JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.35.216.220

39.35.216.220 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 33%: ?

33%

ISP	Pakistan Telecommuication company limited
Usage Type	Fixed Line ISP
ASN	AS17557
Domain Name	ptcl.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.35.216.220

Whois 39.35.216.220

IP Abuse Reports for 39.35.216.220:

This IP address has been reported a total of 9 times from 6 distinct sources. 39.35.216.220 was first reported on June 13th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-13 21:34:04 (2 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 20:33:45 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 39.35.216.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.216.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 16:33:40.171739 2026] [security2:error] [pid 8140:tid 8140] [client 39.35.216.220:18205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.216.220 (+1 hits since last alert)\|cathybermanmft.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cathybermanmft.com"] [uri "/xmlrpc.php"] [unique_id "ai2-pL9sI9HCC65LZ_2tLAAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-06-13 20:05:02 (2 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇸🇪 vaia.cloud	2026-06-13 19:49:03 (2 weeks ago)	trying wp-login.php/xmlrpc.php 33 times in 1 minutes	Brute-Force Web App Attack
Anonymous	2026-06-13 16:53:11 (2 weeks ago)	Fail2Ban WordPress login brute-force detected	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 16:20:12 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 39.35.216.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.216.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:20:07.391736 2026] [security2:error] [pid 9366:tid 9366] [client 39.35.216.220:58576] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.216.220 (+1 hits since last alert)\|jesussotoca.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jesussotoca.com"] [uri "/xmlrpc.php"] [unique_id "ai2DN6Uq5BKbsHH3QXll-AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 applemooz	2026-06-13 15:50:31 (2 weeks ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 15:18:02 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 39.35.216.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.216.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:17:57.065943 2026] [security2:error] [pid 4802:tid 4802] [client 39.35.216.220:3763] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.216.220 (+1 hits since last alert)\|nextstepplus.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nextstepplus.net"] [uri "/xmlrpc.php"] [unique_id "ai10pVkLlOh6uq1bMTQX2gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 14:50:07 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 39.35.216.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.216.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:50:03.934004 2026] [security2:error] [pid 12762:tid 12762] [client 39.35.216.220:61262] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.216.220 (+1 hits since last alert)\|pleaseaddbacon.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pleaseaddbacon.com"] [uri "/xmlrpc.php"] [unique_id "ai1uG6Vx5hlhJ_mSfNq1fAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 192.141.156.46

🇳🇱 185.242.226.61

🇭🇰 165.154.4.92

🇺🇸 142.93.252.66

🇵🇱 109.205.211.91

🇻🇳 103.118.28.15

🇺🇸 100.50.17.159

🇩🇪 69.5.169.223

🇻🇳 14.231.241.155

🇺🇸 4.154.22.13

🇵🇰 223.123.72.126

🇺🇸 216.45.50.119

🇺🇸 205.210.31.51

🇹🇼 198.235.24.72

🇺🇸 195.26.240.95

🇨🇳 180.76.52.146

🇧🇷 160.20.163.90

🇵🇰 154.208.54.66

🇺🇸 141.11.88.12

🇧🇩 103.152.105.56