5.231.123.238
Classification: Malicious
5.231.123.238 is a malicious IP address in Kirchberg, DE. 149 sightings from 4 threat sources (Anonymizer, TOR Node), last seen 2026-10-18.
Current activity
- TOR node — Part of the TOR anonymization network.
- Open proxy — Provides anonymization that can hide an attacker.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, CO, EC, HN, MX and US, across education, energy, financial services and retail networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| TOR Node | Maltiverse Threat Observatory | 2026-08-26 01:05:26 | 2026-10-18 04:05:12 | anonymization country_code:br country_code:co country_code:ec country_code:hn country_code:mx country_code:us industry:education-and-nonprofits industry:energy-and-utilities industry:financial-services industry:retail-and-hospitality malicious-activity tor | |
| Proxy | FireHOL | 2026-09-10 16:04:52 | 2026-10-17 18:17:36 | anomalous-activity anonymization proxy | |
| Anonymizer | FireHOL | 2026-07-16 16:55:23 | 2026-10-17 17:21:39 | anomalous-activity anonymization | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2026-07-17 13:02:42 | 2026-10-15 13:03:01 | anomalous-activity anonymization tor | |
| Proxy | IPWhois.io | 2026-07-16 17:06:20 | 2026-10-07 21:58:52 | anonymization proxy |
Tags
anonymization tor port:80Whois information
- AS name
- AS215365 Threatoff
- Registrant
- Threatoff
- City
- Kirchberg
- State
- NY
- Postal code
- 94259
- Country
- DE — Germany 🇩🇪
- First indexed
- 2026-07-16 16:55:23
- Last updated
- 2026-10-18 04:56:24