JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.38.115.246

102.38.115.246 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 100%: ?

100%

ISP	Ikeja Wireless (Pty) Ltd
Usage Type	Fixed Line ISP
ASN	AS328510
Domain Name	ikeja.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.38.115.246

Whois 102.38.115.246

IP Abuse Reports for 102.38.115.246:

This IP address has been reported a total of 62 times from 41 distinct sources. 102.38.115.246 was first reported on November 17th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rsiddall	2026-09-30 17:45:22 (1 hour ago)	102.38.115.246 - - [30/Sep/2026:13:44:38 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1810 "-" "Mozilla/5. ... show more 102.38.115.246 - - [30/Sep/2026:13:44:38 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1810 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.0.0 Safari/537.36" 102.38.115.246 - - [30/Sep/2026:13:45:20 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1810 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/73.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇸 bigwavedave	2026-09-30 03:46:34 (15 hours ago)	Wordpress Attack	Web App Attack
🇳🇱 Site.eu	2026-09-29 22:21:15 (21 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 LRob	2026-09-29 14:05:31 (1 day ago)	WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 10.0; x ... show more WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/80.0.0.0 Safari/537.36 \| 2026-09-29 14:05 UTC show less	Web App Attack Hacking
🇬🇧 consul.to	2026-09-29 00:20:47 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-28 15:03:33 (2 days ago)	[ns41.kdns.gr] httpd-xmlrpc-post: sites=www.basoukeasmd.gr; logs=/var/log/httpd/domains/basoukeasmd. ... show more [ns41.kdns.gr] httpd-xmlrpc-post: sites=www.basoukeasmd.gr; logs=/var/log/httpd/domains/basoukeasmd.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-28 13:43:01 (2 days ago)	WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 6.3; x6 ... show more WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/99.0.0.0 Safari/537.36 show less	Web App Attack Hacking
🇩🇪 Vegascosmetics	2026-09-28 11:47:33 (2 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /[a-z0-9]{1,12}\.php (Match: /xmlrpc.php) show less	Hacking Exploited Host Web App Attack
🇺🇸 SodaAudit.app	2026-09-27 03:52:36 (3 days ago)	[sodaaudit.app] Web app attack. Timestamp: 2026-09-27T03:48:30.000Z. 1 probe events, 1 distinct path ... show more [sodaaudit.app] Web app attack. Timestamp: 2026-09-27T03:48:30.000Z. 1 probe events, 1 distinct path(s). Paths (payload): /xmlrpc.php show less	Web App Attack
🇩🇪 R.G.	2026-09-27 03:18:53 (3 days ago)	(XMLRPCorWHATEVER) Get lost please 102.38.115.246 (-): 3 in the last 900 secs; Ports: ; Direction: ... show more (XMLRPCorWHATEVER) Get lost please 102.38.115.246 (-): 3 in the last 900 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 stinpriza	2026-09-26 23:37:07 (3 days ago)	Web App Attack	Web App Attack
🇩🇪 big-cloud.nl	2026-09-25 20:10:03 (4 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 SX Communications	2026-09-25 16:35:30 (5 days ago)	Web vulnerability scanning / probing from 102.38.115.246: automated requests for CMS admin paths, lo ... show more Web vulnerability scanning / probing from 102.38.115.246: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /Forums/General-Discussion/Links. show less	Port Scan Hacking Web App Attack
🇺🇸 SX Communications	2026-09-25 16:35:30 (5 days ago)	HTTP application-layer DoS / botnet traffic from 102.38.115.246: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 102.38.115.246: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇮 inlink.ltd	2026-09-24 20:04:05 (5 days ago)	Known malicious PHP file or CMS probe	Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 160.187.54.114

🇳🇱 104.23.170.75

🇷🇴 92.118.39.213

🇺🇦 92.43.82.67

🇷🇺 90.151.171.109

🇷🇴 80.94.92.28

🇺🇸 72.212.168.84

🇭🇰 43.100.100.9

🇺🇸 195.184.76.3

🇳🇱 192.42.116.61

🇮🇩 180.254.108.155

🇧🇷 179.51.153.37

🇵🇰 175.107.216.53

🇳🇱 160.119.76.142

🇺🇸 147.185.132.135

🇺🇸 147.185.132.12

🇺🇸 104.253.48.70

🇳🇱 104.23.170.152

🇳🇱 94.154.43.146

🇧🇬 78.128.114.162