38.252.107.222

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
61% Elevated
17 reports
16 reporters · latest 1 day ago
ISP
CIDATA, C.A
Usage Type
Fixed Line ISP
ASN
AS272864
Domain Name
cidata.com.ve
Country
🇻🇪 Venezuela (Bolivarian Republic of)
City
Araure, Portuguesa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇸🇰 Slovakia 2 🇺🇸 United States of America 2
Most common categories Brute-Force 7 Web App Attack 6 Hacking 3 Port Scan 2 SSH 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇪 voormedia
Accessed trap at '/wp-login.php'
Web App Attack
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 38.252.107.222 2026-11-01T03:59:24+0100 vpn Access-Reject station: 38.252.107.222
Brute-Force Web App Attack
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (63, Abuse: 57)
Hacking Exploited Host Web App Attack
🇺🇸 masterguru
*Port Scan* detected from 38.252.107.222 (VE/Venezuela/-). 11 hits in the last 60 seconds (0-169)
Port Scan
🇮🇩 bps-statistics
WP Login Scan Activities: "2026-10-24T06:55:47.650+07:00" "/wp-login.php" "38.252.107.222" "Mozilla/5.0 (X11; Linux x86_84) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/199.0.0.0 Safari/537.36"
Web App Attack
🇸🇰 EVISION
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇸🇰 EVISION
Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: rXuCNhDfKeQG6Bi150GMqvw4AQ6fGsbl
Port Scan Hacking Brute-Force
🇺🇸 Gabriel Camargo
Brute-Force SSH
Anonymous
Brute-Force
🇩🇪 Scimetrica
Reported automatically by fail2ban on mail.scimetrica.com
Hacking
🇩🇪 NewWavesApp
(smtpauth) Failed SMTP AUTH login from 38.252.107.222 (VE/Venezuela/-)
Brute-Force
🇨🇭 backslash
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪 formality
Invalid user cleuschner from 38.252.107.222 port 54569
Brute-Force SSH
🇩🇪 MusicLibrary
Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)
Bad Web Bot Web App Attack
Anonymous
apache vulnerability scan
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.15
🇺🇸 135.148.218.218
🇯🇵 52.192.235.44
🇫🇷 51.77.216.36
🇺🇸 35.227.96.91
🇰🇿 206.223.247.231
🇬🇧 193.163.125.238
🇺🇸 152.232.237.234
🇺🇸 136.80.230.32
🇨🇳 115.190.192.114
🇨🇳 106.75.100.73
🇫🇷 85.217.140.18
🇺🇸 64.23.138.98
🇻🇳 45.119.212.99
🇺🇸 172.208.8.47
🇷🇴 92.118.39.50
🇺🇸 70.183.226.12
🇳🇱 45.148.10.121
🇻🇪 190.97.237.89
🇹🇷 155.103.69.97
feedback