← Back to feed
171.25.193.39
TOR EXIT TAGGED SUSPICIOUS how we decide →
Why: Tor exit node that port-scanned through Tor (2 ports) · certainty: circumstantial
tor-exit-read-me.dfri.se
(dfri.se)
✓ FCrDNS
Location
🇸🇪 SE
ASN
AS198093 · Foreningen for digitala fri- och rattigheter
Cloud Provider
—
Total Events
1
Below average by volume
Agent Count
1
First / Last Seen
2026-10-05 16:31 — 2026-10-05 16:31
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Tor Exit Nodes
tor:exit_node
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
1
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
d1a837c4aadc0383
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-10-05 16:31:17 | :80 | http | HTTP GET request | opencanary | ewr |