JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.137.177.249

38.137.177.249 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 65%: ?

65%

ISP	DATANET VZLA 2021 CA
Usage Type	Fixed Line ISP
ASN	AS273155
Domain Name	datanetvzla.com
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	Barquisimeto, Lara

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.137.177.249

Whois 38.137.177.249

IP Abuse Reports for 38.137.177.249:

This IP address has been reported a total of 31 times from 23 distinct sources. 38.137.177.249 was first reported on January 25th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-08-30 21:46:33 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇧🇷 noconex	2026-08-29 10:52:08 (5 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 38.137.177 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 38.137.177.249 show less	Port Scan Brute-Force SSH
🇺🇸 kosada.com	2026-08-25 15:20:57 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇧🇷 noconex	2026-08-22 00:22:23 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 38.137.177 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 38.137.177.249 show less	Port Scan Brute-Force SSH
🇫🇷 Zkillu	2026-08-19 22:29:29 (2 weeks ago)	UDP flood (DDoS) vs AS215599: 312 pkts / 0.45 MB to UDP 8443 across 83 dst IP(s), 2026-08-19 21:46 t ... show more UDP flood (DDoS) vs AS215599: 312 pkts / 0.45 MB to UDP 8443 across 83 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:29 (2 weeks ago)	UDP flood (DDoS) vs AS215599: 312 pkts / 0.45 MB to UDP 8443 across 83 dst IP(s), 2026-08-19 21:46 t ... show more UDP flood (DDoS) vs AS215599: 312 pkts / 0.45 MB to UDP 8443 across 83 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 LRob	2026-08-19 00:47:09 (2 weeks ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /156-meilleur-velo-moins-de-1000-euros \| query: q=Taille-XXL%2FAnn%C3%A9e-2026%2FStock+magasin-Cycling+Montpellier&resultsPerPage=36 show less	DDoS Attack Web App Attack
🇵🇱 mkey	2026-08-16 09:30:05 (2 weeks ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=22 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-16 11:24:57 \| LAST=2026-08-16 11:25:41. Last seen 2026-08-16 11:25:41. show less	Port Scan
Anonymous	2026-08-16 05:13:45 (2 weeks ago)	2026-08-16T05:13:14.505753+00:00 HongKong2 sshd-session[1288134]: Connection closed by 38.137.177.24 ... show more 2026-08-16T05:13:14.505753+00:00 HongKong2 sshd-session[1288134]: Connection closed by 38.137.177.249 port 59488 [preauth] 2026-08-16T05:13:44.881908+00:00 HongKong2 sshd-session[1289866]: Connection closed by 38.137.177.249 port 50946 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-08-16 03:31:10 (2 weeks ago)	SSH tarpit (endlessh) connection from 38.137.177.249	Brute-Force SSH
🇩🇪 london2038.com	2026-08-15 14:03:14 (2 weeks ago)	Connection atttempts against closed TCP ports Aug 15 16:00:59 BLOCK SRC=38.137.177.249 LEN=60 TOS=0x ... show more Connection atttempts against closed TCP ports Aug 15 16:00:59 BLOCK SRC=38.137.177.249 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=56475 DF PROTO=TCP SPT=47594 DPT=22 WINDOW=65535 RES=0x00 SYN Aug 15 16:01:00 BLOCK SRC=38.137.177.249 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=56476 DF PROTO=TCP SPT=47594 DPT=22 WINDOW=65535 RES=0x00 SYN Aug 15 16:03:13 BLOCK SRC=38.137.177.249 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=19586 DF PROTO=TCP SPT=58600 DPT=22 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇯🇵 mkaraki	2026-08-14 20:10:47 (2 weeks ago)	1786738246 # Service_probe # SIGNATURE_SEND # source_ip:38.137.177.249 # dst_port:22 ...	Port Scan
🇺🇸 RAP	2026-08-14 09:31:34 (2 weeks ago)	2026-08-14 09:31:34 UTC Unauthorized activity to TCP port 22. SSH	SSH
Anonymous	2026-08-14 05:08:43 (2 weeks ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇺🇸 RAP	2026-08-13 16:32:17 (2 weeks ago)	2026-08-13 16:32:17 UTC Unauthorized activity to TCP port 22. SSH	SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 209.50.187.1

🇰🇾 208.168.237.216

🇬🇧 194.50.235.135

🇳🇱 172.94.9.107

🇮🇳 128.185.208.42

🇨🇳 115.53.144.29

🇮🇩 103.149.177.112

🇸🇬 51.79.212.57

🇺🇸 34.139.54.176

🇿🇦 197.185.185.5

🇧🇷 187.93.51.46

🇮🇷 185.218.139.154

🇨🇳 119.166.33.187

🇺🇸 98.159.37.252

🇺🇸 34.73.15.127

🇺🇸 34.10.186.44

🇺🇿 213.230.93.89

🇨🇱 201.188.245.44

🇵🇱 176.53.159.197

🇨🇦 143.198.35.155