JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.161.170.206

122.161.170.206 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 62%: ?

62%

ISP	Bharti Airtel Ltd.,224, Okhla industrial Area Phase III New Delhi
Usage Type	Fixed Line ISP
ASN	AS24560
Hostname(s)	abts-north-dynamic-206.170.161.122.airtelbroadband.in
Domain Name	airtel.in
Country	🇮🇳 India
City	Kanpur, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.161.170.206

Whois 122.161.170.206

IP Abuse Reports for 122.161.170.206:

This IP address has been reported a total of 46 times from 19 distinct sources. 122.161.170.206 was first reported on May 26th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-10 13:20:09 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-10 10:51:45 (1 day ago)	(xmlrpc) Failed xmlrpc access from 122.161.170.206 (IN/India/abts-north-dynamic-206.170.161.122.airt ... show more (xmlrpc) Failed xmlrpc access from 122.161.170.206 (IN/India/abts-north-dynamic-206.170.161.122.airtelbroadband.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-10 10:47:53 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 06:47:49.582038 2026] [security2:error] [pid 7208:tid 7242] [client 122.161.170.206:33220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.170.206 (+1 hits since last alert)\|dasperformance.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dasperformance.com"] [uri "/xmlrpc.php"] [unique_id "alDN1bgKm4-64YUrsdlQCAAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 10:25:56 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 06:25:50.534036 2026] [security2:error] [pid 4850:tid 4850] [client 122.161.170.206:19042] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.170.206 (+1 hits since last alert)\|lgbtqhistoryinaustin.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lgbtqhistoryinaustin.org"] [uri "/xmlrpc.php"] [unique_id "alDIrmd1SsK9TClHQ_-8MwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-10 08:21:51 (1 day ago)	(PERMBLOCK) 122.161.170.206 (IN/India/abts-north-dynamic-206.170.161.122.airtelbroadband.in) has had ... show more (PERMBLOCK) 122.161.170.206 (IN/India/abts-north-dynamic-206.170.161.122.airtelbroadband.in) has had more than 4 temp blocks show less	Hacking
🇫🇷 dynamix	2026-07-10 07:03:53 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 06:48:24 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161 ... show more (mod_security) mod_security (id:225170) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 02:48:19.957298 2026] [security2:error] [pid 7793:tid 7793] [client 122.161.170.206:9655] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|enriquejezik.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enriquejezik.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alCVs8J7_RUJnY3cibXBhgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-09 13:59:49 (2 days ago)	(wordpress) Failed wordpress login from 122.161.170.206 (IN/India/abts-north-dynamic-206.170.161.122 ... show more (wordpress) Failed wordpress login from 122.161.170.206 (IN/India/abts-north-dynamic-206.170.161.122.airtelbroadband.in) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-09 11:28:33 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 07:28:26.136597 2026] [security2:error] [pid 14939:tid 14939] [client 122.161.170.206:8464] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.170.206 (+1 hits since last alert)\|nccb.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nccb.org"] [uri "/xmlrpc.php"] [unique_id "ak-F2oGiXpPSaRZ-P_2jKAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-08 22:25:59 (3 days ago)		Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-08 07:43:58 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 06:04:02 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 02:03:54.718094 2026] [security2:error] [pid 11542:tid 11542] [client 122.161.170.206:3145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.170.206 (+1 hits since last alert)\|freemanfoundationcle.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "freemanfoundationcle.org"] [uri "/xmlrpc.php"] [unique_id "ak3oSmTNj3RbOls1c7uJYwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 11:01:03 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.170.206 (abts-north-dynamic-206.170.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 07:00:56.150592 2026] [security2:error] [pid 22321:tid 22321] [client 122.161.170.206:2863] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.170.206 (+1 hits since last alert)\|cloudex.link\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cloudex.link"] [uri "/xmlrpc.php"] [unique_id "akzcaIRlV2907Zj8ICo0fAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Mario Bretscher	2026-06-03 04:27:53 (1 month ago)	Jun 3 06:27:34 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[2479796]: Authentication failure for ... show more Jun 3 06:27:34 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[2479796]: Authentication failure for admin from 122.161.170.206 Jun 3 06:27:51 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[2480681]: Authentication failure for admin from 122.161.170.206 ... show less	Web Spam
Anonymous	2026-06-02 13:59:15 (1 month ago)	122.161.170.206 - - [02/Jun/2026:15:58:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by ... show more 122.161.170.206 - - [02/Jun/2026:15:58:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 122.161.170.206 - - [02/Jun/2026:15:58:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 122.161.170.206 - - [02/Jun/2026:15:59:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" 122.161.170.206 - - [02/Jun/2026:15:59:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" 122.161.170.206 - - [02/Jun/2026:15:59:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.224

🇿🇦 102.129.61.161

🇨🇳 14.103.104.36

🇳🇱 193.176.31.229

🇺🇸 192.241.131.51

🇧🇷 177.27.76.210

🇨🇦 149.56.241.206

🇹🇷 131.222.253.87

🇮🇩 103.133.63.151

🇳🇱 91.92.40.45

🇷🇴 80.94.92.179

🇺🇸 66.132.195.122

🇬🇧 2.57.17.234

🇧🇷 205.210.31.183

🇪🇸 196.196.150.5

🇩🇪 194.88.98.124

🇳🇱 165.22.197.137

🇺🇸 162.216.150.167

🇺🇸 142.111.164.113

🇻🇳 116.96.46.48