138.36.240.254
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- AGRESTE LINK
- Usage Type
- Fixed Line ISP
- ASN
- AS264589
- Domain Name
- agrestelink.com.br
- Country
- 🇧🇷 Brazil
- City
- Terezinha, Pernambuco
Abuse Reports
Total reports
56 from
31 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T11:06:00Z.
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇩🇪 LRob |
Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use | path: /18-velo-route
|
DDoS Attack Web App Attack | |
| 🇫🇷 Zkillu |
|
DDoS Attack Exploited Host | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 8526.
|
Port Scan Hacking | |
| 🇧🇷 diego |
[rede-arem1] 08/05/2026-06:51:58.647917, 138.36.240.254, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 165
|
Hacking | |
| 🇮🇩 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 165).
|
Hacking Web App Attack | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=1089 dstport=23316
|
Port Scan | |
| 🇯🇵 jay hung |
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown