JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.238.122.138

117.238.122.138 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 16%: ?

16%

ISP	NIB (National Internet Backbone)
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.co.in
Country	🇮🇳 India
City	Guwahati, Assam

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.238.122.138

Whois 117.238.122.138

IP Abuse Reports for 117.238.122.138:

This IP address has been reported a total of 5 times from 3 distinct sources. 117.238.122.138 was first reported on June 11th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-11 15:39:49 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 117.238.122.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 117.238.122.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:39:39.298463 2026] [security2:error] [pid 24092:tid 24092] [client 117.238.122.138:59391] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.238.122.138 (+1 hits since last alert)\|fredlandia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fredlandia.com"] [uri "/xmlrpc.php"] [unique_id "airWu9ARc-zn4-wpJAxCTgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 13:04:12 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 117.238.122.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 117.238.122.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 09:04:02.153036 2026] [security2:error] [pid 22730:tid 22730] [client 117.238.122.138:57515] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.238.122.138 (+1 hits since last alert)\|jonasrimkunas.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jonasrimkunas.com"] [uri "/xmlrpc.php"] [unique_id "aiqyQsvgIQqoLiM9apozkwAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-11 07:13:12 (3 weeks ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-11 06:45:40 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 117.238.122.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 117.238.122.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:45:30.724678 2026] [security2:error] [pid 1195:tid 1195] [client 117.238.122.138:52303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 117.238.122.138 (+1 hits since last alert)\|batfry.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "batfry.com"] [uri "/xmlrpc.php"] [unique_id "aipZijPYunSMWRZmyFh7qwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-11 04:05:28 (3 weeks ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=imeresd.gr; logs=/var/log/httpd/domains/imeresd.gr.log; sam ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=imeresd.gr; logs=/var/log/httpd/domains/imeresd.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.56.105.233

🇺🇸 91.230.168.183

🇫🇷 185.177.72.49

🇺🇸 173.66.30.46

🇵🇭 161.49.89.39

🇮🇹 93.92.79.213

🇺🇸 44.165.37.22

🇨🇳 171.108.182.213

🇺🇸 162.159.140.98

🇻🇳 161.248.146.47

🇺🇸 161.35.141.232

🇨🇳 120.229.212.91

🇬🇧 35.203.210.198

🇩🇪 194.88.98.89

🇵🇾 181.91.87.177

🇷🇺 178.178.194.136

🇺🇸 147.185.132.196

🇩🇪 69.5.169.91

🇨🇱 68.211.177.55

🇫🇷 51.83.10.135