JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.215.144.146

106.215.144.146 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 41%: ?

41%

ISP	Bharti Airtel Limited
Usage Type	Fixed Line ISP
ASN	AS24560
Domain Name	airtel.in
Country	🇮🇳 India
City	Bhubaneswar, Odisha

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.215.144.146

Whois 106.215.144.146

IP Abuse Reports for 106.215.144.146:

This IP address has been reported a total of 12 times from 11 distinct sources. 106.215.144.146 was first reported on November 25th 2025, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IndigoRidge	2026-09-23 18:12:31 (19 hours ago)	106.215.144.146 - - [23/Sep/2026:14:09:50 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress ... show more 106.215.144.146 - - [23/Sep/2026:14:09:50 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress.com; https://wordpress.com" 106.215.144.146 - - [23/Sep/2026:14:10:32 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress.com; https://wordpress.com" 106.215.144.146 - - [23/Sep/2026:14:10:43 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress.com; https://wordpress.com" 106.215.144.146 - - [23/Sep/2026:14:11:26 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress.com; https://wordpress.com" 106.215.144.146 - - [23/Sep/2026:14:12:30 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇫🇷 dynamix	2026-09-23 12:33:54 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 dot.mg	2026-09-23 07:09:08 (1 day ago)	Abuse on login/xmlrpc	Brute-Force
Anonymous	2026-09-23 06:40:30 (1 day ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇸🇪 ljo	2026-09-23 06:07:55 (1 day ago)	106.215.144.146 - - [23/Sep/2026:08:06:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/1 ... show more 106.215.144.146 - - [23/Sep/2026:08:06:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/12.1; WordPress/6.4; http://site39461304.com" 106.215.144.146 - - [23/Sep/2026:08:06:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/12.0; WordPress/6.1; http://site53867401.com" 106.215.144.146 - - [23/Sep/2026:08:06:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/13.0; WordPress/6.1; http://site54275778.com" 106.215.144.146 - - [23/Sep/2026:08:06:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/13.0; WordPress/6.3; http://site81013293.com" 106.215.144.146 - - [23/Sep/2026:08:07:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack by WordPress.com" 106.215.144.146 - - [23/Sep/2026:08:07:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/12.0; WordPress/6.2; http://site65256490.com" 106.215.144.146 - - [23/Sep/2026:08:07:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "WordPress.com; https://wordpress.com" 106.215.144.146 - - [23/Sep/2 ... show less	Web App Attack
Anonymous	2026-09-22 23:29:19 (1 day ago)	[redacted] 106.215.144.146 - - [23/Sep/2026:01:28:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 106.215.144.146 - - [23/Sep/2026:01:28:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 106.215.144.146 - - [23/Sep/2026:01:28:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site85756827.com" [redacted] 106.215.144.146 - - [23/Sep/2026:01:28:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 106.215.144.146 - - [23/Sep/2026:01:29:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 106.215.144.146 - - [23/Sep/2026:01:29:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-14 17:54:57 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-07 17:35:47 (2 months ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?mode=grid&product_vc_type=97&q=ex+90&screensize=17%2C20%2C23%2C336 \| UA: Mozilla/5.0 (Linux; Android 2.2.2) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/31.0.842.0 Safari/532.1 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 10:54:57 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 106.215.144.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 106.215.144.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 06:54:52.124057 2026] [security2:error] [pid 14440:tid 14440] [client 106.215.144.146:26194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.215.144.146 (+1 hits since last alert)\|iplayriichi.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iplayriichi.com"] [uri "/xmlrpc.php"] [unique_id "aj0I_LmSvsuzMeVChwd54QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-06-25 09:49:43 (2 months ago)	(wordpress) Failed wordpress login from 106.215.144.146 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-25 09:22:37 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 106.215.144.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 106.215.144.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 05:22:33.423482 2026] [security2:error] [pid 16026:tid 16026] [client 106.215.144.146:13910] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.215.144.146 (+1 hits since last alert)\|truthsabouthealthcare.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "truthsabouthealthcare.com"] [uri "/xmlrpc.php"] [unique_id "ajzzWaH2PtiTEK2zv7Mx2gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-25 09:15:12 (9 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2400:cb00:555:1000:efc0:be7d:9a5:b29a

🇻🇳 103.159.51.70

🇮🇳 103.59.134.25

🇸🇬 85.203.21.81

🇺🇸 20.163.59.183

🇺🇸 195.184.76.200

🇺🇦 194.9.14.40

🇳🇱 185.242.226.61

🇵🇭 180.191.228.211

🇨🇱 172.217.39.168

🇫🇷 167.86.118.220

🇧🇩 103.238.114.61

🇮🇷 94.182.168.135

🇺🇸 40.76.176.35

🇭🇰 13.70.1.101

🇬🇧 5.226.140.116

🇮🇶 194.31.220.228

🇦🇷 186.183.102.103

🇺🇸 185.180.141.22

🇨🇳 116.172.201.25