JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.92.48.252

111.92.48.252 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Asianet is a cable ISP providing
Usage Type	Fixed Line ISP
ASN	AS17465
Hostname(s)	111092dynamic048252.asianet.co.in
Domain Name	asianet.co.in
Country	🇮🇳 India
City	Kollam, Kerala

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.92.48.252

Whois 111.92.48.252

IP Abuse Reports for 111.92.48.252:

This IP address has been reported a total of 38 times from 23 distinct sources. 111.92.48.252 was first reported on June 29th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Steve	2026-07-04 14:48:25 (3 hours ago)	Abuse of XMLRPC	Brute-Force Web App Attack
Anonymous	2026-07-04 09:00:10 (8 hours ago)	Attac	Brute-Force
🇫🇷 applemooz	2026-07-04 07:46:18 (10 hours ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇹🇭 thaizone.com	2026-07-03 19:18:05 (22 hours ago)	Brute-forcing login against websites (D1-1) #1	Web App Attack Hacking
🇳🇱 Site.eu	2026-07-03 17:32:53 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇧🇪 cmbplf	2026-07-03 12:18:17 (1 day ago)	2.319 requests from abuseipdb.com blacklisted IP (1yr4mos4w)	Brute-Force Bad Web Bot
🇮🇩 Burayot	2026-07-03 09:07:08 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 111.92.48.252 (IN/India/111092dynam ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 111.92.48.252 (IN/India/111092dynamic048252.asianet.co.in): 1 in the last 3600 secs show less	Web App Attack
🇹🇷 ycoskun41	2026-07-03 05:50:24 (1 day ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 04:21:12 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 111.92.48.252 (111092dynamic048252.asianet.co.i ... show more (mod_security) mod_security (id:240335) triggered by 111.92.48.252 (111092dynamic048252.asianet.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:21:07.843327 2026] [security2:error] [pid 2183:tid 2183] [client 111.92.48.252:15671] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.48.252 (+1 hits since last alert)\|femalegamblers.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "femalegamblers.org"] [uri "/xmlrpc.php"] [unique_id "akc4s8BQRz7bgBEO6XlWXwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-07-03 00:31:14 (1 day ago)	2026-07-03T02:31:12.658464+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 111 ... show more 2026-07-03T02:31:12.658464+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 111.92.48.252 show less	Web App Attack
Anonymous	2026-07-02 18:02:10 (1 day ago)	Attac	Brute-Force
🇳🇱 Site.eu	2026-07-02 13:14:12 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 YF	2026-07-02 05:30:21 (2 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-07-02 03:33:15 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 111.92.48.252 (111092dynamic048252.asianet.co.i ... show more (mod_security) mod_security (id:240335) triggered by 111.92.48.252 (111092dynamic048252.asianet.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:33:10.711176 2026] [security2:error] [pid 11034:tid 11034] [client 111.92.48.252:16565] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.48.252 (+1 hits since last alert)\|comicpreservation.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "comicpreservation.com"] [uri "/xmlrpc.php"] [unique_id "akXb9tn2mEwoEtsOj9hktwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:02:17 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 111.92.48.252 (111092dynamic048252.asianet.co.i ... show more (mod_security) mod_security (id:240335) triggered by 111.92.48.252 (111092dynamic048252.asianet.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:02:10.970275 2026] [security2:error] [pid 10877:tid 10877] [client 111.92.48.252:16377] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.48.252 (+1 hits since last alert)\|clayrivers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "clayrivers.com"] [uri "/xmlrpc.php"] [unique_id "akXUsjHYqj5OSzMlTm0KMQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.42.116.107

🇻🇳 165.154.137.186

🇱🇹 45.227.254.170

🇫🇷 45.154.138.160

🇳🇱 45.148.10.151

🇨🇳 220.167.233.15

🇺🇸 164.90.152.103

🇩🇪 89.58.5.0

🇨🇳 82.156.8.3

🇫🇷 38.242.143.220

🇺🇸 18.119.209.50

🇷🇺 176.112.111.38

🇩🇪 172.70.240.87

🇮🇩 158.140.182.25

🇫🇮 147.185.133.215

🇺🇸 136.116.198.170

🇨🇳 120.48.135.189

🇻🇳 118.70.182.193

🇨🇴 108.174.156.122

🇷🇺 88.206.10.187