149.28.232.89
Classification: Suspicious
149.28.232.89 is a suspicious IP address. Reported by 5 threat sources, last seen 2026-09-06. Network: AS20473 Vultr Holdings, LLC.
Current activity
- TOR node — Part of the TOR anonymization network.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2026-09-02 11:01:57 | 2026-09-06 11:01:54 | anomalous-activity anonymization tor | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2026-09-02 11:01:08 | 2026-09-06 11:01:08 | anomalous-activity anonymization tor | |
| TOR Exit Node | TorProject.org | 2026-09-01 10:03:04 | 2026-09-01 10:03:04 | anomalous-activity anonymization tor | |
| SSH Attacker | Blocklist.de | 2026-05-09 10:01:20 | 2026-05-09 10:01:20 | malicious-activity | |
| Malicious Host | HoneyDB | 2026-05-08 00:00:00 | 2026-05-09 00:00:00 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-05-08 23:12:12 | 2026-05-08 23:12:12 | malicious-activity |
Tags
ssh bruteforce bot tor anonymizationWhois information
- AS name
- AS20473 Vultr Holdings, LLC
- Registrant
- Vultr Holdings, LLC
- City
- Piscataway
- State
- NJ
- Postal code
- 08854
- Country
- US — United States 🇺🇸
- First indexed
- 2026-05-08 10:05:15
- Last updated
- 2026-09-06 11:01:56