JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.219.123.80

106.219.123.80 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 88%: ?

88%

ISP	Bharti Airtel Limited
Usage Type	Fixed Line ISP
ASN	AS24560
Domain Name	airtel.in
Country	🇮🇳 India
City	Delhi, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.219.123.80

Whois 106.219.123.80

IP Abuse Reports for 106.219.123.80:

This IP address has been reported a total of 43 times from 24 distinct sources. 106.219.123.80 was first reported on December 29th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-06-25 06:39:58 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 02:27:25 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 22:27:18.510045 2026] [security2:error] [pid 15328:tid 15328] [client 106.219.123.80:10777] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.123.80 (+1 hits since last alert)\|sutherlandyogastudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sutherlandyogastudio.com"] [uri "/xmlrpc.php"] [unique_id "ajySBtFm_02G69NPHMBNnQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 BlueStem123	2026-06-25 00:00:13 (1 week ago)	Automated scanner targeting WordPress installations. Source produced sustained scanning activity exc ... show more Automated scanner targeting WordPress installations. Source produced sustained scanning activity exceeding 100 requests within a 60-minute window. show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 23:43:38 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 19:43:30.363845 2026] [security2:error] [pid 29466:tid 29466] [client 106.219.123.80:11098] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.123.80 (+1 hits since last alert)\|shannonraevocalstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shannonraevocalstudio.com"] [uri "/xmlrpc.php"] [unique_id "ajxroiO4HJm8Q39uWX6Q2AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-24 21:49:19 (1 week ago)	Malware host detected by rbl.malware.expert. RBL lookup of 80.123.219.106.rbl.malware.expert succeed ... show more Malware host detected by rbl.malware.expert. RBL lookup of 80.123.219.106.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-1) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-24 21:15:46 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 17:15:41.387059 2026] [security2:error] [pid 31111:tid 31111] [client 106.219.123.80:5686] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.123.80 (+1 hits since last alert)\|caymancline.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "caymancline.com"] [uri "/xmlrpc.php"] [unique_id "ajxI_WyzaZ_QdmDOB_PaYwAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 20:16:23 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:16:20.576146 2026] [security2:error] [pid 16840:tid 16857] [client 106.219.123.80:24863] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.123.80 (+1 hits since last alert)\|hoffmanandassoc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hoffmanandassoc.com"] [uri "/xmlrpc.php"] [unique_id "ajw7FLtenvgRR1paNgBLIAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-24 19:15:40 (1 week ago)	WordPress Brute Force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-24 18:46:59 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 14:46:55.136348 2026] [security2:error] [pid 23908:tid 23908] [client 106.219.123.80:23144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.123.80 (+1 hits since last alert)\|celebritybikinigossip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "celebritybikinigossip.com"] [uri "/xmlrpc.php"] [unique_id "ajwmH-QLm_Wq9DWuhdcO9QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-24 17:05:19 (1 week ago)	106.219.123.80 - - [24/Jun/2026:19:04:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12. ... show more 106.219.123.80 - - [24/Jun/2026:19:04:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.5; WordPress/6.2; http://site86016406.com" 106.219.123.80 - - [24/Jun/2026:19:04:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.5; WordPress/6.2; http://site86016406.com" 106.219.123.80 - - [24/Jun/2026:19:05:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 106.219.123.80 - - [24/Jun/2026:19:05:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 106.219.123.80 - - [24/Jun/2026:19:05:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.1; WordPress/6.4; http://site46474943.com" ... show less	Brute-Force Web App Attack
🇬🇧 Apache	2026-06-24 15:34:52 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.219.123.80 (IN/India/-): 5 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 106.219.123.80 (IN/India/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 15:07:17 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 106.219.123.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 11:07:11.787657 2026] [security2:error] [pid 27425:tid 27425] [client 106.219.123.80:5920] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 106.219.123.80 (+1 hits since last alert)\|orcastrong.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "orcastrong.com"] [uri "/xmlrpc.php"] [unique_id "ajvyn-2qWkczwX3jzQyi2gAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-24 15:01:02 (1 week ago)	106.219.123.80 - - [24/Jun/2026:23:01:01 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/13. ... show more 106.219.123.80 - - [24/Jun/2026:23:01:01 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/13.0; WordPress/6.3; http://site43393804.com" ... show less	Bad Web Bot Web App Attack
🇫🇮 YF	2026-06-24 09:00:29 (1 week ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇳🇱 Site.eu	2026-06-24 06:51:16 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇳🇱 104.28.217.138

🇩🇪 212.227.209.221

🇧🇷 186.236.241.19

🇺🇸 172.253.210.30

🇹🇭 150.95.24.146

🇮🇳 103.196.29.240

🇩🇪 78.47.150.107

🇺🇸 66.132.186.208

🇸🇳 41.83.199.183

🇧🇪 35.195.97.12

🇹🇼 34.80.162.165

🇸🇬 20.212.215.182

🇺🇸 2600:3c00::2000:cff:fe82:54b5

🇺🇸 66.132.195.26

🇺🇸 65.49.1.78

🇹🇼 61.219.232.138

🇺🇸 47.153.104.207

🇨🇭 45.95.232.27

🇳🇱 192.42.116.107