JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.216.97.38

117.216.97.38 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 55%: ?

55%

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL Bangalore
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.in
Country	🇮🇳 India
City	Valparai, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.216.97.38

Whois 117.216.97.38

IP Abuse Reports for 117.216.97.38:

This IP address has been reported a total of 15 times from 9 distinct sources. 117.216.97.38 was first reported on July 27th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 17:55:24 (3 hours ago)	(mod_security) mod_security (id:240335) triggered by 117.216.97.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 117.216.97.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:55:10.784840 2026] [security2:error] [pid 25198:tid 25198] [client 117.216.97.38:62834] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.216.97.38 (+1 hits since last alert)\|arsenalfordemocracy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "arsenalfordemocracy.com"] [uri "/xmlrpc.php"] [unique_id "amebfqQMsVeYoQ-t0nvOcgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 yitzhaq	2026-07-27 17:09:22 (4 hours ago)	117.216.97.38 - - [27/Jul/2026:18:48:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4895 "-" "WordPress.c ... show more 117.216.97.38 - - [27/Jul/2026:18:48:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4895 "-" "WordPress.com; https://wordpress.com" 117.216.97.38 - - [27/Jul/2026:18:53:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4896 "-" "WordPress.com; https://wordpress.com" 117.216.97.38 - - [27/Jul/2026:18:59:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4896 "-" "Jetpack/12.0; WordPress/6.4; http://site97222799.com" 117.216.97.38 - - [27/Jul/2026:19:04:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4895 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" 117.216.97.38 - - [27/Jul/2026:19:09:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4896 "-" "WordPress.com; https://wordpress.com" show less	Web App Attack Brute-Force
🇩🇪 big-cloud.nl	2026-07-27 16:10:02 (5 hours ago)	Try to access /stellingia/xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:55:17 (9 hours ago)	(mod_security) mod_security (id:240335) triggered by 117.216.97.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 117.216.97.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:55:05.401481 2026] [security2:error] [pid 581058:tid 581058] [client 117.216.97.38:15433] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.216.97.38 (+1 hits since last alert)\|iconbizpromo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iconbizpromo.com"] [uri "/xmlrpc.php"] [unique_id "amdHGWLPNt6qnQwUzbvkZQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 11:51:11 (9 hours ago)	[redacted] 117.216.97.38 - - [27/Jul/2026:13:50:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "W ... show more [redacted] 117.216.97.38 - - [27/Jul/2026:13:50:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" [redacted] 117.216.97.38 - - [27/Jul/2026:13:50:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/13.0; WordPress/6.4; http://site54806971.com" [redacted] 117.216.97.38 - - [27/Jul/2026:13:50:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" [redacted] 117.216.97.38 - - [27/Jul/2026:13:50:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.5; WordPress/6.1; http://site89839452.com" [redacted] 117.216.97.38 - - [27/Jul/2026:13:50:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" [redacted] 117.216.97.38 - - [27/Jul/2026:13:50:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.5; WordPress/6.4; http://site56918905.com" [redacted] 117.216.97.38 - - [27/Jul/2026:13:50:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" krant ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 10:39:42 (10 hours ago)	(mod_security) mod_security (id:240335) triggered by 117.216.97.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 117.216.97.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:39:32.819991 2026] [security2:error] [pid 3278164:tid 3278164] [client 117.216.97.38:54255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.216.97.38 (+1 hits since last alert)\|fltsiminc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fltsiminc.com"] [uri "/xmlrpc.php"] [unique_id "amc1ZMwVWJfHuZeFJDCocAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 09:06:30 (12 hours ago)	[redacted] 117.216.97.38 - - [27/Jul/2026:11:05:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "J ... show more [redacted] 117.216.97.38 - - [27/Jul/2026:11:05:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 117.216.97.38 - - [27/Jul/2026:11:05:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 117.216.97.38 - - [27/Jul/2026:11:05:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 117.216.97.38 - - [27/Jul/2026:11:05:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com" [redacted] 117.216.97.38 - - [27/Jul/2026:11:06:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com" [redacted] 117.216.97.38 - - [27/Jul/2026:11:06:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 117.216.97.38 - - [27/Jul/2026:11:06:11 +0200] "POST / ... show less	Hacking Web App Attack
🇮🇹 Progetto1	2026-07-27 08:10:04 (13 hours ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇱🇻 garmtech.com	2026-07-27 07:49:18 (13 hours ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇱🇻 garmtech.com	2026-07-27 07:38:27 (13 hours ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇪🇸 alferez	2026-07-27 06:55:28 (14 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇩🇪 abdubhai	2026-07-27 06:16:16 (14 hours ago)	117.216.97.38 - - [27/Jul/2026:1 ...	Brute-Force
🇺🇸 TPI-Abuse	2026-07-27 06:05:38 (15 hours ago)	(mod_security) mod_security (id:240335) triggered by 117.216.97.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 117.216.97.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 02:05:24.660552 2026] [security2:error] [pid 1548278:tid 1548319] [client 117.216.97.38:60816] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.216.97.38 (+1 hits since last alert)\|browbrew.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "browbrew.com"] [uri "/xmlrpc.php"] [unique_id "amb1JAuCpNubmyDFY0H5ZAAAAgI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 05:51:58 (15 hours ago)	[redacted] 117.216.97.38 - - [27/Jul/2026:07:51:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 117.216.97.38 - - [27/Jul/2026:07:51:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 117.216.97.38 - - [27/Jul/2026:07:51:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 117.216.97.38 - - [27/Jul/2026:07:51:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 117.216.97.38 - - [27/Jul/2026:07:51:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 117.216.97.38 - - [27/Jul/2026:07:51:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site30472412.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-27 05:51:56 (15 hours ago)	(wordpress) Failed wordpress login from 117.216.97.38 (IN/India/-)	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.124

🇲🇽 187.189.36.128

🇷🇺 79.104.0.82

🇺🇸 71.6.158.166

🇬🇧 35.203.211.192

🇺🇸 34.69.201.44

🇺🇸 23.226.213.211

🇮🇳 182.18.139.237

🇫🇷 176.165.17.148

🇺🇸 173.255.223.49

🇨🇳 116.172.248.15

🇧🇩 103.86.199.229

🇫🇷 85.217.140.16

🇺🇸 47.42.138.97

🇺🇸 216.25.89.121

🇺🇸 216.25.89.109

🇺🇦 193.32.71.29

🇲🇽 189.136.105.100

🇷🇺 176.213.1.148

🇲🇾 175.142.40.162