46.28.110.244

Classification: Suspicious

46.28.110.244 is a suspicious IP address. Linked to Tor malware. Reported by 5 threat sources, last seen 2023-08-16. Network: AS197019 Wedos Backbone Network.

MITRE ATT&CK associations

Malware families: TOR (S0183)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2017-10-15 14:34:16 2023-08-16 13:41:42 anonymization
Anonymizer FireHol 2022-12-29 08:49:52 2022-12-29 20:10:55 anonymization
Malware Hybrid-Analysis 2021-07-16 00:17:23 2021-12-30 12:15:19
Gen:Heur.Conjar Hybrid-Analysis 2021-06-23 23:15:59 2021-06-23 23:15:59
Trojan.Agentb Hybrid-Analysis 2021-06-23 23:00:30 2021-06-23 23:00:30
Gen:Variant.Graftor Hybrid-Analysis 2021-06-23 22:30:28 2021-06-23 22:30:28
Anonymizer Maltiverse Research Team 2020-11-21 15:47:51 2021-05-22 21:59:13 anonymizer
Trojan.Generic Hybrid-Analysis 2021-04-04 17:30:50 2021-04-04 17:30:50
Malware site Hybrid-Analysis 2020-02-21 13:30:21 2020-02-21 13:30:21
Generic.Malware Hybrid-Analysis 2019-08-10 18:45:04 2019-10-21 21:45:19
virus.js.qexvmc Hybrid-Analysis 2019-09-27 03:15:06 2019-09-27 03:15:06
Tor Hybrid-Analysis 2019-03-22 14:01:56 2019-03-22 14:01:56 S0183 Tor
AGEN.1020711 Hybrid-Analysis 2018-11-11 20:45:11 2018-11-11 20:45:12
Trojan.NSIS.Agent Hybrid-Analysis 2018-11-10 21:45:10 2018-11-10 21:45:10
ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic Emerging Threats 2017-10-17 12:56:14 2018-08-29 07:38:46
Anonymizer Maltiverse 2017-12-09 18:46:05 2017-12-09 18:46:05
ransomware Maltiverse 2017-12-05 20:54:01 2017-12-05 20:54:01
gozi,isfb,papras,ursnif Maltiverse 2017-10-24 14:46:45 2017-10-24 14:46:45

Tags

tor anonymization anonymizer

Whois information

AS name
AS197019 Wedos Backbone Network
AS registry
ripencc
AS date
2010-07-22 00:00:00
AS CIDR
46.28.104.0/21
Registrant
Wedos Backbone Network
City
Hluboká nad Vltavou
Postal code
373 41
Country
CZ — Czechia 🇨🇿
First indexed
2017-10-15 14:34:16
Last updated
2026-03-23 14:25:11

Malicious IPs in the same CIDR

46.28.109.231 46.28.104.66 46.28.109.233