JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 174.138.5.239

174.138.5.239 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 174.138.5.239

Whois 174.138.5.239

IP Abuse Reports for 174.138.5.239:

This IP address has been reported a total of 26 times from 24 distinct sources. 174.138.5.239 was first reported on July 4th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 SeczarSecureOps	2026-07-15 14:03:50 (1 day ago)	Seczar SecureOps — Crypto Miner / C2 Outbound (5 events) — quarantined 43200m on LEFKOSA	Exploited Host
🇯🇵 jay hung	2026-07-15 00:04:19 (1 day ago)	2026-07-15T00:04:19.171324+00:00 quarktech kernel: [2718519.358583] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-15T00:04:19.171324+00:00 quarktech kernel: [2718519.358583] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=174.138.5.239 DST=172.237.20.248 LEN=64 TOS=0x00 PREC=0x40 TTL=42 ID=0 DF PROTO=TCP SPT=62508 DPT=33126 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 donarev419	2026-07-14 08:07:46 (2 days ago)	Connection to port 8080 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ... show more Connection to port 8080 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1 Host: 107.175.212.44:8080 User-Agent: Mozilla/5.0 zg show less	Port Scan Hacking
🇫🇷 geeek	2026-07-14 06:05:20 (2 days ago)	Port scanning: 8080 TCP Blocked	Port Scan
🇹🇭 Sawasdee	2026-07-14 05:09:05 (2 days ago)	Port Scan ...	Port Scan
🇺🇸 HamSammich	2026-07-14 04:04:22 (2 days ago)	Automated sensor: 2 RDP connection/probe attempts over the last 24h (latest 2026-07-14T04:04Z).	Port Scan Brute-Force
🇺🇸 ISPLtd	2026-07-12 17:01:34 (3 days ago)	Jul 12 11:01:33 174.138.5.239 TCP SPT=61845 DPT=22 SYN ...	Port Scan SSH
🇩🇪 iNetWorker	2026-07-12 11:45:52 (4 days ago)	trying to access non-authorized port	Port Scan
🇩🇪 ISPLtd	2026-07-12 06:29:34 (4 days ago)	Jul 12 03:29:31 174.138.5.239 TCP SPT=65194 DPT=12324 SYN Jul 12 03:29:33 174.138.5.239 TCP SPT=6552 ... show more Jul 12 03:29:31 174.138.5.239 TCP SPT=65194 DPT=12324 SYN Jul 12 03:29:33 174.138.5.239 TCP SPT=65529 DPT=1080 SYN Jul 12 03:29:33 174.138.5.239 TCP SPT=64792 DPT=1180 ... show less	Port Scan
🇫🇷 Petre 21_ip	2026-07-12 04:20:07 (4 days ago)	2026-07-12T06:20:07.085411+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-12T06:20:07.085411+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=174.138.5.239 DST=155.133.26.57 LEN=424 TOS=0x00 PREC=0x00 TTL=53 ID=39338 DF PROTO=UDP SPT=53268 DPT=4500 LEN=404 ... show less	Port Scan
🇦🇹 centurion	2026-07-12 01:26:50 (4 days ago)	Unauthorized attempt on git [5555/tcp] Source port: 61728 TTL: 51 Packet length: 64 TOS: 0x00 https: ... show more Unauthorized attempt on git [5555/tcp] Source port: 61728 TTL: 51 Packet length: 64 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ValtonTahiri	2026-07-12 01:03:35 (4 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=174.138.5.239; proto=TCP; source_port=62169; target_port=3389; flags=SYN show less	Port Scan
🇮🇹 CoreTech srl	2026-07-10 15:45:24 (6 days ago)	ntopng alert: blacklisted_client_contact	Hacking
Anonymous	2026-07-08 15:51:02 (1 week ago)	Jul 8 11:51:01 localhost kernel: [111871106.178825] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 8 11:51:01 localhost kernel: [111871106.178825] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=174.138.5.239 DST=[mungedIP2] LEN=64 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=62130 DPT=3390 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 8 11:51:01 localhost kernel: [111871106.178861] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=174.138.5.239 DST=[mungedIP2] LEN=64 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=62130 DPT=3390 SEQ=1077647805 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B4010303060101080AE062AE8E0000000004020000) Jul 8 11:51:01 localhost kernel: [111871106.524972] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=174.138.5.239 DST=[mungedIP2] LEN=64 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=62442 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 8 11:51:01 localhost kernel: [111871106.524998] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e: show less	Port Scan
🇷🇺 genokrad	2026-07-08 15:27:24 (1 week ago)	Unauthorized connection try on TCP/3389 (RDP)	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇨🇳 171.111.196.251

🇩🇪 134.209.241.3

🇰🇷 125.139.124.120

🇮🇳 103.220.234.84

🇺🇸 66.249.74.98

🇮🇳 150.241.244.100

🇨🇳 120.244.161.63

🇳🇱 45.148.10.200

🇺🇸 35.231.174.234

🇺🇸 35.196.123.59

🇺🇸 34.229.20.245

🇨🇳 223.167.75.86

🇧🇪 198.235.24.248

🇸🇬 198.38.91.219

🇬🇧 185.247.137.30

🇺🇸 166.62.85.184

🇺🇸 157.245.129.28

🇺🇸 147.182.201.132

🇵🇰 116.71.136.125