Report for IP: 23.191.200.99

Threat LevelHIGH64/1001 rule type
10 incidents · confirmed on global blocklist · persistent 61-day campaign · seen 10h ago · Tor exit node
PTR N/A
Org / ASN Unredacted Inc
Country 🇺🇸 United States
City Bear, Delaware
Timezone America/New_York

Attack Analysis

IDS: Tor Exit Node
This IP is a known Tor network exit node. Tor anonymizes user traffic by routing it through a series of relays; exit nodes are the final hop where traffic re-enters the public internet. While Tor has legitimate privacy uses, it is heavily abused for anonymous attacks, credential stuffing, and fraud — as the real attacker IP is concealed behind the exit node.

Reports (10)

Date Severity Description
5 Nov 2026 - 21:39 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 96
5 Nov 2026 - 21:39 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 97
4 Nov 2026 - 04:58 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 96
4 Nov 2026 - 04:58 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 97
23 Oct 2026 - 05:21 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 97
23 Oct 2026 - 05:21 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 96
23 Sep 2026 - 18:55 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 96
23 Sep 2026 - 18:55 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 97
5 Sep 2026 - 22:42 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 96
5 Sep 2026 - 22:42 high IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 97