer (Blocklist.de) · HTTP Spammer (Cleantalk.org)

91.214.191.130 IPv4

modified 2026-10-18 04:59:50
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

193.200.229.34 IPv4

modified 2026-10-18 04:59:43
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

64.65.0.23 IPv4

modified 2026-10-18 04:59:21
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

65.109.174.85 IPv4

modified 2026-10-18 04:59:16
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Anonymizer (FireHOL)

89.58.58.209 IPv4

modified 2026-10-18 04:59:15
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

192.42.116.149 IPv4

modified 2026-10-18 04:59:10
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

192.42.116.160 IPv4

modified 2026-10-18 04:58:35
TOR Node (Maltiverse Threat Observatory) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats)

137.74.46.232 IPv4

modified 2026-10-18 04:58:33
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

64.65.1.113 IPv4

modified 2026-10-18 04:57:43
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL)

176.126.84.25 IPv4

modified 2026-10-18 04:57:11
Mail Spammer (Barracuda) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

23.227.186.186 IPv4

modified 2026-10-18 04:56:59
Mail Spammer (Abuseat.org) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Anonymizer (FireHOL) · Proxy (FireHOL) · TOR Node (Maltiverse Threat Observatory)

89.58.43.207 IPv4

modified 2026-10-18 04:56:58
Mail Spammer (Abuseat.org) · TOR Node (Maltiverse Threat Observatory) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Mail Spammer (Barracuda)

107.189.10.229 IPv4

modified 2026-10-18 04:56:26
Mail Spammer (Abuseat.org) · DDoS Attacker (Blocklist.net.ua) · TOR Node (IPWhois.io) · Proxy (IPWhois.io) · VPN (IPWhois.io)

5.231.123.238 IPv4

modified 2026-10-18 04:56:24
Proxy (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Proxy (FireHOL) · Anonymizer (FireHOL) · TOR Node (Maltiverse Threat Observatory)

87.236.197.123 IPv4

modified 2026-10-18 04:56:21
Anonymizer (FireHol) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

185.220.101.205 IPv4

modified 2026-10-18 04:56:18
SIP Attacker (Blocklist.de) · SSH Attacker (Telefonica CO SOC) · Malicious host (Darklist) · HTTP Spammer (Botscout) · SSH Attacker (Blocklist.net.ua)

91.214.191.184 IPv4

modified 2026-10-18 04:56:10
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

192.42.116.137 IPv4

modified 2026-10-18 04:56:10
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

188.40.99.69 IPv4

modified 2026-10-18 04:53:56
Anonymizer (Maltiverse) · ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic (Emerging Threats) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis) · TOR Node (IPWhois.io)

171.25.193.37 IPv4

modified 2026-10-18 04:47:20
Suspicious Host (AbuseIPDB) · Malicious domain (Maltiverse Threat Observatory) · Proxy (IPWhois.io) · IMAP Attacker (Blocklist.de) · Mail Spammer (Blocklist.de)

5.255.127.222 IPv4

modified 2026-10-18 04:47:02
Mail Spammer (Abuseat.org) · IMAP Attacker (Blocklist.de) · Mail Spammer (Blocklist.de) · SQL Injection (AbuseIPDB) · DDoS attack (AbuseIPDB)

92.60.38.166 IPv4

modified 2026-10-18 04:45:55
Mail Spammer (Abuseat.org) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

185.189.125.22 IPv4

modified 2026-10-18 04:45:54
Anonymisation Services (Maltiverse) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

103.109.100.207 IPv4

modified 2026-10-18 04:45:44
Anonymizer (FireHol) · Mail Spammer (Barracuda) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

87.106.222.192 IPv4

modified 2026-10-18 04:41:17
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

137.226.34.45 IPv4

modified 2026-10-18 04:40:27
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

193.63.58.76 IPv4

modified 2026-10-18 04:39:07
Anonymizer (Maltiverse) · ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic (Emerging Threats) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis) · TOR Node (IPWhois.io)

80.94.92.99 IPv4

modified 2026-10-18 04:37:47
SSH Attacker (Blocklist.net.ua) · SSH Attacker (Blocklist.de) · Malicious domain (Maltiverse Threat Observatory) · HTTP Spammer (Myip.ms) · DDoS attack on site evak911.com (Blocklist.net.ua)

213.164.193.245 IPv4

modified 2026-10-18 04:36:58
Malicious Host (CIArmy) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

