JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

117.235.3.52

Neutral Activity

Abuse Confidence Score

0% Low Risk

13 reports

11 reporters · latest 2 months ago

ISP: NIB (National Internet Backbone)
Usage Type: Fixed Line ISP
ASN: AS9829
Domain Name: bsnl.co.in
Country: 🇮🇳 India
City: Thanesar, Haryana

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

117.235.3.52 has been reported 13 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

13 from 11 distinct reporters

First reported

March 23rd 2024

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-17 09:34:45 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 117.235.3.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:34:34.637084 2026] [security2:error] [pid 1563:tid 1563] [client 117.235.3.52:10561] ModSe ... show more (mod_security) mod_security (id:240335) triggered by 117.235.3.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:34:34.637084 2026] [security2:error] [pid 1563:tid 1563] [client 117.235.3.52:10561] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.235.3.52 (+1 hits since last alert)\|jillbauman.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jillbauman.com"] [uri "/xmlrpc.php"] [unique_id "aoLVqsDVpDSWUzPCR0xx4gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇬 HighWay	2026-08-17 09:30:10 UTC · (2 months ago)	117.235.3.52 - - [17/Aug/2026:09:29:46 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4738 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" 117.235.3.52 - - [17/Aug/2026:09:29:56 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4737 "-" "WordPress.com; htt ... show more 117.235.3.52 - - [17/Aug/2026:09:29:46 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4738 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" 117.235.3.52 - - [17/Aug/2026:09:29:56 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4737 "-" "WordPress.com; https://wordpress.com" 117.235.3.52 - - [17/Aug/2026:09:30:07 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4737 "-" "Jetpack/12.1; WordPress/6.3; http://site36804289.com" ... show less	Web App Attack
🇺🇸 integrantservices.com	2026-08-17 08:45:23 UTC · (2 months ago)	(wordpress) Failed wordpress login from 117.235.3.52 (IN/India/-)	Brute-Force
Anonymous	2026-08-17 08:39:14 UTC · (2 months ago)	(wordpress) Failed wordpress login from 117.235.3.52 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-17 07:48:25 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 117.235.3.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:48:14.619769 2026] [security2:error] [pid 23516:tid 23516] [client 117.235.3.52:62402] Mod ... show more (mod_security) mod_security (id:240335) triggered by 117.235.3.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:48:14.619769 2026] [security2:error] [pid 23516:tid 23516] [client 117.235.3.52:62402] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.235.3.52 (+1 hits since last alert)\|fadcometal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fadcometal.com"] [uri "/xmlrpc.php"] [unique_id "aoK8vqN6dqZGQggMoGX14gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-08-17 07:44:45 UTC · (2 months ago)	(wordpress) Failed wordpress login from 117.235.3.52 (IN/India/Haryana/Panipat/-)	Brute-Force
🇩🇪 konseptit	2026-08-17 06:55:24 UTC · (2 months ago)	(wordpress) Failed wordpress login from 117.235.3.52 (IN/India/-)	Brute-Force
🇩🇪 ghostwarriors	2026-08-17 06:51:00 UTC · (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-08-17 06:36:12 UTC · (2 months ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-08-17 05:17:12 UTC · (2 months ago)	117.235.3.52 - - [17/Aug/2026:01:14:02 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 117.235.3.52 - - [17/Aug/2026:01:15:16 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com ... show more 117.235.3.52 - - [17/Aug/2026:01:14:02 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 117.235.3.52 - - [17/Aug/2026:01:15:16 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 117.235.3.52 - - [17/Aug/2026:01:16:50 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 117.235.3.52 - - [17/Aug/2026:01:17:01 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 117.235.3.52 - - [17/Aug/2026:01:17:11 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 04:31:14 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 117.235.3.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:31:03.246433 2026] [security2:error] [pid 11485:tid 11485] [client 117.235.3.52:3331] ModS ... show more (mod_security) mod_security (id:240335) triggered by 117.235.3.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:31:03.246433 2026] [security2:error] [pid 11485:tid 11485] [client 117.235.3.52:3331] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.235.3.52 (+1 hits since last alert)\|xcarsubscription.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "xcarsubscription.com"] [uri "/xmlrpc.php"] [unique_id "aoKOh0-Ie1H6XZ-dOKIdOgAAADw"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 Anonymous	2024-03-23 13:51:03 UTC · (2 years ago)	Drop from IP address 117.235.3.52 to tcp-port 23	Port Scan
Anonymous	2024-03-23 02:31:27 UTC · (2 years ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇿🇦 197.101.196.52

🇧🇷 170.245.179.134

🇺🇸 167.172.150.228

🇫🇮 157.22.19.64

🇺🇸 104.234.112.202

🇺🇸 66.132.186.179

🇺🇸 66.132.172.193

🇺🇸 45.33.14.5

🇺🇸 34.123.134.194

🇺🇸 8.234.220.169

🇮🇳 183.82.111.224

🇺🇸 167.71.31.131

🇮🇳 110.172.147.190

🇧🇩 103.133.207.86

🇧🇬 78.128.114.118

🇷🇺 46.158.78.177

🇫🇷 45.154.138.247

🇺🇸 20.163.38.21

🇮🇳 202.134.186.6

🇨🇴 179.51.111.187