JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.213.83.247

106.213.83.247 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 44%: ?

44%

ISP	Bharti Airtel Limited
Usage Type	Fixed Line ISP
ASN	AS24560
Domain Name	airtel.in
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.213.83.247

Whois 106.213.83.247

IP Abuse Reports for 106.213.83.247:

This IP address has been reported a total of 12 times from 8 distinct sources. 106.213.83.247 was first reported on August 20th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-26 18:30:06 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-22 12:08:46 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 08:08:37.822939 2026] [security2:error] [pid 10443:tid 10443] [client 106.213.83.247:1803] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.213.83.247 (+1 hits since last alert)\|williamfitzsimmons.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "williamfitzsimmons.com"] [uri "/xmlrpc.php"] [unique_id "aomRReLKvQn1RYNbV9EaMwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-08-22 10:32:50 (1 week ago)	Blocked by YFC Security on https://parcl9.com — type: xmlrpc_attempts	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 07:31:04 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 03:30:59.998709 2026] [security2:error] [pid 21507:tid 21507] [client 106.213.83.247:11560] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.213.83.247 (+1 hits since last alert)\|modmove.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "modmove.com"] [uri "/xmlrpc.php"] [unique_id "aolQM30MMdKUWG1VGHXumAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 07:00:13 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 03:00:07.039173 2026] [security2:error] [pid 6405:tid 6405] [client 106.213.83.247:13849] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.213.83.247 (+1 hits since last alert)\|flatchestedmama.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "flatchestedmama.com"] [uri "/xmlrpc.php"] [unique_id "aolI96N916ymNKXbLjIlvQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:27:03 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:26:58.165730 2026] [security2:error] [pid 2317:tid 2317] [client 106.213.83.247:20606] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.213.83.247 (+1 hits since last alert)\|darkalleyproductions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darkalleyproductions.com"] [uri "/xmlrpc.php"] [unique_id "aokzIpCq5LADoSkYVDFOxAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 03:55:19 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.213.83.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 23:55:15.782948 2026] [security2:error] [pid 2564:tid 2564] [client 106.213.83.247:17812] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.213.83.247 (+1 hits since last alert)\|lambert-heating-and-air.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lambert-heating-and-air.com"] [uri "/xmlrpc.php"] [unique_id "aokdo0anjklAGPQNf_G7NQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 konseptit	2026-08-22 03:54:49 (1 week ago)	(wordpress) Failed wordpress login from 106.213.83.247 (IN/India/-)	Brute-Force
🇺🇸 Lee Daniel	2026-08-21 11:54:25 (1 week ago)	[21/Aug/2026:07:54:04.005906 --0400] aog8WynI5r9xiwe6ReNf2gAAABM 106.213.83.247 43970 127.0.0.1 7081 ... show more [21/Aug/2026:07:54:04.005906 --0400] aog8WynI5r9xiwe6ReNf2gAAABM 106.213.83.247 43970 127.0.0.1 7081 [21/Aug/2026:07:54:11.874795 --0400] aog8Y5tBXP-t-77eYH7AXAAAAQM 106.213.83.247 51028 127.0.0.1 7081 [21/Aug/2026:07:54:14.631779 --0400] aog8ZinI5r9xiwe6ReNf9QAAAA8 106.213.83.247 51198 127.0.0.1 7081 [21/Aug/2026:07:54:22.482222 --0400] aog8bvn@0F-egkXXeBFmGQAAAEc 106.213.83.247 35358 127.0.0.1 7081 [21/Aug/2026:07:54:25.204839 --0400] aog8cfn@0F-egkXXeBFmIQAAAFg 106.213.83.247 35470 127.0.0.1 7081 ... show less	DDoS Attack Brute-Force
🇸🇪 ljo	2026-08-21 07:38:20 (1 week ago)	106.213.83.247 - - [21/Aug/2026:09:36:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5636 "-" "Jetpack by ... show more 106.213.83.247 - - [21/Aug/2026:09:36:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5636 "-" "Jetpack by WordPress.com" 106.213.83.247 - - [21/Aug/2026:09:36:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5636 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 106.213.83.247 - - [21/Aug/2026:09:37:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5636 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 106.213.83.247 - - [21/Aug/2026:09:37:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5636 "-" "WordPress.com; https://wordpress.com" 106.213.83.247 - - [21/Aug/2026:09:37:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5636 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" 106.213.83.247 - - [21/Aug/2026:09:37:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5636 "-" "WordPress.com; https://wordpress.com" 106.213.83.247 - - [21/Aug/2026:09:37:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5636 "-" "WordPress.com; https://wordpress.com" 106.213.83.247 - - [21/Aug/2026:09:37:57 +0200] "POST /xmlrpc. ... show less	Web App Attack
🇳🇱 ConsulHosting	2026-08-21 03:37:56 (1 week ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 dbmwebdesign	2026-08-20 13:00:05 (1 week ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 198.245.50.115

🇨🇴 181.48.176.138

🇺🇸 2604:a880:400:d1:0:4:dec1:9001

🇮🇳 210.18.182.230

🇨🇳 58.221.60.25

🇮🇳 49.206.58.181

🇨🇳 42.101.43.119

🇨🇳 42.51.37.71

🇺🇸 2607:f8b0:4001:c7b::129

🇦🇷 200.59.83.65

🇩🇪 185.242.3.226

🇺🇸 143.42.1.53

🇺🇸 104.207.39.59

🇱🇹 62.60.130.201

🇪🇪 31.56.187.12

🇺🇸 207.90.244.28

🇧🇷 186.248.164.70

🇺🇸 162.241.230.122

🇭🇰 156.225.1.92

🇪🇬 154.178.240.29