AbuseIPDB » 106.222.250.34
106.222.250.34 was found in our database!
This IP was reported 9 times. Confidence of
Abuse
is 35% : ?
ISP
Bharti Airtel Limited
Usage Type
Fixed Line ISP
ASN
AS24560
Domain Name
airtel.in
Country
๐ฎ๐ณ
India
City
Patna, Bihar
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 106.222.250.34 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
106.222.250.34 was first reported on
March 26th 2026 , and the most recent report was
1 week ago .
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฌ๐ง
Interceptor_HQ
2026-06-18 05:37:32
(1 week ago)
request_uri: / -- automatic report --
Brute-Force
Hacking
Anonymous
2026-06-09 09:02:08
(2 weeks ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
๐น๐ญ
thaizone.com
2026-06-09 08:13:22
(2 weeks ago)
Brute-forcing login against websites (D1-1) #1
Web App Attack
Hacking
๐ซ๐ท
SpaceHost-Server
2026-06-09 05:40:02
(2 weeks ago)
106.222.250.34 - - [09/Jun/2026:07:39:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack by ...
show more
106.222.250.34 - - [09/Jun/2026:07:39:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack by WordPress.com"
106.222.250.34 - - [09/Jun/2026:07:39:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack/12.1; WordPress/6.3; http://site12887488.com"
106.222.250.34 - - [09/Jun/2026:07:39:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack/13.0; WordPress/6.3; http://site79743502.com"
show less
Hacking
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-06-09 05:24:36
(2 weeks ago)
106.222.250.34 - - [09/Jun/2026:07:24:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack by ...
show more
106.222.250.34 - - [09/Jun/2026:07:24:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
106.222.250.34 - - [09/Jun/2026:07:24:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
106.222.250.34 - - [09/Jun/2026:07:24:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)"
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:56:00
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 106.222.250.34 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.222.250.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:55:52.396202 2026] [security2:error] [pid 5539:tid 5539] [client 106.222.250.34:31191] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.222.250.34 (+1 hits since last alert)|honigcpa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "honigcpa.com"] [uri "/xmlrpc.php"] [unique_id "aiec2Pmp4AgW_0aA_6L5cgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-09 02:45:06
(2 weeks ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-09 02:32:34
(2 weeks ago)
Try to access /xmlrpc.php
Web App Attack
๐ฎ๐น
A000Z
2026-03-26 02:47:46
(3 months ago)
Fail2Ban: 106.222.250.34 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ...
show more
Fail2Ban: 106.222.250.34 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
show less
Bad Web Bot
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: