138.249.138.128
Classification: Suspicious
138.249.138.128 is a suspicious IP address. Reported by 2 threat sources, last seen 2026-09-09. Network: AS63023 Costel Savulescu.
Current activity
- TOR node — Part of the TOR anonymization network.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2026-08-29 11:01:58 | 2026-09-09 11:01:51 | anomalous-activity anonymization tor | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2026-08-29 11:01:07 | 2026-09-09 11:01:06 | anomalous-activity anonymization tor | |
| TOR Exit Node | TorProject.org | 2026-08-28 10:03:03 | 2026-09-08 10:03:21 | anomalous-activity anonymization tor |
Tags
tor anonymizationWhois information
- AS name
- AS63023 Costel Savulescu
- Registrant
- Costel Savulescu
- City
- Wakefield
- Postal code
- WF1 1HG
- Country
- GB — United Kingdom 🇬🇧
- First indexed
- 2026-08-28 10:03:03
- Last updated
- 2026-09-09 11:01:51