JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.226.245.56

138.226.245.56 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 100%: ?

100%

ISP	VSYS UA COLO12
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6698
Hostname(s)	mail43.fast-svn.com
Domain Name	vsys.host
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.226.245.56

Whois 138.226.245.56

IP Abuse Reports for 138.226.245.56:

This IP address has been reported a total of 43 times from 33 distinct sources. 138.226.245.56 was first reported on July 22nd 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 pixiekat	2026-07-25 12:12:51 (14 hours ago)	[Sat Jul 25 13:12:49.564469 2026] [authz_core:error] [pid 2106629:tid 2106698] [client 138.226.245.5 ... show more [Sat Jul 25 13:12:49.564469 2026] [authz_core:error] [pid 2106629:tid 2106698] [client 138.226.245.56:54236] AH01630: client denied by server configuration: /var/www/html/ [Sat Jul 25 13:12:49.649023 2026] [authz_core:error] [pid 2106629:tid 2106694] [client 138.226.245.56:54236] AH01630: client denied by server configuration: /var/www/html/ [Sat Jul 25 13:12:50.784541 2026] [authz_core:error] [pid 2106629:tid 2106676] [client 138.226.245.56:54236] AH01630: client denied by server configuration: /var/www/html/ [Sat Jul 25 13:12:51.438234 2026] [authz_core:error] [pid 2106667:tid 2106738] [client 138.226.245.56:38938] AH01630: client denied by server configuration: /var/www/html/.azure-pipelines.yml [Sat Jul 25 13:12:51.509473 2026] [authz_core:error] [pid 2106667:tid 2106748] [client 138.226.245.56:38930] AH01630: client denied by server configuration: /var/www/html/nuxt.config.js ... show less	Brute-Force
🇬🇧 blik2108	2026-07-25 12:05:19 (14 hours ago)	wight.blacknell.co.uk:443 138.226.245.56 - - [25/Jul/2026:13:05:14 +0100] "GET /configuration.yml HT ... show more wight.blacknell.co.uk:443 138.226.245.56 - - [25/Jul/2026:13:05:14 +0100] "GET /configuration.yml HTTP/1.1" 404 5050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" wight.blacknell.co.uk:443 138.226.245.56 - - [25/Jul/2026:13:05:17 +0100] "GET /config/configuration.yml HTTP/1.1" 200 7580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" wight.blacknell.co.uk:443 138.226.245.56 - - [25/Jul/2026:13:05:18 +0100] "GET /config/initializers/secret_token.rb HTTP/1.1" 200 7580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" wight.blacknell.co.uk:443 138.226.245.56 - - [25/Jul/2026:13:05:18 +0100] "GET /config/settings.yml HTTP/1.1" 200 7580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" wight.blacknell.co.uk:443 138.226 ... show less	Brute-Force
🇮🇱 spd.co.il	2026-07-25 00:02:41 (1 day ago)	Web application attack detected	Hacking Web App Attack
Anonymous	2026-07-24 18:40:54 (1 day ago)	by Attack Lagwatch(gw)	DDoS Attack Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-24 17:43:11 (1 day ago)	138.226.245.56 - - [25/Jul/2026:02:43:04 +0900] "GET /actuator/heapdump HTTP/1.1" 403 458 "-" "Mozil ... show more 138.226.245.56 - - [25/Jul/2026:02:43:04 +0900] "GET /actuator/heapdump HTTP/1.1" 403 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 138.226.245.56 - - [25/Jul/2026:02:43:07 +0900] "GET /heapdump HTTP/1.1" 403 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 138.226.245.56 - - [25/Jul/2026:02:43:10 +0900] "GET /actuator;/heapdump HTTP/1.1" 403 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" ... show less	Brute-Force
