38.52.112.57

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
99% Critical
23 reports
22 reporters · latest 14 hours ago
ISP
Cogent Communications, LLC
Usage Type
Fixed Line ISP
ASN
AS273603
Domain Name
cogentco.com
Country
🇧🇷 Brazil
City
Osasco, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇺🇸 United States of America 4 🇫🇷 France 3
Most common categories Port Scan 14 Web App Attack 6 Brute-Force 4 Hacking 3 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
2026-11-07 02:59:52 warning[1626727]: host unknown[38.52.112.57]: unauthorized access attempted: tcp/8443
Port Scan Brute-Force
🇧🇪 Jago
Bad Web Bot Exploited Host
🇬🇧 Andrew
Blocked by UFW (TCP on port 443). Source port: 60636 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 38.52.112.57) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Web App Attack
🇹🇷 Threat.live
Threat.live: Web Scan
Web App Attack
Anonymous
Unauthorized SSH login attempts
Brute-Force SSH
🇷🇴 gtheo99
(CT) IP 38.52.112.57 (BR/Brazil/-) found to have 220 connections
Port Scan
Anonymous
Blocked by UFW [80/tcp] | SPT: 41538 | TTL: 46 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,ndpi_tcp_issues,ndpi_probing_attempt
Hacking
🇩🇪 sojan
Web App Attack
🇮🇳 nadnitin
Automated block via Nginx Police. Attacking host '101.53.135.133' at endpoint 'GET /' with status IP-SCANNER.
Port Scan
🇬🇧 Axel
Blocked by UFW on BGPGB [80/tcp] | SPT: 46398 | TTL: 46 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇳🇱 JCB
Web App Attack Hacking
🇺🇸 zwebvigil
Web App Attack
🇺🇸 technojoe99
Exploit scan from 38.52.112.57. GET /pbxcore/api/v3/system:ping HTTP/1.1.
Web App Attack
🇺🇸 jbettigole
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
Brute-Force Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 185.241.208.157
🇸🇬 85.203.21.48
🇲🇩 85.121.176.200
🇺🇸 66.132.159.66
🇳🇱 45.148.10.141
🇺🇸 205.210.31.82
🇳🇱 200.138.46.6
🇲🇩 193.107.99.7
🇺🇸 147.185.132.156
🇷🇴 80.94.92.234
🇺🇸 54.224.26.159
🇺🇸 50.6.207.102
🇺🇸 162.216.149.47
🇹🇼 111.70.3.156
🇧🇩 103.161.9.254
🇺🇸 66.132.186.213
feedback