JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.56.160.139

120.56.160.139 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 54%: ?

54%

ISP	Mahanagar Telephone Nigam Limited
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	mtnl.net.in
Country	🇮🇳 India
City	Puducherry, Puducherry

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.56.160.139

Whois 120.56.160.139

IP Abuse Reports for 120.56.160.139:

This IP address has been reported a total of 15 times from 8 distinct sources. 120.56.160.139 was first reported on August 24th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Marc	2026-08-25 12:46:52 (1 day ago)	120.56.160.139 - - [25/Aug/2026:14:46:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4667 "-" "Jetpack/13 ... show more 120.56.160.139 - - [25/Aug/2026:14:46:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4667 "-" "Jetpack/13.0; WordPress/6.3; http://site69898861.com" 120.56.160.139 - - [25/Aug/2026:14:46:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4668 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" 120.56.160.139 - - [25/Aug/2026:14:46:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4668 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 09:16:15 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:16:07.128652 2026] [security2:error] [pid 13614:tid 13635] [client 120.56.160.139:58274] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.56.160.139 (+1 hits since last alert)\|atlasrecordssearch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "atlasrecordssearch.com"] [uri "/xmlrpc.php"] [unique_id "ao1dV9IFvid9bv5xxr6SfgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 06:59:53 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 02:59:48.045713 2026] [security2:error] [pid 24550:tid 24550] [client 120.56.160.139:58188] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.56.160.139 (+1 hits since last alert)\|reyadecostarica.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "reyadecostarica.com"] [uri "/xmlrpc.php"] [unique_id "ao09ZDDMAusmqCBB7SLH7AAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 03:56:02 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:55:55.578463 2026] [security2:error] [pid 14647:tid 14647] [client 120.56.160.139:55757] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.56.160.139 (+1 hits since last alert)\|ritterlien.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ritterlien.com"] [uri "/xmlrpc.php"] [unique_id "ao0SSzZKjunyw8Iuz61iawAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-08-25 02:43:06 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 02:29:01 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 22:28:55.860998 2026] [security2:error] [pid 2317:tid 2317] [client 120.56.160.139:50861] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.56.160.139 (+1 hits since last alert)\|michelehoop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michelehoop.com"] [uri "/xmlrpc.php"] [unique_id "aoz95_RzgpLZmEaPLbnm-gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 01:28:01 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 21:27:54.931263 2026] [security2:error] [pid 19366:tid 19366] [client 120.56.160.139:57202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.56.160.139 (+1 hits since last alert)\|lemoulinavent.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lemoulinavent.org"] [uri "/xmlrpc.php"] [unique_id "aozvmpZcdh6-fANJu0pETQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-24 22:08:30 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 20:35:37 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:35:29.418260 2026] [security2:error] [pid 2799:tid 2799] [client 120.56.160.139:52080] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.56.160.139 (+1 hits since last alert)\|bethanpearce.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bethanpearce.com"] [uri "/xmlrpc.php"] [unique_id "aoyrESPM4ROTVUCkbQ6tAgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-24 19:03:38 (2 days ago)	[redacted] 120.56.160.139 - - [24/Aug/2026:21:02:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 120.56.160.139 - - [24/Aug/2026:21:02:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 120.56.160.139 - - [24/Aug/2026:21:03:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 120.56.160.139 - - [24/Aug/2026:21:03:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 120.56.160.139 - - [24/Aug/2026:21:03:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site80344465.com" [redacted] 120.56.160.139 - - [24/Aug/2026:21:03:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-08-24 18:50:32 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 15:41:32 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.56.160.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 11:41:28.690109 2026] [security2:error] [pid 9006:tid 9006] [client 120.56.160.139:55147] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.56.160.139 (+1 hits since last alert)\|cbrtome.cl\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cbrtome.cl"] [uri "/xmlrpc.php"] [unique_id "aoxmKEqkpNqrJEYC3c-fDAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-08-24 14:05:05 (2 days ago)		Web App Attack
Anonymous	2026-08-24 13:52:54 (2 days ago)	[redacted] 120.56.160.139 - - [24/Aug/2026:15:52:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 120.56.160.139 - - [24/Aug/2026:15:52:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" [redacted] 120.56.160.139 - - [24/Aug/2026:15:52:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site19779248.com" [redacted] 120.56.160.139 - - [24/Aug/2026:15:52:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" [redacted] 120.56.160.139 - - [24/Aug/2026:15:52:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 120.56.160.139 - - [24/Aug/2026:15:52:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 integrantservices.com	2026-08-24 13:21:57 (2 days ago)	(wordpress) Failed wordpress login from 120.56.160.139 (IN/India/-)	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:7e01::2000:2cff:fe1c:8b6e

🇿🇦 102.217.242.136

🇺🇸 205.210.31.95

🇬🇧 193.163.125.203

🇪🇬 156.196.219.13

🇺🇸 147.185.132.27

🇺🇸 67.84.255.169

🇺🇸 66.132.172.157

🇺🇸 52.165.81.253

🇳🇱 195.178.110.30

🇲🇽 187.190.203.103

🇨🇳 120.48.76.190

🇮🇳 115.243.248.82

🇳🇱 92.112.127.220

🇺🇸 91.230.168.134

🇸🇬 34.96.48.113

🇨🇳 202.101.144.44

🇪🇹 196.191.212.112

🇨🇳 183.56.200.211

🇨🇳 175.19.75.133