JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.204.50.81

117.204.50.81 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 38%: ?

38%

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL Bangalore
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.in
Country	🇮🇳 India
City	Gondal, Gujarat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.204.50.81

Whois 117.204.50.81

IP Abuse Reports for 117.204.50.81:

This IP address has been reported a total of 15 times from 13 distinct sources. 117.204.50.81 was first reported on June 25th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-08-24 13:13:47 (1 day ago)	5.107 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-24 11:39:38 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 117.204.50.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 117.204.50.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 07:39:24.302070 2026] [security2:error] [pid 14788:tid 14793] [client 117.204.50.81:63626] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.204.50.81 (+1 hits since last alert)\|darkestmoonart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darkestmoonart.com"] [uri "/xmlrpc.php"] [unique_id "aowtbCVnwE_1iCrWbqTV8AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-08-24 11:36:53 (1 day ago)	(wordpress) Failed wordpress login from 117.204.50.81 (IN/India/Gujarat/Rajkot/-)	Brute-Force
Anonymous	2026-08-24 09:34:01 (1 day ago)	[redacted] 117.204.50.81 - - [24/Aug/2026:11:32:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 117.204.50.81 - - [24/Aug/2026:11:32:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 117.204.50.81 - - [24/Aug/2026:11:33:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 117.204.50.81 - - [24/Aug/2026:11:33:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 117.204.50.81 - - [24/Aug/2026:11:33:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 117.204.50.81 - - [24/Aug/2026:11:34:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 09:01:34 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 117.204.50.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 117.204.50.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 05:01:21.880002 2026] [security2:error] [pid 4604:tid 4604] [client 117.204.50.81:55178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.204.50.81 (+1 hits since last alert)\|67ronin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "67ronin.com"] [uri "/xmlrpc.php"] [unique_id "aowIYWImUY5djHTBjX6wCAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-08-24 07:02:03 (1 day ago)	Wordfence waf block on jestrellafoundation	Web App Attack
🇨🇳 ThreatBook.io	2025-06-26 23:45:51 (1 year ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/117.204.50.81	SSH
🇺🇸 RAP	2025-06-26 00:45:51 (1 year ago)	2025-06-26 00:45:51 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2025-06-25 14:41:52 (1 year ago)	Port Scan Attack proto:TCP src:50726 dst:23	Port Scan
Anonymous	2025-06-25 14:31:14 (1 year ago)	Unauthorized connection to Telnet port 23	Port Scan
🇺🇸 cybsecaoccol	2025-06-25 12:32:38 (1 year ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇷🇴 Lungu Stefan Gabriel	2025-06-25 09:19:12 (1 year ago)	High number of requests detected from this IP: 1 requests in 1 seconds on port 23. Reason: 1 RPS în ... show more High number of requests detected from this IP: 1 requests in 1 seconds on port 23. Reason: 1 RPS în 1 secunde (depășit pragul burst) pe portul 23 show less	Port Scan Brute-Force IoT Targeted
🇺🇸 MPL	2025-06-25 08:43:22 (1 year ago)	tcp/23	Port Scan
🇺🇸 MPL	2025-06-25 08:43:22 (1 year ago)	tcp/23 (2 or more attempts)	Port Scan
🇳🇴 Alexandr Kulkov	2025-06-25 07:23:44 (1 year ago)	117.204.50.81 triggered Icarus honeypot on port 23.	Port Scan Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇧🇷 187.49.144.147

🇨🇦 85.217.149.35

🇸🇪 46.59.91.172

🇧🇷 45.160.231.44

🇺🇸 45.61.177.185

🇦🇺 34.40.145.110

🇨🇳 222.176.201.57

🇺🇸 158.101.21.209

🇩🇪 69.5.169.224

🇮🇳 152.52.227.94

🇩🇪 135.125.199.17

🇮🇳 122.177.247.38

🇲🇾 103.40.204.60

🇳🇱 91.92.47.120

🇩🇪 85.203.15.252

🇷🇺 83.172.17.138

🇩🇪 81.199.26.11

🇳🇱 62.238.195.91

🇳🇱 45.198.224.26