🇯🇵 nhawsjones	2026-07-24 15:41:59 (1 day ago)	[Sat Jul 25 00:41:58.678748 2026] [authz_core:error] [pid 66921:tid 136122990577344] [client 138.226 ... show more [Sat Jul 25 00:41:58.678748 2026] [authz_core:error] [pid 66921:tid 136122990577344] [client 138.226.245.56:53854] AH01630: client denied by server configuration: /var/www/html/.htpasswd ... show less	Brute-Force
Anonymous	2026-07-24 14:34:27 (1 day ago)	138.226.245.56 - - [24/Jul/2026:23:34:17 +0900] "HEAD / HTTP/1.1" 403 4143 "-" "Mozilla/5.0 (Windows ... show more 138.226.245.56 - - [24/Jul/2026:23:34:17 +0900] "HEAD / HTTP/1.1" 403 4143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 138.226.245.56 - - [24/Jul/2026:23:34:18 +0900] "GET / HTTP/1.1" 403 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 138.226.245.56 - - [24/Jul/2026:23:34:22 +0900] "GET / HTTP/1.1" 403 4442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 138.226.245.56 - - [24/Jul/2026:23:34:23 +0900] "GET / HTTP/1.1" 403 4443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 138.226.245.56 - - [24/Jul/2026:23:34:26 +0900] "GET /service-account-credentials.json HTTP/1.1" 403 4441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... show less	Brute-Force
Anonymous	2026-07-24 07:03:06 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: UA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: UA, Attack patterns: WordPress scanning, SQL injection, Webshell probing show less	Bad Web Bot Web App Attack
🇯🇵 HeliJP	2026-07-23 15:45:51 (2 days ago)	2026-07-23T15:17:00Z - Recognized attacks\bad behavior from IP address 138.226.245.56 on port 443\80 ... show more 2026-07-23T15:17:00Z - Recognized attacks\bad behavior from IP address 138.226.245.56 on port 443\80 (3 daily hits): client denied by server configuration show less	Port Scan Hacking SQL Injection Brute-Force Web App Attack
Anonymous	2026-07-23 08:51:31 (2 days ago)	Malicious activity detected	DDoS Attack Bad Web Bot Web App Attack
Anonymous	2026-07-23 08:39:23 (2 days ago)	SIEM ALERT AUTO REPORT	Email Spam
🇬🇧 noise.agency	2026-07-23 07:46:51 (2 days ago)	138.226.245.56 (UA/Ukraine/mail43.fast-svn.com), more than 10 Apache 403 hits	Hacking
🇬🇧 Aetherweb Ark	2026-07-23 07:43:06 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 138.226.245.56 (UA/Ukraine/mail43.fast-svn.com) ... show more (mod_security) mod_security (id:949110) triggered by 138.226.245.56 (UA/Ukraine/mail43.fast-svn.com): N in the last X secs show less	Web App Attack
🇩🇪 LRob	2026-07-23 07:22:27 (2 days ago)	CrowdSec: crowdsecurity/http-probing \| req: /properties.ini \| 11 distinct paths \| UA: Mozilla/5.0 (W ... show more CrowdSec: crowdsecurity/http-probing \| req: /properties.ini \| 11 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
Anonymous	2026-07-23 07:02:59 (2 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: UA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: UA, Attack patterns: WordPress scanning, SQL injection, Webshell probing show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.156

🇺🇸 128.8.124.68

🇲🇲 103.154.241.40

🇳🇱 91.148.244.131

🇳🇱 91.92.47.66

🇺🇸 52.38.144.207

🇳🇱 45.148.10.152

🇧🇪 34.22.145.148

🇬🇧 194.50.235.142

🇳🇱 193.176.31.203

🇧🇷 167.250.190.253

🇨🇳 115.190.253.92

🇩🇿 105.96.13.6

🇫🇷 91.231.89.111

🇨🇳 8.163.113.81

🇲🇺 197.227.8.186

🇺🇸 186.179.63.217

🇺🇸 162.216.150.241

🇭🇰 150.5.141.198

🇫🇷 85.217.140.38