JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.195.67.30

106.195.67.30 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Bharti Airtel Limited
Usage Type	Mobile ISP
ASN	AS45609
Domain Name	airtel.in
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.195.67.30

Whois 106.195.67.30

IP Abuse Reports for 106.195.67.30:

This IP address has been reported a total of 30 times from 22 distinct sources. 106.195.67.30 was first reported on July 18th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 debestelapp	2026-07-24 13:10:06 (16 hours ago)		Web App Attack
🇩🇪 LRob	2026-07-23 05:12:47 (2 days ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: WordPress.com; https:// ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: WordPress.com; https://wordpress.com show less	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-07-22 13:49:12 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 cwytech	2026-07-22 13:27:50 (2 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-22 09:02:39 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-07-22 06:32:06 (2 days ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 05:15:47 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 106.195.67.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 106.195.67.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 01:15:40.060639 2026] [security2:error] [pid 941325:tid 941339] [client 106.195.67.30:56235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.195.67.30 (+1 hits since last alert)\|executiveaccounting.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "executiveaccounting.net"] [uri "/xmlrpc.php"] [unique_id "amBR_EgEM2uKNvM77ZiQWwAAAMQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-07-21 12:10:11 (3 days ago)	Blocked by YFC Security on https://fencingforward.com — type: xmlrpc_attempts	Brute-Force Web App Attack
🇪🇸 SweetHoneyPress	2026-07-21 11:57:54 (3 days ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1077758 \| UA: Jetpack by WordPress.com	Web App Attack Brute-Force
🇪🇸 SweetHoneyPress	2026-07-21 11:42:46 (3 days ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1077673 \| UA: WordPress.com; https://wordpress.co ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=1077673 \| UA: WordPress.com; https://wordpress.com show less	Web App Attack Brute-Force
🇩🇪 konseptit	2026-07-21 11:40:24 (3 days ago)	(wordpress) Failed wordpress login from 106.195.67.30 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-21 10:51:59 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 106.195.67.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 106.195.67.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 06:51:53.930500 2026] [security2:error] [pid 7711:tid 7741] [client 106.195.67.30:58958] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.195.67.30 (+1 hits since last alert)\|dbestcarting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dbestcarting.com"] [uri "/xmlrpc.php"] [unique_id "al9PSVFUfE-tLiG7RUxqDwAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 06:54:30 (3 days ago)	[redacted] 106.195.67.30 - - [21/Jul/2026:08:53:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "J ... show more [redacted] 106.195.67.30 - - [21/Jul/2026:08:53:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 106.195.67.30 - - [21/Jul/2026:08:53:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" [redacted] 106.195.67.30 - - [21/Jul/2026:08:53:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 106.195.67.30 - - [21/Jul/2026:08:54:23 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" [redacted] 106.195.67.30 - - [21/Jul/2026:08:54:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 06:18:47 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 106.195.67.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 106.195.67.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 02:18:39.771962 2026] [security2:error] [pid 2891:tid 2891] [client 106.195.67.30:51616] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.195.67.30 (+1 hits since last alert)\|iplayriichi.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iplayriichi.com"] [uri "/xmlrpc.php"] [unique_id "al8PP2XozzPh3tNZJ9rv1gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Dolphi	2026-07-21 05:20:03 (3 days ago)	Excessive POST /xmlrpc.php requests	Brute-Force Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 206.189.39.63

🇺🇸 184.105.247.204

🇫🇷 173.212.230.208

🇺🇸 147.185.132.9

🇮🇳 103.21.55.206

🇳🇱 86.54.31.38

🇵🇹 85.240.193.104

🇮🇳 202.141.6.80

🇧🇪 198.235.24.235

🇳🇱 195.178.110.53

🇧🇷 191.210.73.33

🇨🇳 120.26.243.163

🇵🇱 91.196.110.170

🇳🇱 91.92.40.50

🇺🇸 66.132.172.252

🇨🇳 39.152.193.72

🇺🇸 20.75.217.68

🇵🇰 223.123.43.3

🇬🇧 193.163.125.15

🇳🇱 192.253.248.59