AbuseIPDB » 38.3.210.164
38.3.210.164 was found in our database!
This IP was reported 7 times. Confidence of
Abuse
is 43% : ?
ISP
INTERFIBRAS TELECOMUNICACOES LTDA
Usage Type
Fixed Line ISP
ASN
AS264255
Domain Name
interfibras.com.br
Country
π§π·
Brazil
City
Rondonopolis, Mato Grosso
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 38.3.210.164 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
38.3.210.164 was first reported on
November 29th 2025 , and the most recent report was
8 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
π«π·
dynamix
2026-08-22 21:03:17
(8 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
πΊπΈ
nationaleventpros.com
2026-08-22 17:34:13
(12 hours ago)
WordPress login attempt
Brute-Force
πΊπΈ
TPI-Abuse
2026-08-22 06:56:29
(22 hours ago)
(mod_security) mod_security (id:240335) triggered by 38.3.210.164 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 38.3.210.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:56:23.365686 2026] [security2:error] [pid 24513:tid 24513] [client 38.3.210.164:48209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 38.3.210.164 (+1 hits since last alert)|greenmountainfeeds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greenmountainfeeds.com"] [uri "/xmlrpc.php"] [unique_id "aolIF86y1yVJqOg0nc_4tAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
Marc
2026-08-22 05:04:13
(1 day ago)
38.3.210.164 - - [22/Aug/2026:07:01:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4789 "-" "Jetpack/12.1 ...
show more
38.3.210.164 - - [22/Aug/2026:07:01:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4789 "-" "Jetpack/12.1; WordPress/6.1; http://site65981634.com" 38.3.210.164 - - [22/Aug/2026:07:03:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4835 "-" "Jetpack/12.5; WordPress/6.3; http://site10368677.com" 38.3.210.164 - - [22/Aug/2026:07:04:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4836 "-" "WordPress.com; https://wordpress.com"
show less
Brute-Force
Web App Attack
π«π·
Kenshin869
2026-08-21 05:09:29
(2 days ago)
Wordpress unauthorized access attempt
Brute-Force
π¦πΊ
screwlooseit.com.au
2026-08-19 02:14:04
(4 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
Anonymous
2025-11-29 13:14:37
(8 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp
show less
Bad Web Bot
Exploited Host
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: