JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.36.241.215

Recent Activity

Abuse Confidence Score

11% Caution

30 reports

20 reporters · latest 2 days ago

ISP: AGRESTE LINK
Usage Type: Fixed Line ISP
ASN: AS264589
Domain Name: agrestelink.com.br
Country: 🇧🇷 Brazil
City: Garanhuns, Pernambuco

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

30 from 20 distinct reporters

First reported

March 28th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 1 🇷🇺 Russian Federation 1

Most common categories Bad Web Bot 1 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-09 07:15:04 UTC · (2 days ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Attack Signature Blocked: /brands/shopby/manufacturer-panasonic-crestron-lsi-sms-aruba_networks-haivision-sanus-xyz.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇳🇱 ByeByte API	2026-09-12 20:38:33 UTC · (1 month ago)	Port scan from this IP. Firewall dropped every packet. Targeted UDP ports: 53962. Single burst at 2026-09-12 20:38 UTC.	Port Scan
🇩🇪 ValtonTahiri	2026-08-31 18:20:39 UTC · (2 months ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=138.36.241.215; proto=UDP; source_port=30319; targ ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=138.36.241.215; proto=UDP; source_port=30319; target_port=44931 show less	Port Scan
🇩🇪 EinfxchFinn	2026-08-30 03:49:03 UTC · (2 months ago)	Unauthorized connection attempt to port 52637 from 138.36.241.215	Port Scan
🇺🇸 xmission.com	2026-08-24 20:21:30 UTC · (2 months ago)	Blocked by UFW (TCP on 8080) Source port: 30601 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 138.36.241.215) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Web App Attack
🇫🇷 Petre 21_ip	2026-08-23 02:19:13 UTC · (2 months ago)	2026-08-23T04:19:12.694596+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=138.36.241.215 DST=155.133.26.57 LEN=46 TOS=0x00 PREC=0x00 TTL=49 ID=44106 DF PROTO=UDP SPT=30504 DPT=59346 LEN=26 ...	Port Scan
Anonymous	2026-08-22 01:36:42 UTC · (2 months ago)	denied traffic to a honeypot network. destination port 11833.	Port Scan Hacking
🇫🇷 Zkillu	2026-08-15 17:55:00 UTC · (2 months ago)	UDP flood attack on 31.56.58.23 UDP:80 and UDP:9100 (2026-08-15 17:53-17:57 UTC). Peak aggregate 32 Gbps / 1.95 Mpps against victim AS215599 - RTBH mitigation triggered. This IP (AS264589) sent ~3459 packets (3.94 MB) during the attack window. Likely ... show more UDP flood attack on 31.56.58.23 UDP:80 and UDP:9100 (2026-08-15 17:53-17:57 UTC). Peak aggregate 32 Gbps / 1.95 Mpps against victim AS215599 - RTBH mitigation triggered. This IP (AS264589) sent ~3459 packets (3.94 MB) during the attack window. Likely a compromised device (Mirai-like botnet). show less	DDoS Attack Exploited Host
🇩🇪 polido	2026-08-07 01:52:59 UTC · (3 months ago)	[debian-4gb-nbg1-1] Unauthorized connection attempt to port 47604 from 138.36.241.215	Port Scan
Anonymous	2026-08-06 04:06:29 UTC · (3 months ago)	denied traffic to a honeypot network. destination port 1122.	Port Scan Hacking
🇩🇪 Admins@FBN	2026-08-03 12:23:09 UTC · (3 months ago)	FW-PortScan: Traffic Blocked srcport=30338 dstport=61955	Port Scan
🇩🇪 Admins@FBN	2026-08-03 07:44:53 UTC · (3 months ago)	FW-PortScan: Traffic Blocked srcport=30298 dstport=61955	Port Scan
🇵🇱 proximity0	2026-08-01 03:06:06 UTC · (3 months ago)	Port scan / attack attempt. Ports: 47100	Brute-Force SSH
🇮🇳 Mr.Singh	2026-07-30 03:30:09 UTC · (3 months ago)	NFT blocked 138.36.241.215 on 30-Jul-2026..	Port Scan Brute-Force
🇩🇪 Admins@FBN	2026-07-28 01:49:43 UTC · (3 months ago)	FW-PortScan: Traffic Blocked srcport=30708 dstport=54310	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 219.150.93.157

🇺🇸 216.189.149.119

🇪🇸 130.185.91.82

🇨🇳 111.53.185.153

🇨🇿 72.63.111.150

🇧🇪 34.38.88.176

🇺🇸 18.204.230.186

🇷🇴 2.57.121.25

🇩🇪 193.124.20.232

🇩🇪 185.249.220.163

🇸🇬 157.230.33.39

🇺🇸 122.8.46.200

🇭🇰 118.193.45.134

🇧🇪 34.38.19.77

🇺🇸 3.86.171.46

🇩🇪 2a03:2880:f37a:120:face:b00c:0:167

🇳🇱 195.178.110.227

🇺🇸 129.121.143.242

🇫🇮 104.245.240.171

🇵🇱 189.104.116.144