38.20.228.81
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cogent Communications, LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS174
- Domain Name
- cogentco.com
- Country
- 🇨🇦 Canada
- City
- Chibougamau, Quebec
Abuse Reports
Total reports
19 from
14 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 38.20.228.81
|
Hacking IoT Targeted | |
| 🇮🇩 leomardsy_ |
|
Port Scan | |
| 🇮🇪 RoboSOC |
Realtek Jungle SDK Remote Code Execution Vulnerability, PTR: PTR record not found
|
Hacking | |
| 🇧🇷 SOC Blue Team |
Tatic: TA0002 | Technique: T1203 | Source: TAP | Country Destination: BR
|
Exploited Host | |
| 🇳🇱 EGP Abuse Dept |
Port connection indicating compromised host
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Remote command execution attempt.
|
Hacking | |
| 🇬🇧 Axel |
Blocked by UFW on BGPGB [5555/tcp] | SPT: 9999 | TTL: 50 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.
|
Exploited Host | |
| 🇧🇷 diego |
[rede-44-49] 11/04/2026-11:32:25.895408, 38.20.228.81, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
|
Hacking | |
| 🇺🇸 avgsmoe |
Connection to a honeypot port. Automated report (firemon).
|
Port Scan | |
| 🇮🇩 leomardsy_ |
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: port scanning. First: 2026-11-02 08:10, Last: 2026-11-03 19:39 UTC. Triggers: firewall-udp,non-public-port,unknown.
|
Port Scan | |
| 🇳🇱 EGP Abuse Dept |
Port connection indicating compromised host
|
Port Scan Hacking Exploited Host | |
| 🇮🇩 leomardsy_ |
|
Port Scan | |
| 🇬🇧 Axel |
Blocked by UFW on BGPGB [5555/tcp] | SPT: 9999 | TTL: 50 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown