138.185.40.70

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
12 reports
11 reporters · latest 2 months ago
ISP
WordNet Internet Banda Larga
Usage Type
Fixed Line ISP
ASN
AS263384
Domain Name
wordnet.com.br
Country
🇧🇷 Brazil
City
Pelotas, Rio Grande do Sul
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

138.185.40.70 has been reported 12 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
12 from 11 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇫🇷 Petre 21_ip
2026-08-20T03:25:35.582128+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=138.185.40.70 DST=155.133.26.57 LEN=540 TOS=0x00 PREC=0x00 TTL=52 ID=50370 DF PROTO=UDP SPT=65148 DPT=31728 LEN=520 ...
Port Scan
🇫🇷 Zkillu
DDoS Attack Exploited Host
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=3306 | HITS=2 | IPSET=ADD | FIRST=2026-08-19 14:51:46 | LAST=2026-08-19 14:51:47. Last seen 2026-08-19 14:51:47.
Port Scan
🇷🇸 Smel
SQL/MH Probe, Scan, Hack -
Port Scan Hacking SQL Injection
Anonymous
denied traffic to a honeypot network. destination port 36962.
Port Scan Hacking
🇫🇷 Zkillu
DDoS flood attack against 31.56.58.23 (2026-08-15 17:54:21 -> 2026-08-15 18:09:21 UTC) targeting AS215599. This IP (AS263384) sent ~486 packets (0.56 MB) during the attack window. Likely a compromised device (botnet).
DDoS Attack Exploited Host
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan
Web App Attack Hacking
🇩🇪 FeG Deutschland
Mail: - login with unknown user - bruteforce
Brute-Force
🇩🇪 Pingger Shikkoken
Participating in DDoS Amplification Attack! Sending 11 requests over 47045s asking for ?0? of cisco.com, apple.com, atlassian.com
DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 193.163.125.41
🇩🇪 64.89.163.251
🇫🇷 62.210.114.99
🇧🇪 35.205.188.209
🇧🇷 186.193.158.232
🇺🇸 129.121.141.166
🇨🇳 119.145.167.171
🇺🇸 104.37.102.67
🇷🇴 92.118.39.50
🇸🇬 85.203.21.156
🇺🇸 66.132.159.45
🇬🇧 51.195.244.103
🇵🇰 37.111.143.125
🇩🇪 23.132.164.185
🇺🇸 20.169.236.213
🇹🇷 193.35.155.159
🇦🇷 179.36.73.157
🇦🇷 149.107.234.137
🇦🇷 143.0.171.36
🇨🇳 124.152.246.220
feedback