JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 105.127.11.64

105.127.11.64 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 44%: ?

44%

ISP	Airtel Networks Limited
Usage Type	Fixed Line ISP
ASN	AS36873
Domain Name	airtel.in
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 105.127.11.64

Whois 105.127.11.64

IP Abuse Reports for 105.127.11.64:

This IP address has been reported a total of 6 times from 6 distinct sources. 105.127.11.64 was first reported on June 20th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-06-20 16:55:41 (6 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 105.127.11.64 (NG/Nigeria/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 105.127.11.64 (NG/Nigeria/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 16:53:18 (6 hours ago)	(mod_security) mod_security (id:225170) triggered by 105.127.11.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 105.127.11.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 12:53:14.724584 2026] [security2:error] [pid 24821:tid 24821] [client 105.127.11.64:3094] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|marv.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marv.us"] [uri "/wp-json/wp/v2/users"] [unique_id "ajbFeridOLV2NGcKPlQt0gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-20 16:42:24 (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-20 15:56:43 (7 hours ago)	Attac	Brute-Force
🇩🇪 4server	2026-06-20 13:51:26 (9 hours ago)	[SatJun2015:51:23.5329292026][security2:error][pid3543778:tid3543800][client105.127.11.64:0]ModSecur ... show more [SatJun2015:51:23.5329292026][security2:error][pid3543778:tid3543800][client105.127.11.64:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gruppobalu.com\"][uri\"/xmlrpc.php\"][unique_id\"ajaa21bCdbEcg1NhMLTKhgAAANM\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 grassau.com	2026-06-20 10:56:30 (12 hours ago)	(wordpress) Failed wordpress login from 105.127.11.64 (NG/Nigeria/Lagos/Lagos/-)	Brute-Force

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.26

🇨🇿 185.138.69.94

🇱🇹 91.224.92.87

🇬🇧 87.236.176.226

🇬🇧 45.198.224.46

🇳🇱 34.91.0.68

🇨🇳 14.103.117.85

🇨🇳 14.22.82.116

🇷🇴 2.57.122.238

🇰🇷 222.232.176.7

🇲🇰 185.233.210.131

🇮🇳 182.95.181.166

🇺🇸 165.154.206.204

🇷🇸 89.216.165.94

🇺🇸 68.183.156.173

🇨🇿 91.224.90.50

🇺🇸 66.132.172.127

🇧🇷 45.235.17.84

🇩🇪 167.94.146.43

🇺🇸 165.154.163.128