JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.38.8.11

102.38.8.11 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 87%: ?

87%

ISP	Giga for Telecommunication and Technology Limited
Usage Type	Fixed Line ISP
ASN	AS328539
Domain Name	giga.ly
Country	🇱🇾 Libya
City	Bani Walid, Misratah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.38.8.11

Whois 102.38.8.11

IP Abuse Reports for 102.38.8.11:

This IP address has been reported a total of 60 times from 42 distinct sources. 102.38.8.11 was first reported on September 9th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-10-27 03:26:44 (3 hours ago)	102.38.8.11 \| Port: 11230 \| DNS: 102.38.8.11 2026-10-27T11:26:43+08:00 Africa/Tripoli \| IPs res erve ... show more 102.38.8.11 \| Port: 11230 \| DNS: 102.38.8.11 2026-10-27T11:26:43+08:00 Africa/Tripoli \| IPs res erved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1792342933&dafafdecab=36 \| Ref: - \| Country: LY/Libyan Arab Jamahiriya/+02:00 IP City: Bani Walid Windows a50e99c42ff69285-MUC/Munich, Germany 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 mnsf	2026-10-27 01:05:54 (5 hours ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 12:42:18 (18 hours ago)	(mod_security) mod_security (id:225170) triggered by 102.38.8.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 102.38.8.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 08:42:10.683287 2026] [security2:error] [pid 2872:tid 2872] [client 102.38.8.11:50862] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.crystaljohns.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crystaljohns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at9Koox00VvBNjzTXQmgZwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-25 13:21:44 (1 day ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 \| 2026-10-25 13:21 UTC show less	Bad Web Bot
🇺🇸 mawan	2026-10-25 06:45:10 (2 days ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇬🇧 spamverify.com	2026-10-23 18:24:10 (3 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 22:34:23 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 102.38.8.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 102.38.8.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:34:17.021536 2026] [security2:error] [pid 28567:tid 28567] [client 102.38.8.11:8180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|peterjohnsonauthor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peterjohnsonauthor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atk96dBi0pxQJ7Ca8T_N0QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Tsumugi Kotobuki	2026-10-21 12:56:56 (5 days ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 46 \| Len: 60B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 46 \| Len: 60B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-10-21T12:56:56Z show less	Port Scan Hacking
🇩🇪 Hazzard	2026-10-21 03:27:15 (6 days ago)	(wordpress) Failed wordpress login from 102.38.8.11 (LY/Libya/Tripoli/Tripoli/-/[redacted]): (CF_EN ... show more (wordpress) Failed wordpress login from 102.38.8.11 (LY/Libya/Tripoli/Tripoli/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 nationaleventpros.com	2026-10-20 10:34:42 (6 days ago)	WordPress login attempt	Brute-Force
🇲🇽 octageeks.com	2026-10-20 04:27:33 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 big-cloud.nl	2026-10-19 19:26:11 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇷 LRob	2026-10-19 17:43:47 (1 week ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇲🇹 Malta	2026-10-17 21:33:31 (1 week ago)	102.38.8.11 - - [17/Oct/2026:23:33:31 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ... show more 102.38.8.11 - - [17/Oct/2026:23:33:31 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 FeG Deutschland	2026-10-17 02:41:05 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 198.160.164.231

🇨🇦 198.98.99.152

🇲🇽 189.223.145.128

🇫🇷 173.249.52.138

🇸🇬 118.139.164.171

🇮🇩 118.99.102.162

🇩🇪 109.160.32.132

🇸🇬 103.20.122.54

🇯🇴 94.249.51.107

🇨🇳 58.211.39.86

🇺🇸 47.251.46.185

🇨🇳 39.78.138.240

🇵🇰 39.63.159.105

🇮🇳 38.137.11.14

🇧🇪 34.53.212.113

🇺🇸 18.190.15.50

🇧🇷 201.158.42.212

🇧🇷 200.23.233.210

🇷🇺 185.115.95.51

🇻🇳 171.224.177.60