104.200.20.46

Classification: Suspicious

104.200.20.46 is a suspicious IP address. Linked to Tor malware. Reported by 10 threat sources, last seen 2023-05-18. Network: AS63949 Linode.

MITRE ATT&CK associations

Malware families: TOR (S0183)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
TOR Exit Node TorProject.org 2019-11-03 13:28:42 2023-05-18 03:26:44 anonymization anonymizer
Malicious Host HoneyDB 2023-05-02 00:00:00 2023-05-02 00:00:00 malicious-activity
Anonymizer FireHol 2022-12-30 00:16:31 2022-12-30 00:16:31 anonymization
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2018-06-26 07:47:07 2021-11-28 05:00:45 anonymization
ET TOR Known Tor Exit Node TCP Traffic Emerging Threats 2018-06-26 07:46:35 2021-11-28 04:57:27 anonymization
Malware Hybrid-Analysis 2021-07-22 10:45:25 2021-11-07 15:00:18
HTTP Spammer Sblam 2021-01-31 05:46:51 2021-07-20 06:32:11 malicious-activity
HTTP Spammer StopForumSpam.com 2020-11-27 22:01:27 2021-05-26 23:37:16 malicious-activity
Anonymizer Maltiverse Research Team 2020-11-21 20:09:50 2021-05-23 05:13:31 anonymizer
DDoS attack Blocklist.net.ua 2019-11-30 00:55:46 2020-12-19 08:38:41 malicious-activity
HTTP Spammer Cleantalk.org 2018-07-05 06:49:45 2019-02-22 07:33:44
Tor Hybrid-Analysis 2019-02-04 01:15:05 2019-02-04 01:15:05 S0183 Tor
AGEN.1020711 Hybrid-Analysis 2018-11-11 20:45:11 2018-11-11 20:45:11
Parasite traffic on site test-drives.autopark.in.ua. Blocklist.net.ua 2018-10-08 07:07:02 2018-10-24 07:07:40
ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic Emerging Threats 2018-06-20 22:15:39 2018-08-29 07:36:33
ET TOR Known Tor Exit Node UDP Traffic Emerging Threats 2018-06-20 22:15:08 2018-08-29 07:36:04
Parasite traffic on site nogotki.net.ua. Blocklist.net.ua 2018-07-25 06:44:49 2018-07-25 06:44:49
SSH Attacker Blocklist.net.ua 2018-06-16 08:14:40 2018-06-16 08:14:40
Mal_MiliCry Hybrid-Analysis 2018-05-08 06:45:21 2018-05-08 06:45:21
Parasite SEO Blocklist.net.ua 2018-04-06 09:00:39 2018-04-06 09:00:39

Tags

tor anonymization anonymizer abuse bot

Whois information

AS name
AS63949 Linode
AS registry
arin
AS date
2014-09-26 00:00:00
AS CIDR
104.200.16.0/21
CIDR
104.200.16.0/20
Registrant
Linode
Address
329 E. Jimmie Leeds Road Suite A
City
Richardson
State
TX
Postal code
75081
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
First indexed
2018-04-05 12:40:02
Last updated
2025-11-27 01:06:09