38.55.252.139
Classification: Malicious
38.55.252.139 is a malicious IP address in Los Angeles, US. 22 sightings from ThreatFox Abuse.ch and IPWhois.io (Unknown malware), last seen 2026-11-07.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unknown malware | ThreatFox Abuse.ch | 2026-10-05 07:05:08 | 2026-11-07 05:25:07 | botnet malicious-activity | |
| Cobalt Strike | ThreatFox Abuse.ch | 2026-11-06 05:05:19 | 2026-11-06 05:25:08 | botnet malicious-activity | |
| VPN | IPWhois.io | 2026-10-05 07:38:24 | 2026-10-05 07:38:24 | anonymization vpn |
Tags
viper port:22 port:3000 port:8080 port:60000 port:80 port:443 port:8443 port:6689 port:8000 port:8082 port:8083 port:9443 port:8088 port:8085 cobeacon cobaltstrike beacon agentemis modat port:9000 port:10443Whois information
- AS name
- AS154376 PEG TECH INC
- Registrant
- PEG TECH INC
- City
- Los Angeles
- State
- CA
- Postal code
- 90096
- Country
- US — United States 🇺🇸
- First indexed
- 2026-10-05 07:25:07
- Last updated
- 2026-11-07 05:25:07