JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 110.38.249.40

110.38.249.40 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 57%: ?

57%

ISP	National Wimax/IMS environment
Usage Type	Fixed Line ISP
ASN	AS139879
Domain Name	wateen.com
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 110.38.249.40

Whois 110.38.249.40

IP Abuse Reports for 110.38.249.40:

This IP address has been reported a total of 17 times from 14 distinct sources. 110.38.249.40 was first reported on August 2nd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tecnicorioja	2026-10-17 22:01:05 (1 week ago)	POST /xmlrpc.php [17/Oct/2026:21:55:43	Web App Attack Brute-Force
Anonymous	2026-10-17 19:56:24 (1 week ago)	[redacted] 110.38.249.40 - - [17/Oct/2026:21:55:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 110.38.249.40 - - [17/Oct/2026:21:55:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site64068858.com" [redacted] 110.38.249.40 - - [17/Oct/2026:21:55:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 110.38.249.40 - - [17/Oct/2026:21:56:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 110.38.249.40 - - [17/Oct/2026:21:56:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.4; http://site92031658.com" [redacted] 110.38.249.40 - - [17/Oct/2026:21:56:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-10-16 16:31:09 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 Jason Howell	2026-10-16 10:35:53 (1 week ago)	110.38.249.40 - - [16/Oct/2026:05:35:09 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4357 "-" "Jetpack by ... show more 110.38.249.40 - - [16/Oct/2026:05:35:09 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4357 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" 110.38.249.40 - - [16/Oct/2026:05:35:20 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4355 "-" "Jetpack/12.0; WordPress/6.3; http://site91730653.com" 110.38.249.40 - - [16/Oct/2026:05:35:30 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4355 "-" "Jetpack/12.1; WordPress/6.3; http://site75808165.com" 110.38.249.40 - - [16/Oct/2026:05:35:41 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4356 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [16/Oct/2026:05:35:52 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4355 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇦🇺 A.i.D.A.N.N	2026-10-15 15:40:02 (1 week ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
Anonymous	2026-10-15 04:30:51 (1 week ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇺🇸 IndigoRidge	2026-10-13 11:38:15 (2 weeks ago)	110.38.249.40 - - [13/Oct/2026:07:33:21 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5292 "-" "WordPress.c ... show more 110.38.249.40 - - [13/Oct/2026:07:33:21 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5292 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [13/Oct/2026:07:33:53 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5292 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [13/Oct/2026:07:34:04 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5292 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [13/Oct/2026:07:38:04 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5292 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [13/Oct/2026:07:38:15 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5741 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-10-13 10:20:27 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-10-13 10:09:39 (2 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PK/Pakistan/GPONUser38249-40.wateen.net	Web App Attack
🇩🇪 FD-IX	2026-10-13 09:51:51 (2 weeks ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
Anonymous	2026-10-13 09:51:28 (2 weeks ago)	[redacted] 110.38.249.40 - - [13/Oct/2026:11:50:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 43 "-" "Je ... show more [redacted] 110.38.249.40 - - [13/Oct/2026:11:50:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 43 "-" "Jetpack by WordPress.com" [redacted] 110.38.249.40 - - [13/Oct/2026:11:50:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 43 "-" "WordPress.com; https://wordpress.com" [redacted] 110.38.249.40 - - [13/Oct/2026:11:51:05 +0200] "POST /xmlrpc.php HTTP/1.1" 403 43 "-" "WordPress.com; https://wordpress.com" [redacted] 110.38.249.40 - - [13/Oct/2026:11:51:16 +0200] "POST /xmlrpc.php HTTP/1.1" 403 43 "-" "Jetpack by WordPress.com" [redacted] 110.38.249.40 - - [13/Oct/2026:11:51:27 +0200] "POST /xmlrpc.php HTTP/1.1" 403 43 "-" "Jetpack/13.0; WordPress/6.1; http://site44232664.com" ... show less	Hacking Web App Attack
Anonymous	2026-10-13 02:34:42 (2 weeks ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇸🇪 ljo	2026-10-12 13:41:54 (2 weeks ago)	110.38.249.40 - - [12/Oct/2026:15:40:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "WordPress.c ... show more 110.38.249.40 - - [12/Oct/2026:15:40:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [12/Oct/2026:15:40:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [12/Oct/2026:15:40:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [12/Oct/2026:15:40:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "Jetpack by WordPress.com" 110.38.249.40 - - [12/Oct/2026:15:40:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [12/Oct/2026:15:41:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "WordPress.com; https://wordpress.com" 110.38.249.40 - - [12/Oct/2026:15:41:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "Jetpack by WordPress.com" 110.38.249.40 - - [12/Oct/2026:15:41:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5315 "-" "WordPress.com; https://wordpress.com" 110.38.2 ... show less	Web App Attack
🇩🇪 rh24	2026-10-12 12:39:43 (2 weeks ago)	(xmlrpc_405) XMLRPC-Bot 405 110.38.249.40 (PK/Pakistan/GPONUser38249-40.wateen.net)	Hacking
🇪🇸 didevi	2026-04-01 09:21:02 (6 months ago)	SPAM or Brute force attack detected	Email Spam Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.123

🇹🇭 203.156.108.110

🇩🇪 185.220.101.18

🇨🇳 183.224.97.83

🇫🇮 147.185.133.122

🇩🇪 129.121.151.7

🇩🇪 109.160.32.110

🇪🇸 82.213.182.225

🇺🇸 74.207.198.16

🇺🇸 66.132.195.113

🇸🇬 8.219.222.66

🇨🇴 190.60.242.28

🇮🇳 182.70.63.221

🇨🇳 182.61.49.221

🇰🇷 125.142.37.91

🇲🇦 105.156.227.18

🇭🇰 101.36.108.72

🇵🇱 45.138.12.10

🇩🇪 34.32.73.102

🇷🇴 2.57.122.74