JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.100.221.102

38.100.221.102 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 80%: ?

80%

ISP	Z COM NETWORKS
Usage Type	Fixed Line ISP
ASN	AS152605
Domain Name	zcomnetworks.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.100.221.102

Whois 38.100.221.102

IP Abuse Reports for 38.100.221.102:

This IP address has been reported a total of 20 times from 15 distinct sources. 38.100.221.102 was first reported on May 4th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-28 08:58:20 (6 hours ago)	[TueJul2810:58:14.0754962026][security2:error][pid223498:tid223705][client38.100.221.102:0]ModSecuri ... show more [TueJul2810:58:14.0754962026][security2:error][pid223498:tid223705][client38.100.221.102:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"vetreriaperletti.ch\"][uri\"/xmlrpc.php\"][unique_id\"amhvJjMWIa3lTOaWuJCewQAAAMk\"] show less	Hacking Web App Attack
🇪🇸 alferez	2026-07-28 07:51:33 (7 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 09:17:46 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 38.100.221.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.100.221.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:17:38.862763 2026] [security2:error] [pid 131199:tid 131199] [client 38.100.221.102:18769] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.100.221.102 (+1 hits since last alert)\|slimlaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "slimlaw.com"] [uri "/xmlrpc.php"] [unique_id "amciMgwE694sy2ZiHJgzuwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-27 06:50:29 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-27 06:43:44 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-27 06:42:28 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 09:30:19 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 38.100.221.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.100.221.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:30:15.580730 2026] [security2:error] [pid 985393:tid 985393] [client 38.100.221.102:18376] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.100.221.102 (+1 hits since last alert)\|blackberrycircle.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "blackberrycircle.org"] [uri "/xmlrpc.php"] [unique_id "amSCJ70mSPFRa7G1400zJgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-25 08:04:52 (3 days ago)	38.100.221.102 - - [25/Jul/2026:04:03:58 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress. ... show more 38.100.221.102 - - [25/Jul/2026:04:03:58 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" 38.100.221.102 - - [25/Jul/2026:04:04:09 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" 38.100.221.102 - - [25/Jul/2026:04:04:30 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" 38.100.221.102 - - [25/Jul/2026:04:04:41 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" 38.100.221.102 - - [25/Jul/2026:04:04:52 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 07:27:05 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 38.100.221.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.100.221.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 03:27:00.968929 2026] [security2:error] [pid 2493975:tid 2493975] [client 38.100.221.102:18606] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.100.221.102 (+1 hits since last alert)\|natickvillagerentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "natickvillagerentals.com"] [uri "/xmlrpc.php"] [unique_id "amRlRDKwKR3v2cDAYKj9oQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-07-24 09:17:27 (4 days ago)	38.100.221.102 - - [24/Jul/2026:17:17:16 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "WordPress. ... show more 38.100.221.102 - - [24/Jul/2026:17:17:16 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "WordPress.com; https://wordpress.com" 38.100.221.102 - - [24/Jul/2026:17:17:16 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 38.100.221.102 - - [24/Jul/2026:17:17:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" ... show less	Brute-Force
Anonymous	2026-07-24 08:17:03 (4 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-23 21:48:10 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-23 07:20:10 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 38.100.221.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.100.221.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 03:20:03.559775 2026] [security2:error] [pid 3453262:tid 3453262] [client 38.100.221.102:18882] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.100.221.102 (+1 hits since last alert)\|rocksolidhomebuilders.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rocksolidhomebuilders.com"] [uri "/xmlrpc.php"] [unique_id "amHAo8NlKxc2mRn0EBrzhAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-07-22 16:00:51 (5 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇦🇺 screwlooseit.com.au	2026-07-22 09:37:50 (6 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/-	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.214.176.251

🇺🇸 162.216.149.232

🇮🇳 1.187.169.72

🇸🇪 193.31.126.157

🇳🇱 176.65.148.242

🇮🇳 103.230.179.58

🇨🇳 14.103.117.105

🇺🇸 2607:f8b0:4001:c61::123

🇩🇪 213.209.159.241

🇦🇴 193.163.125.143

🇳🇵 182.50.66.132

🇺🇸 162.216.150.110

🇺🇸 147.185.132.176

🇱🇹 77.90.185.16

🇺🇸 66.132.186.131

🇺🇸 34.24.7.175

🇺🇸 69.229.227.44

🇨🇳 47.104.252.109

🇺🇸 152.232.14.205

🇧🇷 45.234.79.231