89.126.230.31

Yes. FFraud classifies 89.126.230.31 as a Tor exit node. Connection type: Data Center.

FFraud scores 89.126.230.31 at 100/100 (critical risk) because Tor exit node actively routing anonymous traffic. Individual user intent cannot be determined, but Tor is frequently used to mask malicious activity. Attacking servers across multiple protocols. High-severity activity, corroborated by our honeypot sensors and multiple community reports. Located in a high-risk network neighborhood where 57% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.

89.126.230.31 is operated by GTHost (AS63023), located in Netherlands.

The score reflects high-confidence signals: Tor exit node actively routing anonymous traffic. Individual user intent cannot be determined, but Tor is frequently used to mask malicious activity. Attacking servers across multiple protocols. High-severity activity, corroborated by our honeypot sensors and multiple community reports. Located in a high-risk network neighborhood where 57% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.