185.220.101.200 IPv4

modified 2026-10-18 04:36:23
HTTP Attacker (BadIPs) · Malicious host (Darklist) · Mail Spammer (Blocklist.de) · SSH Attacker (Telefonica CO SOC) · SIP Attacker (Blocklist.de)

93.123.12.112 IPv4

modified 2026-10-18 04:33:25
Anonymizer (FireHol) · Mail Spammer (Abuseat.org) · Bruteforce login attacker (Blocklist.de) · HTTP Attacker (Blocklist.de) · HTTP Spammer (GPF DNS Blocklist)

50.28.86.149 IPv4

modified 2026-10-18 04:31:54
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Anonymizer (FireHOL)

162.251.116.50 IPv4

modified 2026-10-18 04:29:46
VPN (IPWhois.io) · Proxy (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

82.64.238.84 IPv4

modified 2026-10-18 04:29:34
Anonymizer (FireHol) · Anonymizer (Maltiverse) · Proxy (Mr.Looquer) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis)

37.221.196.71 IPv4

modified 2026-10-18 04:29:29
Anonymizer (FireHol) · Proxy (Mr.Looquer) · Anonymizer (Maltiverse) · Anonymizer (Maltiverse Research Team) · TOR Node (IPWhois.io)

190.211.254.192 IPv4

modified 2026-10-18 04:27:12
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

185.82.127.213 IPv4

modified 2026-10-18 04:26:32
TOR Node (IPWhois.io) · TOR Node (Maltiverse Threat Observatory) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Proxy (IPWhois.io)

178.20.55.16 IPv4

modified 2026-10-18 04:25:57
DDoS attack on site workoutadama.com (Blocklist.net.ua) · Log4j Attacker (CCN-CERT) · AIT:Trojan.Nymeria (Hybrid-Analysis) · gozi,isfb,papras,ursnif (Maltiverse) · Parasite traffic on site old.chdtu.edu.ua. (Blocklist.net.ua)

185.184.68.123 IPv4

modified 2026-10-18 04:21:53
Mail Spammer (Barracuda) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

5.34.176.184 IPv4

modified 2026-10-18 04:20:38
Anonymizer (FireHol) · ET CNC Feodo Tracker Reported CnC Server UDP (Emerging Threats) · ET CNC Feodo Tracker Reported CnC Server TCP (Emerging Threats) · Mail Spammer (Barracuda) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats)

15.204.57.248 IPv4

modified 2026-10-18 04:20:24
Mail Spammer (Abuseat.org) · Anonymizer (FireHOL) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL)

163.220.236.40 IPv4

modified 2026-10-18 04:18:58
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

23.227.186.194 IPv4

modified 2026-10-18 04:17:59
Mail Spammer (Abuseat.org) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Anonymizer (FireHOL) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL)

157.90.183.103 IPv4

modified 2026-10-18 04:17:44
Anonymizer (Maltiverse) · Anonymizer (Maltiverse Research Team) · Malware (Hybrid-Analysis) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats)

171.25.193.36 IPv4

modified 2026-10-18 04:17:11
Suspicious Host (AbuseIPDB) · FTP Attacker (AbuseIPDB) · DDoS attack (AbuseIPDB) · Proxy (IPWhois.io) · VPN (IPWhois.io)

2.58.21.105 IPv4

modified 2026-10-18 04:15:54
Anonymizer (FireHol) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · Anonymizer (FireHOL) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL)

160.187.148.71 IPv4

modified 2026-10-18 04:15:24
Suspicious Host (AbuseIPDB) · TOR Node (IPWhois.io) · HTTP Spammer (StopForumSpam.com) · TOR Exit Node (TorProject.org) · ET TOR Known Tor Exit Node TCP Traffic (Emerging Threats)

146.0.36.87 IPv4

modified 2026-10-18 04:14:25
Mail Spammer (Abuseat.org) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

89.58.53.213 IPv4

modified 2026-10-18 04:14:01
Anonymizer (FireHol) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)

137.74.5.135 IPv4

modified 2026-10-18 04:13:59
TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (IPWhois.io)

64.65.62.165 IPv4

modified 2026-10-18 04:13:45
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory) · Proxy (FireHOL) · Proxy (IPWhois.io)

94.46.171.221 IPv4

modified 2026-10-18 04:11:21
Anonymizer (FireHol) · TOR Node (IPWhois.io) · ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic (Emerging Threats) · TOR Node (Maltiverse Threat Observatory)