213.138.77.238
Classification: Malicious
213.138.77.238 is a malicious IP address. Reported by 14 threat sources, last seen 2026-09-01. Network: AS15774 Joint Stock Company TransTeleCom.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Proxy | IPWhois.io | 2025-03-08 06:53:13 | 2026-09-01 08:51:55 | anonymization proxy | |
| Mail Spammer | Barracuda | 2022-12-28 09:01:29 | 2026-09-01 08:51:55 | attacker malicious-activity | |
| DNS Server | Public-dns.info | 2021-11-15 05:40:00 | 2026-09-01 02:00:40 | benign | |
| Proxy | FireHOL | 2023-01-03 03:33:07 | 2025-10-06 15:19:03 | anonymization | |
| IMAP Attacker | Blocklist.de | 2018-12-04 06:53:53 | 2021-08-16 04:56:05 | malicious-activity | |
| HTTP Spammer | Sblam | 2019-04-16 09:22:24 | 2021-07-20 06:36:56 | malicious-activity | |
| HTTP Spammer | StopForumSpam.com | 2018-10-24 09:27:13 | 2021-05-12 08:52:05 | malicious-activity | |
| Anonymizer | Maltiverse Research Team | 2020-11-22 11:33:25 | 2021-03-28 14:22:02 | anonymizer | |
| Mail Spammer | Blocklist.de | 2018-08-16 06:54:56 | 2021-01-23 22:32:52 | malicious-activity | |
| Malicious Host | HoneyDB | 2019-07-13 00:00:00 | 2020-10-29 00:00:00 | ||
| HTTP Spammer | Cleantalk.org | 2018-12-03 06:58:19 | 2020-08-22 08:13:49 | ||
| DDoS Attacker | Blocklist.net.ua | 2020-06-01 02:18:41 | 2020-07-06 09:14:53 | ||
| Bruteforce login attacker | Blocklist.de | 2020-03-09 07:07:28 | 2020-04-21 07:37:08 | ||
| HTTP Attacker | Blocklist.de | 2020-03-09 07:03:44 | 2020-04-21 07:32:14 | ||
| Malicious host | Darklist | 2019-09-09 01:12:34 | 2019-09-09 01:12:34 | ||
| HTTP Spammer | GPF DNS Blocklist | 2019-03-18 08:00:46 | 2019-03-18 08:00:46 | ||
| Anonymizer | Maltiverse | 2018-09-05 08:35:27 | 2018-09-05 08:35:27 |
Tags
dns reflection anonymization mail spam anonymizer bot abuse attacker imap pop3 sasl apache ddos rfi login bruteforce joomla wordpressWhois information
- AS name
- AS15774 Joint Stock Company TransTeleCom
- AS registry
- ripencc
- AS date
- 2008-07-14 00:00:00
- AS CIDR
- 213.138.64.0/19
- CIDR
- 213.138.77.0/24
- Registrant
- Joint Stock Company TransTeleCom
- Address
- Russia, Rostov on Don Dobrovolskogo 1-2
- City
- Rostov-on-Don
- Postal code
- 344003
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected]
- First indexed
- 2018-08-16 06:54:56
- Last updated
- 2026-09-01 08:51:56