138.0.172.135

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
26% Elevated
27 reports
19 reporters · latest 5 days ago
ISP
JustWeb Telecomunicações LTDA
Usage Type
Fixed Line ISP
ASN
AS264552
Domain Name
justweb.com.br
Country
🇧🇷 Brazil
City
Ribeirao das Neves, Minas Gerais
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 2 🇫🇷 France 1 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1
Most common categories Bad Web Bot 5 Exploited Host 1 Hacking 1 Port Scan 1 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
2026-11-09 21:52:28 warning[2508933]: host [138.0.172.135]: unauthorized access attempted: /
Port Scan Brute-Force
Anonymous
Hacking Bad Web Bot
🇫🇷 LRob
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0
Bad Web Bot
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
Exploited Host Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇭🇰 Anonymous
2026-08-12 21:52:15 warning[3727730]: host 138-0-172-135.justwebtelecom.com.br[138.0.172.135]: unauthorized telnet access attempted: tcp/23
Port Scan Brute-Force
🇩🇪 KPS
PortscanN
Port Scan
🇺🇸 RAP
2026-08-12 03:19:07 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇩🇪 SMARTNET
Aisuru(Mirai variant) DDoS | Incident ID: f33ea243-b344-42fe-b994-8adedb9f85ca
DDoS Attack
🇨🇦 polycoda
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php?rsd
Web App Attack
🇺🇸 LARL-Stompro-2024
Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.180.246.183
🇸🇬 206.189.37.83
🇩🇪 165.245.241.136
🇨🇳 157.255.29.89
🇹🇼 101.13.4.124
🇺🇸 54.197.129.129
🇳🇱 35.214.193.82
🇳🇱 34.1.238.5
🇩🇪 31.76.29.13
🇮🇶 31.7.86.142
🇮🇷 31.7.66.163
🇺🇸 4.150.194.44
🇺🇸 185.61.222.11
🇳🇱 160.119.66.206
🇺🇸 109.105.210.30
🇮🇩 103.38.106.57
🇻🇳 58.186.69.22
🇸🇬 43.134.142.181
🇳🇱 35.214.218.74
🇺🇸 34.174.135.208
feedback