109.70.100.10 Threat Intelligence and Host Information

Mar 04, 2026 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 109.70.100.10 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 85/100

Host and Network Information

  • Mitre ATT&CK IDs: T1071.001 - Web Protocols, T1105 - Ingress Tool Transfer, T1204.002 - Malicious File, T1566.002 - Spearphishing Link

  • Tags: 2026-02, automated, Automated, dugganusa, feed-harvest, feodo, ja3, OpenCTI, openphish, spamhaus, sslbl, tor, urlhaus

  • Known tor exit node

  • JARM: 2ad2ad16d2ad2ad00042d42d000000332dc9cd7d90589195193c8bb05d84fa

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: dm_tor, et_tor, stopforumspam_180d, stopforumspam_1d, stopforumspam_30d, stopforumspam_365d, stopforumspam_7d, stopforumspam_90d, stopforumspam

  • Known TOR node
  • Country: Austria
  • Network:
  • Noticed: 50 times
  • Protocols Attacked: web
  • Passive DNS Results: tor-exit-anonymizer.appliedprivacy.net

Malware Detected on Host

Count: 63 4edba2a760f3c20f99f42d0dc88e6c8d436161941f1a3dfcf0707d9b005f9610 e26e533b939e94b1c51a623e45efa142aa2dc6242b3388c3c4b18514b7ab8a1a b11e614cdd02aecb8d6ae65bf67bfac8cbefd68830065217e2cb48922743bb12 2212bdbab238e6b217595453110eef154f7963e396be1d8a08fce3d043516c0e fa79af753be9d94ad291207efa6d103b3daa08bd34512ce14a994946d1046b23 0aca83c119bcff4eab7b88c26d839e2cca3de41eb905c86d57f4afb8bcbf0877 87898b0d6eef51e25ccf453c4b796bc41bd90ea4924337ac346e21dacc2f1c67 a8b099573c16eaa6ceef21f5b2edbf83aeb12b15e55f3c41e2f669ad181089ed 7282e2fdb25b07554b082f5cf1697315ed5ce3005f985cbe96a34da965869db5 9b20c9f97d2a70390cd1cd1f1248d8fab63493d2e8479977f49a115ee1f74ea7

Open Ports Detected

22 9000 9001 9002

Map

Whois Information

  • inetnum: 109.70.100.0 - 109.70.100.127
  • netname: Tor-Exit-Anonymizer–Foundation-for-Applied-Privacy
  • country: AT
  • org: ORG-PRIV3-RIPE
  • admin-c: FFAP1-RIPE
  • tech-c: FFAP1-RIPE
  • status: SUB-ALLOCATED PA
  • mnt-by: APPLIEDPRIVACY-MNT
  • created: 2022-01-08T15:23:22Z
  • last-modified: 2022-01-08T15:23:22Z
  • organisation: ORG-PRIV3-RIPE
  • org-name: Foundation for Applied Privacy
  • country: AT
  • descr: ZVR: 1254016365
  • org-type: OTHER
  • address: Floragasse 7, 5. OG
  • address: 1040 Vienna
  • address: Austria
  • phone: +43 670 3553536
  • abuse-c: ATF13-RIPE
  • mnt-ref: AS1764-MNT
  • mnt-ref: APPLIEDPRIVACY-MNT
  • mnt-by: AS1764-MNT
  • mnt-by: APPLIEDPRIVACY-MNT
  • created: 2018-04-13T13:17:07Z
  • last-modified: 2022-12-01T17:23:23Z
  • role: Foundation for Applied Privacy NOC
  • address: Floragasse 7, 5. OG
  • address: 1040 Vienna
  • address: Austria
  • phone: +43 670 3553536
  • nic-hdl: FFAP1-RIPE
  • mnt-by: APPLIEDPRIVACY-MNT
  • created: 2020-04-19T16:48:40Z
  • last-modified: 2025-03-09T10:17:21Z
  • route: 109.70.100.0/24
  • origin: AS208323
  • mnt-by: AS1764-MNT
  • created: 2019-09-06T12:05:10Z
  • last-modified: 2020-04-20T09:32:25Z

Links to attack logs

cfglobal-web-bruteforce-ip-list-2026-03-03

Share on: