90/100
Fraud score
critical risk
What we know about 174.139.40.138.
VPN
Clean
Proxy
Clean
Tor
Clean
Relay
Clean
Datacenter
Clean
Mobile
Clean
Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. VoIP/SIP fraud and telephony abuse. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation
Network
- ASN
- AS4213
- Organization
- Krypt Technologies
- ISP
- Krypt Technologies
- Connection type
- Residential
- Cloud provider
- –
- Residential proxy
- No
- Shared connection
- No
Location
- Country
- United States (US)
- Region
- –
- City
- –
- Coordinates
- 37.7510, -97.8220
- Timezone
- America/Chicago
- rDNS
- –
- Hostname
- 174.139.40.138.customer.krypt.com
History
- First seen
- Sep 20, 2026
- Last seen
- Nov 2, 2026
- Times seen
- 1,204
Threat signatures · 6
Subnet (/24)
- IPs observed
- 1
- Abusive
- 1
- Abuse ratio
- 100%
No reports on 174.139.40.138 yet.
Nobody has reported 174.139.40.138 yet. If it attacked you, be the first: every report feeds the free, open database that everyone can use.
174.139.40.138, answered.
No. 174.139.40.138 does not match any VPN, proxy, or Tor signature in our data. It looks like a residential or business connection.
FFraud scores 174.139.40.138 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. VoIP/SIP fraud and telephony abuse. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.
174.139.40.138 is operated by Krypt Technologies (AS4213), located in United States.
The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. VoIP/SIP fraud and telephony abuse. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.
Check another IP. One at a time, instantly.
174.139.40.138: fraud score 90 of 100, Critical
174.139.40.138
Krypt Technologies · United States
90/100
Fraud score
- VPN: no
- Proxy: no
- Tor: no
- Datacenter: no