JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.247.48.52

117.247.48.52 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 90%: ?

90%

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL Bangalore
Usage Type	Fixed Line ISP
ASN	AS9829
Hostname(s)	static.ill.117.247.48.52.bsnl.co.in
Domain Name	bsnl.in
Country	🇮🇳 India
City	Pimpri, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.247.48.52

Whois 117.247.48.52

IP Abuse Reports for 117.247.48.52:

This IP address has been reported a total of 30 times from 20 distinct sources. 117.247.48.52 was first reported on June 12th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 interbiznw.com	2026-07-01 04:46:13 (1 day ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 Bedios GmbH	2026-06-29 03:09:30 (3 days ago)	Wordpress hacking attempt	Web App Attack
🇩🇪 4server	2026-06-28 22:02:55 (3 days ago)	[MonJun2900:02:52.0047812026][security2:error][pid2169883:tid2169937][client117.247.48.52:0]ModSecur ... show more [MonJun2900:02:52.0047812026][security2:error][pid2169883:tid2169937][client117.247.48.52:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ci-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"akGaDCcRbgmAZXZ2jt7t0gAAAFA\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-06-26 08:24:39 (6 days ago)	[FriJun2610:24:33.1996522026][security2:error][pid3444647:tid3444927][client117.247.48.52:0]ModSecur ... show more [FriJun2610:24:33.1996522026][security2:error][pid3444647:tid3444927][client117.247.48.52:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"duoacaja.com\"][uri\"/xmlrpc.php\"][unique_id\"aj43QcBDi_tvGKk24MyIJgAAARc\"] show less	Hacking Web App Attack
Anonymous	2026-06-26 08:00:07 (6 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇳🇱 Site.eu	2026-06-25 12:41:29 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-24 16:37:16 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 117.247.48.52 (static.ill.117.247.48.52.bsnl.co ... show more (mod_security) mod_security (id:225170) triggered by 117.247.48.52 (static.ill.117.247.48.52.bsnl.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 12:37:10.265606 2026] [security2:error] [pid 1153:tid 1227] [client 117.247.48.52:49182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ccgparquitectos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ccgparquitectos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajwHtm0IlBVWiZrRCQa1EwAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 12:23:56 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 117.247.48.52 (static.ill.117.247.48.52.bsnl.co ... show more (mod_security) mod_security (id:225170) triggered by 117.247.48.52 (static.ill.117.247.48.52.bsnl.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 08:23:52.091740 2026] [security2:error] [pid 13581:tid 13581] [client 117.247.48.52:56652] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nypatriotcards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nypatriotcards.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajvMWPu_K42Zq4zjNukD0AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 F242	2026-06-24 11:28:53 (1 week ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇩🇪 kommunos	2026-06-24 10:21:03 (1 week ago)	/xmlrpc.php	Web App Attack
🇱🇻 garmtech.com	2026-06-24 08:25:07 (1 week ago)	Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇳🇱 MM-bot	2026-06-24 08:16:53 (1 week ago)	URL-probe: HTTP/1.1 POST request on /xmlrpc.php (2026-06-24 10:16:53 UTC+2)	Web App Attack Hacking
🇫🇮 stinpriza	2026-06-23 14:04:50 (1 week ago)	Web App Attack	Web App Attack
🇩🇪 4server	2026-06-23 02:23:59 (1 week ago)	[TueJun2304:23:54.8630762026][security2:error][pid2175487:tid2175547][client117.247.48.52:0]ModSecur ... show more [TueJun2304:23:54.8630762026][security2:error][pid2175487:tid2175547][client117.247.48.52:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mjgold.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajnuOikt4QmyRXfqxvHn6AAAAFQ\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 23:45:12 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 117.247.48.52 (static.ill.117.247.48.52.bsnl.co ... show more (mod_security) mod_security (id:225170) triggered by 117.247.48.52 (static.ill.117.247.48.52.bsnl.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 19:45:08.738913 2026] [security2:error] [pid 18974:tid 18974] [client 117.247.48.52:60745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kildarafarms.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kildarafarms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajnJBCanePrL44-OVSk8MgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇴 217.170.194.91

🇬🇧 209.97.183.43

🇫🇷 207.180.197.181

🇺🇸 186.246.80.23

🇻🇳 171.231.195.112

🇳🇱 91.92.40.7

🇮🇹 88.147.30.59

🇩🇪 87.106.197.138

🇧🇬 79.124.60.146

🇧🇷 43.157.174.69

🇸🇬 20.212.4.99

🇧🇷 20.195.177.9

🇺🇸 18.217.208.51

🇷🇴 2.57.122.150

🇨🇳 221.13.245.33

🇱🇹 194.165.16.162

🇷🇴 193.46.255.86

🇧🇷 177.38.71.226

🇺🇸 174.35.25.181

🇨🇳 171.217.92.33