Threat LevelHIGH60/1001 rule type

16 incidents · confirmed on global blocklist · persistent 50-day campaign · last seen 3d ago

PTR	tor-exit-47.for-privacy.net
Org / ASN	ForPrivacyNET
Country	🇩🇪 Germany
City	Brandenburg an der Havel, Brandenburg
Timezone	Europe/Berlin

Attack Analysis

🇩🇪 Germany · Bonn · 60729 · Artikel10 E.V.

IDS: Tor Exit Node

This IP is a known Tor network exit node. Tor anonymizes user traffic by routing it through a series of relays; exit nodes are the final hop where traffic re-enters the public internet. While Tor has legitimate privacy uses, it is heavily abused for anonymous attacks, credential stuffing, and fraud — as the real attacker IP is concealed behind the exit node.

Reports (16)

Date	Severity	Description
30 Jul 2026 - 12:04	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 44
30 Jul 2026 - 12:04	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 44
20 Jul 2026 - 18:29	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 44
20 Jul 2026 - 18:29	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 44
25 Jun 2026 - 20:11	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 44
25 Jun 2026 - 20:11	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 44
22 Jun 2026 - 09:58	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 44
22 Jun 2026 - 09:58	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 44
22 Jun 2026 - 09:17	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 44
22 Jun 2026 - 09:17	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 44
22 Jun 2026 - 09:16	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 44
22 Jun 2026 - 09:16	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 44
13 Jun 2026 - 03:23	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 44
13 Jun 2026 - 03:23	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 44
10 Jun 2026 - 11:51	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Exit Node Traffic group 44
10 Jun 2026 - 11:51	high	IDS: Tor exit node — known anonymization network — ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 44

Report for IP: 185.220.101.47

Attack Analysis

Reports (16)

Related IPs — Same /24 Block (185.220.101.0/24)