JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 174.138.56.49

174.138.56.49 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 174.138.56.49

Whois 174.138.56.49

IP Abuse Reports for 174.138.56.49:

This IP address has been reported a total of 62 times from 45 distinct sources. 174.138.56.49 was first reported on March 29th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-11-01 07:03:05 (7 months ago)	Bot / scanning and/or hacking attempts: GET / HTTP/1.1, [0/0] Software caused connection abort, GET ... show more Bot / scanning and/or hacking attempts: GET / HTTP/1.1, [0/0] Software caused connection abort, GET /favicon.ico HTTP/1.1, GET /login.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 xmission.com	2025-11-01 06:31:20 (7 months ago)	Blocked by UFW (TCP on 8090) Source port: 61003 TTL: 238 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8090) Source port: 61003 TTL: 238 Packet length: 44 TOS: 0x08 This report (for 174.138.56.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 btimon	2025-10-20 08:03:00 (8 months ago)	SystemBC.Botnet	Hacking
🇩🇪 leryon	2025-10-16 00:01:32 (8 months ago)	IP: 174.138.56.49 sends in the last 24 hours 66 invalid requests over 80	Web Spam Hacking
🇳🇱 JCB	2025-10-15 14:29:00 (8 months ago)	174.138.56.49 - - [14/Oct/2025:19:29:14 +0300] "\x16\x03\x01" 400 226 174.138.56.49 - - [14/Oct/202 ... show more 174.138.56.49 - - [14/Oct/2025:19:29:14 +0300] "\x16\x03\x01" 400 226 174.138.56.49 - - [14/Oct/2025:19:29:14 +0300] "GET /form.html HTTP/1.1" 404 196 174.138.56.49 - - [14/Oct/2025:19:29:14 +0300] "GET /upl.php HTTP/1.1" 404 196 ... show less	Hacking Web App Attack
🇺🇸 psh-ack	2025-10-15 08:21:13 (8 months ago)	Honeypot detection: HTTP attack on port 80. Recent activity: HTTP on port 80 - GET /	Bad Web Bot
🇵🇱 mkey	2025-10-15 07:03:17 (8 months ago)	[2025-10-14 21:28:03] WEB-REQ-ATTACK: Invalid request or header (WEB-APP-ATACK: Unauthorized script ... show more [2025-10-14 21:28:03] WEB-REQ-ATTACK: Invalid request or header (WEB-APP-ATACK: Unauthorized script probe ) show less	Hacking Web App Attack
🇩🇪 leryon	2025-10-15 03:50:26 (8 months ago)	IP: 174.138.56.49 sends in the last 24 hours 96 invalid requests over 80	Web Spam Hacking
🇬🇧 [email protected]	2025-10-15 00:46:44 (8 months ago)	...	Brute-Force SSH
🇬🇧 cURLupandDie()	2025-10-15 00:18:59 (8 months ago)	[\x16\x03\x01\x00\...] [\x16\x03\x01\x00\...] [GET / HTTP/1.1] [GET /form.html HTTP/1.1] [GET /upl.p ... show more [\x16\x03\x01\x00\...] [\x16\x03\x01\x00\...] [GET / HTTP/1.1] [GET /form.html HTTP/1.1] [GET /upl.php HTTP/1.1] [GET /t4 HTTP/1.1] [GET /geoip/ HTTP/1.1] [GET /favicon.ico HTTP/1.1] ... total of 11 hits show less	Web App Attack
🇺🇸 Gabriel Camargo	2025-10-14 23:03:08 (8 months ago)	174.138.56.49 - - [14/Oct/2025:18:03:07 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 17 ... show more 174.138.56.49 - - [14/Oct/2025:18:03:07 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 174.138.56.49 - - [14/Oct/2025:18:03:07 -0500] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 174.138.56.49 - - [14/Oct/2025:18:03:07 -0500] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" ... show less	Brute-Force SSH
🇫🇷 Murazaki	2025-10-14 22:03:50 (8 months ago)	174.138.56.49 - - [14/Oct/2025:22:20:30 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x03\xE1\xE6<$ ... show more 174.138.56.49 - - [14/Oct/2025:22:20:30 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x03\xE1\xE6<$\xB3<\xC4\xA0d5\xE37\x16\x00\xC5.\x09)\x92\x80\x99\xE4\xA0" 500 170 "-" "-" "-" ... show less	Hacking
🇩🇪 barbarella	2025-10-14 20:19:58 (8 months ago)	Multiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.h ... show more Multiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.html) 20:19:58 infected host with malware (GET /upl.php) 20:19:59 unsolicited access to nonexisting pages (GET /t4) 20:19:59 searching Geoip Security Vulnerabilities (GET /geoip/) 20:20:00 hacking attempt (GET /1.php) 20:20:00 SystemBC Malware Activity (GET /systembc/password.php) 20:20:01 unsolicited access to Administrative pages (GET /password.php) show less	Hacking Web App Attack
🇺🇸 masterguru	2025-10-14 18:33:40 (8 months ago)	Host header is a numeric IP address. Pattern match "^ (920350-164)	Hacking Bad Web Bot
🇩🇪 london2038.com	2025-10-14 17:02:48 (8 months ago)	Malformed or malicious web request 174.138.56.49 - - [14/Oct/2025:19:02:44 +0200] "\x16\x03\x01\x00{ ... show more Malformed or malicious web request 174.138.56.49 - - [14/Oct/2025:19:02:44 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03E\xA1lg\xAE`\xA5\x9B\xF1\x08\x86S\xE8\x8E\x81{<\xB9\xA9\x89e&\xB1\xDFO\xCFi0Vw\x90\xD9\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" show less	Hacking Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.203.22.119

🇷🇺 209.142.100.14

🇬🇧 198.244.189.160

🇨🇲 154.70.102.114

🇧🇷 148.227.123.249

🇩🇪 144.76.91.155

🇨🇳 125.124.149.101

🇺🇸 66.132.186.204

🇺🇸 66.132.186.203

🇨🇭 37.120.213.13

🇲🇽 187.191.48.23

🇺🇸 172.70.111.166

🇺🇸 165.22.134.78

🇺🇸 162.216.150.21

🇺🇸 148.153.250.175

🇨🇳 117.48.216.110

🇺🇸 66.132.186.201

🇺🇸 66.132.186.200

🇦🇪 2.48.248.85

🇳🇱 195.178.110.228