38.56.203.201
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- METROFIBER TELECOMUNICACOES LTDA
- Usage Type
- Fixed Line ISP
- ASN
- AS273595
- Domain Name
- lastnet.com.br
- Country
- 🇧🇷 Brazil
- City
- Bento Goncalves, Rio Grande do Sul
Abuse Reports
Total reports
16 from
10 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-29 07:23, Last: 2026-11-10 07:20 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-05 07:29, Last: 2026-10-16 15:46 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 38.56.203.201: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-22 20:19, Last: 2026-09-29 18:52 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-08-25 17:10, Last: 2026-09-09 19:47 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: port scanning. First: 2026-08-15 22:59, Last: 2026-08-20 06:38 UTC. Triggers: non-public-port,firewall-udp,unknown.
|
Port Scan | |
| Anonymous |
51177/udp (1 or more attempts)
|
Port Scan | |
| 🇩🇪 _ArminS_ |
Spam detected 2026.08.18 09:04:39
blocked until 2026.08.19 09:04:39
by HoneyPot DE_BY_01
|
Email Spam Brute-Force | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) detectado de 38.56.203.201
|
Port Scan Brute-Force SSH | |
| Anonymous |
44024/udp (1 or more attempts)
|
Port Scan | |
| 🇫🇷 Zkillu |
|
DDoS Attack Exploited Host | |
| 🇮🇳 Mr.Singh |
NFT blocked 38.56.203.201 on 15-Aug-2026..
|
Port Scan Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 37547.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown