38.199.76.22

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
45% Elevated
20 reports
13 reporters · latest 1 day ago
ISP
Vyntera Peru
Usage Type
Fixed Line ISP
ASN
AS272978
Domain Name
pit.net
Country
🇨🇴 Colombia
City
Cali, Valle del Cauca Department
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇺🇸 United States of America 4 🇫🇷 France 1
Most common categories DDoS Attack 8 Bad Web Bot 7 Web App Attack 3 Hacking 3 Web Spam 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇩 hermawan
Email Spam Hacking
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-04T12:37:27Z.
Bad Web Bot
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
Port Scan
🇫🇷 MatStef132
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇵🇱 MatStef132
MatShield L7: blocked on panel.averisca.cloud (ua-quarantined)
Bad Web Bot
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web App Attack
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web App Attack
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam
🇩🇪 edgeshield
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 38.199.76.22: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 35.195.56.77
🇷🇴 2.57.121.112
🇫🇷 217.76.48.22
🇩🇪 151.243.11.209
🇧🇩 118.179.27.186
🇧🇬 79.124.62.230
🇺🇸 68.227.77.54
feedback