AbuseIPDB » 120.60.21.148
120.60.21.148
This IP was reported 8 times. Confidence of
Abuse
is 15% : ?
ISP
Mahanagar Telephone Nigam Limited
Usage Type
Fixed Line ISP
ASN
AS9829
Hostname(s)
triband-mum-120.60.21.148.mtnl.net.in
Domain Name
mtnl.net.in
Country
๐ฎ๐ณ
India
City
Turaiyur, Tamil Nadu
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 120.60.21.148 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
120.60.21.148 was first reported on
June 6th 2025 , and the most recent report was
15 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ซ๐ท
dynamix
2026-07-06 12:50:26
(15 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-06 10:20:14
(18 hours ago)
(mod_security) mod_security (id:240335) triggered by 120.60.21.148 (triband-mum-120.60.21.148.mtnl.n ...
show more
(mod_security) mod_security (id:240335) triggered by 120.60.21.148 (triband-mum-120.60.21.148.mtnl.net.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:20:06.399252 2026] [security2:error] [pid 18517:tid 18517] [client 120.60.21.148:55287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 120.60.21.148 (+1 hits since last alert)|egelfitness.nl|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "egelfitness.nl"] [uri "/xmlrpc.php"] [unique_id "akuBVj4gjLAgR1NFU1caVAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-06 08:15:57
(20 hours ago)
(mod_security) mod_security (id:240335) triggered by 120.60.21.148 (triband-mum-120.60.21.148.mtnl.n ...
show more
(mod_security) mod_security (id:240335) triggered by 120.60.21.148 (triband-mum-120.60.21.148.mtnl.net.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 04:15:51.715059 2026] [security2:error] [pid 25068:tid 25068] [client 120.60.21.148:240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 120.60.21.148 (+1 hits since last alert)|mjkhan.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mjkhan.com"] [uri "/xmlrpc.php"] [unique_id "aktkN6nZ6xq1-8y6TOHoHAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
MPL
2025-06-07 02:26:23
(1 year ago)
tcp/23
Port Scan
๐ท๐ด
Lungu Stefan Gabriel
2025-06-07 01:27:45
(1 year ago)
High number of requests detected from this IP: 1 requests in 1 seconds on port 23. Reason: 1 RPS รฎn ...
show more
High number of requests detected from this IP: 1 requests in 1 seconds on port 23. Reason: 1 RPS รฎn 1 secunde (depฤศit pragul burst) pe portul 23
show less
Port Scan
Brute-Force
IoT Targeted
๐บ๐ธ
sumnone
2025-06-06 18:33:17
(1 year ago)
Port probing on unauthorized port 23
Port Scan
Hacking
Exploited Host
๐บ๐ธ
cybsecaoccol
2025-06-06 07:18:35
(1 year ago)
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan
Hacking
2025-06-06 06:30:43
(1 year ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: