JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.219.120.145

106.219.120.145 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 96%: ?

96%

ISP	Bharti Airtel Limited
Usage Type	Fixed Line ISP
ASN	AS24560
Domain Name	airtel.in
Country	🇮🇳 India
City	Delhi, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.219.120.145

Whois 106.219.120.145

IP Abuse Reports for 106.219.120.145:

This IP address has been reported a total of 28 times from 19 distinct sources. 106.219.120.145 was first reported on September 12th 2024, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 integrantservices.com	2026-07-01 05:14:57 (12 hours ago)	(wordpress) Failed wordpress login from 106.219.120.145 (IN/India/-)	Brute-Force
🇫🇷 applemooz	2026-06-30 23:17:16 (18 hours ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 21:59:45 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 106.219.120.145 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 106.219.120.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 17:59:39.320268 2026] [security2:error] [pid 5479:tid 5479] [client 106.219.120.145:16789] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.120.145 (+1 hits since last alert)\|major33.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "major33.com"] [uri "/xmlrpc.php"] [unique_id "akQ8SwxN3re6e4F6sC9qLwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 20:58:09 (21 hours ago)	(mod_security) mod_security (id:240335) triggered by 106.219.120.145 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 106.219.120.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 16:58:06.182568 2026] [security2:error] [pid 20762:tid 20830] [client 106.219.120.145:30929] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.120.145 (+1 hits since last alert)\|luxury.management\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "luxury.management"] [uri "/xmlrpc.php"] [unique_id "akQt3kLoE3huM_tIHWFWkgAAAgI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 20:56:40 (21 hours ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-30 19:56:48 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 106.219.120.145 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 106.219.120.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 15:56:41.613287 2026] [security2:error] [pid 8873:tid 8873] [client 106.219.120.145:25594] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.120.145 (+1 hits since last alert)\|edmestonfd.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edmestonfd.com"] [uri "/xmlrpc.php"] [unique_id "akQfeeiR9pxzzAFP0cvKGgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-06-30 19:45:05 (22 hours ago)		Web App Attack
🇪🇸 masterguru	2026-06-30 17:31:39 (1 day ago)	(xmlrpc) Failed xmlrpc access from 106.219.120.145 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
🇫🇮 YF	2026-06-30 17:00:27 (1 day ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
Anonymous	2026-06-30 09:17:44 (1 day ago)	Fail2Ban WordPress login brute-force detected	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-06-30 09:17:10 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 dynamix	2026-06-30 06:11:47 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-06-30 04:41:10 (1 day ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2026-06-30 04:00:05 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-06-30 03:22:12 (1 day ago)	106.219.120.145 - - [30/Jun/2026:05:21:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "WordPress ... show more 106.219.120.145 - - [30/Jun/2026:05:21:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "WordPress.com; https://wordpress.com" 106.219.120.145 - - [30/Jun/2026:05:22:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 106.219.120.145 - - [30/Jun/2026:05:22:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com" show less	Hacking Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 212.47.72.232

🇧🇷 179.184.85.167

🇮🇶 159.255.160.4

🇨🇳 113.239.244.238

🇮🇳 103.25.47.94

🇨🇳 101.126.43.232

🇯🇵 101.33.55.172

🇳🇱 93.123.109.101

🇺🇸 74.125.113.146

🇸🇬 8.219.221.108

🇲🇩 217.156.65.251

🇲🇾 203.121.40.210

🇳🇱 195.178.110.227

🇧🇷 177.235.182.188

🇵🇱 176.53.159.197

🇻🇳 104.218.166.62

🇺🇸 64.62.156.122

🇭🇰 20.205.106.228

🇸🇬 8.219.137.119

🇹🇷 5.25.91.231