JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.193.16.106

117.193.16.106 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 58%: ?

58%

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL Bangalore
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.in
Country	🇮🇳 India
City	Chennai, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.193.16.106

Whois 117.193.16.106

IP Abuse Reports for 117.193.16.106:

This IP address has been reported a total of 14 times from 9 distinct sources. 117.193.16.106 was first reported on July 14th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-16 22:23:30 (16 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-15 03:27:25 (2 days ago)	117.193.16.106 - - [14/Jul/2026:23:26:42 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5054 "-" "WordPress. ... show more 117.193.16.106 - - [14/Jul/2026:23:26:42 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5054 "-" "WordPress.com; https://wordpress.com" 117.193.16.106 - - [14/Jul/2026:23:26:53 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5054 "-" "WordPress.com; https://wordpress.com" 117.193.16.106 - - [14/Jul/2026:23:27:03 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5054 "-" "WordPress.com; https://wordpress.com" 117.193.16.106 - - [14/Jul/2026:23:27:13 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5070 "-" "WordPress.com; https://wordpress.com" 117.193.16.106 - - [14/Jul/2026:23:27:24 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5054 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
Anonymous	2026-07-15 00:17:05 (2 days ago)	[redacted] 117.193.16.106 - - [15/Jul/2026:02:16:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ... show more [redacted] 117.193.16.106 - - [15/Jul/2026:02:16:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com" [redacted] 117.193.16.106 - - [15/Jul/2026:02:16:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" [redacted] 117.193.16.106 - - [15/Jul/2026:02:16:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.0; WordPress/6.1; http://site51152457.com" [redacted] 117.193.16.106 - - [15/Jul/2026:02:16:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com" [redacted] 117.193.16.106 - - [15/Jul/2026:02:16:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 117.193.16.106 - - [15/Jul/2026:02:16:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 117.193.16.106 - - [15/Jul/2026:02:16:51 +0200] "POST /xmlrpc ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 21:45:41 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 117.193.16.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 117.193.16.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 17:45:28.075846 2026] [security2:error] [pid 1970:tid 1970] [client 117.193.16.106:65085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.193.16.106 (+1 hits since last alert)\|hvacmechanalysis.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hvacmechanalysis.com"] [uri "/xmlrpc.php"] [unique_id "alat-E3EU6uKNsq4mJDGWwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 21:01:55 (2 days ago)	[redacted] 117.193.16.106 - - [14/Jul/2026:23:01:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 117.193.16.106 - - [14/Jul/2026:23:01:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site13448626.com" [redacted] 117.193.16.106 - - [14/Jul/2026:23:01:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 117.193.16.106 - - [14/Jul/2026:23:01:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site70314121.com" [redacted] 117.193.16.106 - - [14/Jul/2026:23:01:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 117.193.16.106 - - [14/Jul/2026:23:01:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" ... show less	Hacking Web App Attack
🇹🇭 thaizone.com	2026-07-14 19:01:20 (2 days ago)	Brute-forcing login against websites (D1-1) #1	Web App Attack Hacking
🇩🇪 ghostwarriors	2026-07-14 18:50:23 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 18:27:26 (2 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 17:59:43 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 117.193.16.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 117.193.16.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 13:59:33.767551 2026] [security2:error] [pid 4176:tid 4176] [client 117.193.16.106:53639] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.193.16.106 (+1 hits since last alert)\|jellisonrepair.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jellisonrepair.com"] [uri "/xmlrpc.php"] [unique_id "alZ5BdjfYU0uVIMEVpozBAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 17:27:13 (2 days ago)	(wordpress) Failed wordpress login from 117.193.16.106 (IN/India/Tamil Nadu/Coimbatore/-/[redacted])	Brute-Force
🇺🇸 TPI-Abuse	2026-07-14 16:16:31 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 117.193.16.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 117.193.16.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 12:16:19.824028 2026] [security2:error] [pid 6725:tid 6725] [client 117.193.16.106:56339] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.193.16.106 (+1 hits since last alert)\|puckerbikini.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "puckerbikini.com"] [uri "/xmlrpc.php"] [unique_id "alZg0zwGDKX5oqTlsWhBTwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-14 16:06:03 (2 days ago)	Wordfence waf block on pameganslaw	Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 12:32:39 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 117.193.16.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 117.193.16.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 08:32:26.162630 2026] [security2:error] [pid 6936:tid 6936] [client 117.193.16.106:25080] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.193.16.106 (+1 hits since last alert)\|bostonmarathonstories.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bostonmarathonstories.com"] [uri "/xmlrpc.php"] [unique_id "alYsWoF5TQAf7r3QghK5lgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2026-07-14 11:56:50 (3 days ago)	117.193.16.106 - - [14/Jul/2026:13:56:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3419 "-" "Jetpack/12 ... show more 117.193.16.106 - - [14/Jul/2026:13:56:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3419 "-" "Jetpack/12.1; WordPress/6.4; http://site63226521.com" 117.193.16.106 - - [14/Jul/2026:13:56:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3466 "-" "Jetpack by WordPress.com" 117.193.16.106 - - [14/Jul/2026:13:56:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3465 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" show less	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 140.248.75.27

🇩🇪 43.228.157.8

🇨🇳 223.167.169.138

🇺🇸 206.189.233.36

🇺🇸 198.144.189.90

🇷🇴 193.46.255.86

🇧🇷 191.6.83.254

🇭🇰 152.32.128.149

🇷🇺 92.36.27.140

🇸🇪 85.229.219.253

🇷🇴 80.94.92.156

🇫🇷 80.15.223.148

🇳🇱 45.156.87.127

🇺🇸 44.220.188.195

🇧🇷 38.191.94.202

🇨🇳 221.0.13.156

🇮🇳 202.141.65.150

🇲🇽 187.212.1.182

🇰🇷 121.186.151.123

🇹🇼 110.25.114.8