172.81.177.173
Classification: Suspicious
172.81.177.173 is a suspicious IP address. Reported by 3 threat sources, last seen 2026-09-03. Network: AS174 Lunanode Hosting Inc..
Current activity
- TOR node — Part of the TOR anonymization network.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2026-08-18 11:02:04 | 2026-09-03 11:01:57 | anomalous-activity anonymization tor | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2026-08-18 11:01:12 | 2026-09-03 11:01:11 | anomalous-activity anonymization tor | |
| TOR Exit Node | TorProject.org | 2026-08-17 10:03:05 | 2026-08-31 10:03:03 | anomalous-activity anonymization tor | |
| Unknown malware | ThreatFox Abuse.ch | 2025-10-21 17:24:20 | 2025-10-21 17:24:20 | malicious-activity |
Tags
port:443 c2 censys as394745 lh-as-1 mythic tor anonymizationWhois information
- AS name
- AS174 Lunanode Hosting Inc.
- Registrant
- Lunanode Hosting Inc.
- City
- Port Coquitlam
- Postal code
- V3B
- Country
- CA — Canada 🇨🇦
- First indexed
- 2025-10-21 17:24:20
- Last updated
- 2026-09-03 11:01:57