IP intelligence

174.139.40.138

United States · Krypt Technologies · Residential

Own this IP? Request a review

90/100

Fraud score

critical risk

What we know about 174.139.40.138.

VPN

Clean

Proxy

Clean

Tor

Clean

Relay

Clean

Datacenter

Clean

Mobile

Clean

Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. VoIP/SIP fraud and telephony abuse. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation

Network

Organization
Krypt Technologies
ISP
Krypt Technologies
Connection type
Residential
Cloud provider
–
Residential proxy
No
Shared connection
No

Location

Country
United States (US)
Region
–
City
–
Coordinates
37.7510, -97.8220
Timezone
America/Chicago
rDNS
–
Hostname
174.139.40.138.customer.krypt.com

History

First seen
Sep 20, 2026
Last seen
Nov 2, 2026
Times seen
1,204

Threat signatures · 6

c2_serverbotnet_nodevoip_abuseserver_abusemulti_source_abusemulti_source_blacklist

Subnet (/24)

IPs observed
1
Abusive
1
Abuse ratio
100%

No reports on 174.139.40.138 yet.

Nobody has reported 174.139.40.138 yet. If it attacked you, be the first: every report feeds the free, open database that everyone can use.

174.139.40.138, answered.

No. 174.139.40.138 does not match any VPN, proxy, or Tor signature in our data. It looks like a residential or business connection.

FFraud scores 174.139.40.138 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. VoIP/SIP fraud and telephony abuse. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.

174.139.40.138 is operated by Krypt Technologies (AS4213), located in United States.

The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. VoIP/SIP fraud and telephony abuse. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.

Check another IP. One at a time, instantly.

174.139.40.138: fraud score 90 of 100, Critical

174.139.40.138

Krypt Technologies · United States

Critical

90/100

Fraud score

  • VPN: no
  • Proxy: no
  • Tor: no
  • Datacenter: no
Live from the FFraud APIFull report