JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.50.167.11

38.50.167.11 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 52%: ?

52%

ISP	PT. KUPANG INTERMEDIA
Usage Type	Fixed Line ISP
ASN	AS140026
Domain Name	timornet.id
Country	🇮🇩 Indonesia
City	Kupang, East Nusa Tenggara

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.50.167.11

Whois 38.50.167.11

IP Abuse Reports for 38.50.167.11:

This IP address has been reported a total of 41 times from 24 distinct sources. 38.50.167.11 was first reported on July 30th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-24 08:00:17 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 04:00:10.729797 2026] [security2:error] [pid 31754:tid 31754] [client 38.50.167.11:53201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.50.167.11 (+1 hits since last alert)\|yuichiro.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yuichiro.us"] [uri "/xmlrpc.php"] [unique_id "aov6CrOyQBGdhfy2RrsE3gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 07:28:47 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 03:28:43.250773 2026] [security2:error] [pid 10718:tid 10718] [client 38.50.167.11:58606] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.50.167.11 (+1 hits since last alert)\|fadcometal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fadcometal.com"] [uri "/xmlrpc.php"] [unique_id "aovyq5-_J-CNudytphfQrAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-24 04:43:06 (3 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/-	Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 04:17:03 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 00:16:59.362999 2026] [security2:error] [pid 32549:tid 32549] [client 38.50.167.11:61717] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.50.167.11 (+1 hits since last alert)\|laecovillage.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "laecovillage.org"] [uri "/xmlrpc.php"] [unique_id "aovFu_xqxPOzzHBzCcv9-gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-24 03:42:51 (3 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-08-24 03:42:02 (3 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-08-24 03:20:11 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-08-24 03:10:52 (3 weeks ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 02:42:29 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 22:42:22.019796 2026] [security2:error] [pid 26108:tid 26108] [client 38.50.167.11:55522] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.50.167.11 (+1 hits since last alert)\|se-advisorsgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "se-advisorsgroup.com"] [uri "/xmlrpc.php"] [unique_id "aouvjlx7puPj_NK5cZWaZwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-24 02:41:11 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-08-24 00:42:37 (3 weeks ago)	38.50.167.11 - - [23/Aug/2026:20:40:48 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5367 "-" "WordPress.co ... show more 38.50.167.11 - - [23/Aug/2026:20:40:48 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5367 "-" "WordPress.com; https://wordpress.com" 38.50.167.11 - - [23/Aug/2026:20:40:59 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5368 "-" "WordPress.com; https://wordpress.com" 38.50.167.11 - - [23/Aug/2026:20:41:52 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5368 "-" "WordPress.com; https://wordpress.com" 38.50.167.11 - - [23/Aug/2026:20:42:25 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5367 "-" "WordPress.com; https://wordpress.com" 38.50.167.11 - - [23/Aug/2026:20:42:35 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5368 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 09:20:04 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 05:19:57.726294 2026] [security2:error] [pid 13378:tid 13501] [client 38.50.167.11:51231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.50.167.11 (+1 hits since last alert)\|dwcmachining.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dwcmachining.com"] [uri "/xmlrpc.php"] [unique_id "aolpvUkA6zJj7Avckow79AAABUo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 08:16:02 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 38.50.167.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 04:15:54.963003 2026] [security2:error] [pid 16404:tid 16442] [client 38.50.167.11:58445] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.50.167.11 (+1 hits since last alert)\|luxury.management\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "luxury.management"] [uri "/xmlrpc.php"] [unique_id "aolauiS_aPrnwbhpLtoyfwAAAQc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-22 06:42:00 (3 weeks ago)	[redacted] 38.50.167.11 - - [22/Aug/2026:08:41:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1511 "-" "J ... show more [redacted] 38.50.167.11 - - [22/Aug/2026:08:41:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1511 "-" "Jetpack by WordPress.com" [redacted] 38.50.167.11 - - [22/Aug/2026:08:41:27 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack/12.5; WordPress/6.4; http://site77569232.com" [redacted] 38.50.167.11 - - [22/Aug/2026:08:41:38 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 38.50.167.11 - - [22/Aug/2026:08:41:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" [redacted] 38.50.167.11 - - [22/Aug/2026:08:41:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-08-21 07:27:52 (3 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.212

🇬🇧 178.239.198.158

🇵🇱 146.59.0.5

🇮🇳 103.170.157.62

🇺🇸 74.114.151.142

🇺🇸 68.10.56.52

🇨🇳 59.52.176.198

🇯🇵 34.84.176.249

🇭🇰 165.154.20.187

🇺🇸 136.69.229.72

🇲🇽 134.168.249.100

🇻🇳 118.69.32.171

🇺🇸 35.232.229.187

🇵🇱 34.116.200.154

🇭🇰 34.92.232.110

🇺🇸 195.184.76.142

🇵🇱 194.180.48.47

🇺🇸 147.185.132.193

🇹🇭 125.25.99.113

🇮🇩 103.139.126.5