JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.35.225.217

39.35.225.217 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 46%: ?

46%

ISP	Pakistan Telecommuication company limited
Usage Type	Fixed Line ISP
ASN	AS17557
Domain Name	ptcl.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.35.225.217

Whois 39.35.225.217

IP Abuse Reports for 39.35.225.217:

This IP address has been reported a total of 15 times from 8 distinct sources. 39.35.225.217 was first reported on July 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-03 23:34:42 (1 week ago)	10.099 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇫🇷 dynamix	2026-07-03 22:27:55 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 21:58:08 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:58:02.129677 2026] [security2:error] [pid 11675:tid 11675] [client 39.35.225.217:60755] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.225.217 (+1 hits since last alert)\|theopinionatedowl.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "theopinionatedowl.com"] [uri "/xmlrpc.php"] [unique_id "akgwap2g1rf3XHAtyYnLxQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-03 20:29:20 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PK/Pakistan/-	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 18:16:56 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:16:49.257230 2026] [security2:error] [pid 11618:tid 11618] [client 39.35.225.217:64325] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.225.217 (+1 hits since last alert)\|blublk.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "blublk.com"] [uri "/xmlrpc.php"] [unique_id "akf8kaJC4UJPgqCCWuk5ZQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 00:47:10 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 20:47:06.457826 2026] [security2:error] [pid 26366:tid 26366] [client 39.35.225.217:56289] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.225.217 (+1 hits since last alert)\|dymesich.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dymesich.com"] [uri "/xmlrpc.php"] [unique_id "akcGioPW-edcXBHcvkRGLwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 00:18:09 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 20:18:01.617624 2026] [security2:error] [pid 13307:tid 13307] [client 39.35.225.217:59573] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.225.217 (+1 hits since last alert)\|barigby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "barigby.com"] [uri "/xmlrpc.php"] [unique_id "akb_uZj6Rgn0-9ibfFGV0gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-02 23:47:27 (1 week ago)	(wordpress) Failed wordpress login from 39.35.225.217 (PK/Pakistan/Sindh/Karachi/-/[redacted])	Brute-Force
🇩🇪 rh24	2026-07-02 22:42:58 (1 week ago)	(xmlrpc_405) XMLRPC-Bot 405 39.35.225.217 (PK/Pakistan/-)	Hacking
🇺🇸 TPI-Abuse	2026-07-02 22:18:53 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:18:46.029066 2026] [security2:error] [pid 26777:tid 26777] [client 39.35.225.217:58245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.225.217 (+1 hits since last alert)\|rodzillacharters.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rodzillacharters.com"] [uri "/xmlrpc.php"] [unique_id "akbjxunKRaX_TubFf0ZsZQAAADU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 21:39:57 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 17:39:51.747674 2026] [security2:error] [pid 27874:tid 27874] [client 39.35.225.217:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.225.217 (+1 hits since last alert)\|local639.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "local639.com"] [uri "/xmlrpc.php"] [unique_id "akbap1D2w7kbyHVeY7If5QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-02 20:46:14 (1 week ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-07-02 19:45:30 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 15:45:27.317764 2026] [security2:error] [pid 9411:tid 9434] [client 39.35.225.217:64251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.225.217 (+1 hits since last alert)\|strengthsmatter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "strengthsmatter.com"] [uri "/xmlrpc.php"] [unique_id "aka_18CG4CEikVCg1TgyqgAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 18:55:30 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.35.225.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:55:23.439062 2026] [security2:error] [pid 27520:tid 27520] [client 39.35.225.217:17197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.35.225.217 (+1 hits since last alert)\|newhopepetgrooming.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "newhopepetgrooming.com"] [uri "/xmlrpc.php"] [unique_id "aka0G55B9P0GIMmlTaVFqAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-02 18:53:15 (1 week ago)	(wordpress) Failed wordpress login from 39.35.225.217 (PK/Pakistan/-)	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 194.238.57.151

🇧🇷 191.252.184.159

🇳🇱 45.148.10.152

🇺🇸 44.35.251.192

🇺🇸 2a09:bac5:9443:3af::5e:6b

🇺🇸 165.154.162.212

🇪🇸 144.178.129.203

🇮🇳 117.205.166.110

🇧🇪 104.155.124.220

🇮🇳 103.97.215.11

🇫🇮 83.97.78.224

🇧🇬 79.124.62.230

🇺🇸 66.132.186.168

🇮🇩 36.93.249.106

🇻🇳 14.187.138.61

🇩🇪 8.211.12.213

🇳🇱 195.178.110.232

🇺🇸 130.131.161.76

🇨🇦 99.79.65.95

🇸🇬 47.128.126.170