JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.199.101.116

38.199.101.116 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 79%: ?

79%

ISP	Telecable el Limón S.R.L.
Usage Type	Fixed Line ISP
ASN	AS273121
Domain Name	telecablelimon.com.do
Country	🇩🇴 Dominican Republic
City	Samana, Samana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.199.101.116

Whois 38.199.101.116

IP Abuse Reports for 38.199.101.116:

This IP address has been reported a total of 38 times from 20 distinct sources. 38.199.101.116 was first reported on July 27th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-16 22:28:14 (6 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇦🇺 screwlooseit.com.au	2026-07-16 20:44:52 (6 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/-	Web App Attack
🇳🇱 Site.eu	2026-07-16 14:04:33 (6 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇨🇿 huginet	2026-07-16 14:03:10 (6 days ago)	38.199.101.116 - - [16/Jul/2026:16:02:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by ... show more 38.199.101.116 - - [16/Jul/2026:16:02:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com" 38.199.101.116 - - [16/Jul/2026:16:03:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇩🇪 wpadm4	2026-07-16 14:02:58 (6 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-16 12:00:27 (6 days ago)	[redacted] 38.199.101.116 - - [16/Jul/2026:13:59:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 38.199.101.116 - - [16/Jul/2026:13:59:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 38.199.101.116 - - [16/Jul/2026:13:59:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 38.199.101.116 - - [16/Jul/2026:14:00:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 38.199.101.116 - - [16/Jul/2026:14:00:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 38.199.101.116 - - [16/Jul/2026:14:00:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" ... show less	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-07-16 11:34:27 (6 days ago)	38.199.101.116 - - [16/Jul/2026:07:31:15 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress. ... show more 38.199.101.116 - - [16/Jul/2026:07:31:15 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com" 38.199.101.116 - - [16/Jul/2026:07:32:51 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com" 38.199.101.116 - - [16/Jul/2026:07:33:23 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com" 38.199.101.116 - - [16/Jul/2026:07:34:05 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com" 38.199.101.116 - - [16/Jul/2026:07:34:27 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 12:44:54 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 38.199.101.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.199.101.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 08:44:48.752341 2026] [security2:error] [pid 27970:tid 27970] [client 38.199.101.116:57835] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.199.101.116 (+1 hits since last alert)\|aandbnaturalfoods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "aandbnaturalfoods.com"] [uri "/xmlrpc.php"] [unique_id "alDpQP38tI4sw_glMxyQXwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ✨	2026-07-10 00:33:17 (1 week ago)	Domain : pocketpos.co.uk Rule : UserAgent 2026-07-10 00:31:47 *hidden-privacy* POST /xmlrpc.php ... show more Domain : pocketpos.co.uk Rule : UserAgent 2026-07-10 00:31:47 *hidden-privacy* POST /xmlrpc.php - 443 - 38.199.101.116 HTTP/1.1 Jetpack by WordPress.com - pocketpos.co.uk 405 0 0 803 950 331 - - show less	Port Scan
🇩🇪 konseptit	2026-07-10 00:01:14 (1 week ago)	(wordpress) Failed wordpress login from 38.199.101.116 (DO/Dominican Republic/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-09 22:18:52 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 38.199.101.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.199.101.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 18:18:45.016231 2026] [security2:error] [pid 14158:tid 14158] [client 38.199.101.116:53719] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.199.101.116 (+1 hits since last alert)\|glassclublake.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "glassclublake.com"] [uri "/xmlrpc.php"] [unique_id "alAeRbDdFL0u_Z7gemC5kQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 17:52:15 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 38.199.101.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.199.101.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 13:52:10.548188 2026] [security2:error] [pid 30925:tid 30925] [client 38.199.101.116:60410] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.199.101.116 (+1 hits since last alert)\|drwolberg.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drwolberg.com"] [uri "/xmlrpc.php"] [unique_id "ak_fyoUtcvjfj4y8IOWP5gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-09 17:51:51 (1 week ago)	[redacted] 38.199.101.116 - - [09/Jul/2026:19:51:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 38.199.101.116 - - [09/Jul/2026:19:51:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site85170671.com" [redacted] 38.199.101.116 - - [09/Jul/2026:19:51:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 38.199.101.116 - - [09/Jul/2026:19:51:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 38.199.101.116 - - [09/Jul/2026:19:51:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 38.199.101.116 - - [09/Jul/2026:19:51:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site95749132.com" ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-09 14:47:12 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 13:17:45 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 38.199.101.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.199.101.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 09:17:38.586260 2026] [security2:error] [pid 3134:tid 3134] [client 38.199.101.116:60393] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.199.101.116 (+1 hits since last alert)\|rockinr.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rockinr.org"] [uri "/xmlrpc.php"] [unique_id "ak-fcpu7He48TWJbD9gsDQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇺🇸 188.213.202.140

🇺🇾 167.57.57.161

🇺🇸 157.245.1.7

🇺🇸 91.230.168.224

🇰🇷 218.157.179.170

🇩🇪 194.187.176.238

🇺🇸 173.255.242.196

🇸🇬 165.154.236.104

🇰🇷 112.160.23.105

🇲🇾 103.8.25.84

🇫🇷 91.196.152.190

🇺🇸 73.85.44.247

🇳🇱 45.153.34.151

🇬🇧 45.86.203.201

🇪🇸 37.134.161.229

🇬🇧 35.203.210.200

🇬🇧 35.203.210.78

🇸🇬 15.235.218.41

🇺🇸 216.38.230.117