Threat LevelHIGH54/1001 rule type

5 incidents on record · confirmed on global blocklist · persistent 30-day campaign · last seen 7d ago · Tor exit node

PTR	tor-exit.hu.2cb.li
Org / ASN	MAXKO d.o.o
Country	🇭🇺 Hungary
City	Nyíregyháza, Szabolcs-Szatmár-Bereg
Timezone	Europe/Budapest

Attack Analysis

IDS: Tor Exit Node

This IP is a known Tor network exit node. Tor anonymizes user traffic by routing it through a series of relays; exit nodes are the final hop where traffic re-enters the public internet. While Tor has legitimate privacy uses, it is heavily abused for anonymous attacks, credential stuffing, and fraud — as the real attacker IP is concealed behind the exit node.

Reports (5)

Date	Severity	Description
23 Sep 2026 - 06:56	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 464
19 Sep 2026 - 20:59	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 464
12 Sep 2026 - 10:23	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 464
12 Sep 2026 - 10:22	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 464
23 Aug 2026 - 23:23	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 464

Report for IP: 45.9.168.102

Attack Analysis

Reports (5)

Related IPs — Same /24 Block (45.9.168.0/24)