138.201.85.243
Classification: Malicious
138.201.85.243 is a malicious IP address in Falkenstein/Vogtl., DE. 55 sightings from 3 threat sources (TOR Node), last seen 2026-11-07. Seen in 5 countries.
Current activity
- TOR node — Part of the TOR anonymization network.
- Open proxy — Provides anonymization that can hide an attacker.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in AR, BR, CO, IT and US, across education, government, healthcare, manufacturing, media and technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| TOR Node | Maltiverse Threat Observatory | 2026-08-27 14:07:02 | 2026-11-07 05:05:21 | anonymization country_code:ar country_code:br country_code:co country_code:it country_code:us industry:education-and-nonprofits industry:government-and-public-sector industry:healthcare-and-pharmaceutical industry:manufacturing industry:media-and-entertainment industry:technology-and-telecommunications malicious-activity tor | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2026-08-21 11:03:04 | 2026-11-05 13:02:42 | anomalous-activity anonymization tor | |
| Proxy | IPWhois.io | 2026-10-28 12:18:48 | 2026-10-28 12:18:48 | anonymization proxy |
Tags
tor anonymization port:9080Whois information
- AS name
- AS24940 Hetzner Online GmbH
- Registrant
- Hetzner Online GmbH
- City
- Falkenstein/Vogtl.
- Postal code
- 08223
- Country
- DE — Germany 🇩🇪
- First indexed
- 2026-08-21 11:03:04
- Last updated
- 2026-11-07 05:10:01