JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.193.146.234

117.193.146.234 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 37%: ?

37%

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL Bangalore
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.in
Country	🇮🇳 India
City	Tirunelveli, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.193.146.234

Whois 117.193.146.234

IP Abuse Reports for 117.193.146.234:

This IP address has been reported a total of 11 times from 9 distinct sources. 117.193.146.234 was first reported on July 10th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IndigoRidge	2026-08-17 09:33:25 (1 week ago)	117.193.146.234 - - [17/Aug/2026:05:30:23 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress ... show more 117.193.146.234 - - [17/Aug/2026:05:30:23 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" 117.193.146.234 - - [17/Aug/2026:05:31:16 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" 117.193.146.234 - - [17/Aug/2026:05:31:48 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" 117.193.146.234 - - [17/Aug/2026:05:31:59 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" 117.193.146.234 - - [17/Aug/2026:05:33:25 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5765 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇩🇪 bsoft.de	2026-08-17 08:06:19 (1 week ago)	117.193.146.234 - - [17/Aug/2026:10:05:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12 ... show more 117.193.146.234 - - [17/Aug/2026:10:05:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site47163541.com" 117.193.146.234 - - [17/Aug/2026:10:06:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" 117.193.146.234 - - [17/Aug/2026:10:06:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" show less	Web App Attack
🇫🇷 dynamix	2026-08-17 08:01:23 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-17 07:41:50 (1 week ago)	(xmlrpc) Apache: Failed xmlrpc access from 117.193.146.234 (IN/India/-): 10 in the last 3600 secs (0 ... show more (xmlrpc) Apache: Failed xmlrpc access from 117.193.146.234 (IN/India/-): 10 in the last 3600 secs (0-180) show less	Hacking
🇩🇪 LRob	2026-08-17 06:34:59 (1 week ago)	WordPress XML-RPC brute-force (repeated authentication attempts via xmlrpc.php) \| req: /xmlrpc.php \| ... show more WordPress XML-RPC brute-force (repeated authentication attempts via xmlrpc.php) \| req: /xmlrpc.php \| UA: Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2) show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 05:27:33 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 117.193.146.234 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 117.193.146.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:27:19.227306 2026] [security2:error] [pid 9913:tid 9913] [client 117.193.146.234:17475] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.193.146.234 (+1 hits since last alert)\|rodandreelpiercam.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rodandreelpiercam.com"] [uri "/xmlrpc.php"] [unique_id "aoKbtxk-0MDQnLzADQVKFQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 04:55:17 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 117.193.146.234 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 117.193.146.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:55:05.108270 2026] [security2:error] [pid 7941:tid 7941] [client 117.193.146.234:61277] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.193.146.234 (+1 hits since last alert)\|havilahmalone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "havilahmalone.com"] [uri "/xmlrpc.php"] [unique_id "aoKUKQwqkWXxMwoSFygTuAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 04:28:44 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 117.193.146.234 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 117.193.146.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:28:32.983576 2026] [security2:error] [pid 14814:tid 14827] [client 117.193.146.234:53903] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.193.146.234 (+1 hits since last alert)\|tkfay.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tkfay.com"] [uri "/xmlrpc.php"] [unique_id "aoKN8GDnqDi7VIF_AJvLxgAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2025-08-30 03:17:05 (11 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Smel	2025-08-30 00:15:02 (11 months ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2024-07-10 09:09:41 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:f810:5d::

🇸🇬 212.73.148.5

🇮🇳 172.253.222.210

🇨🇦 147.182.149.28

🇻🇳 104.28.210.248

🇱🇹 62.60.130.242

🇳🇱 45.148.10.183

🇲🇲 37.111.56.162

🇺🇸 20.84.144.154

🇸🇬 209.97.169.114

🇬🇧 193.163.125.135

🇩🇪 138.68.92.235

🇺🇸 108.175.5.23

🇮🇳 103.87.102.74

🇳🇴 20.100.175.163

🇺🇸 3.135.223.15

🇺🇸 2607:f8b0:4004:c23::12e

🇺🇸 205.210.31.41

🇦🇷 190.175.78.140

🇺🇸 172.203.7.55