JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.161.48.101

122.161.48.101 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 42%: ?

42%

ISP	Bharti Airtel Ltd.,224, Okhla industrial Area Phase III New Delhi
Usage Type	Fixed Line ISP
ASN	AS24560
Hostname(s)	abts-north-dynamic-101.48.161.122.airtelbroadband.in
Domain Name	airtel.in
Country	🇮🇳 India
City	Greater Noida, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.161.48.101

Whois 122.161.48.101

IP Abuse Reports for 122.161.48.101:

This IP address has been reported a total of 13 times from 10 distinct sources. 122.161.48.101 was first reported on September 11th 2021, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-15 10:18:52 (5 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.161.48.101 (abts-north-dynamic-101.48.161.1 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.48.101 (abts-north-dynamic-101.48.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 06:18:43.721675 2026] [security2:error] [pid 8054:tid 8054] [client 122.161.48.101:17485] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.48.101 (+1 hits since last alert)\|kdgsf.xyz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kdgsf.xyz"] [uri "/xmlrpc.php"] [unique_id "aldeg6mDXqSuB8FS44j8UAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-15 08:21:12 (7 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-15 08:21:05 (7 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-07-15 08:09:08 (7 hours ago)	122.161.48.101 - - [15/Jul/2026:04:07:11 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress. ... show more 122.161.48.101 - - [15/Jul/2026:04:07:11 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 122.161.48.101 - - [15/Jul/2026:04:07:21 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 122.161.48.101 - - [15/Jul/2026:04:08:14 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 122.161.48.101 - - [15/Jul/2026:04:08:57 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 122.161.48.101 - - [15/Jul/2026:04:09:07 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 06:45:55 (9 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.161.48.101 (abts-north-dynamic-101.48.161.1 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.48.101 (abts-north-dynamic-101.48.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 02:45:50.515228 2026] [security2:error] [pid 29987:tid 29987] [client 122.161.48.101:15956] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.48.101 (+1 hits since last alert)\|nebraskaadaptivesports.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nebraskaadaptivesports.org"] [uri "/xmlrpc.php"] [unique_id "alcsng4WfkVQ_O250CBzmgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2026-07-15 06:35:37 (9 hours ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 08:15:30 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.161.48.101 (abts-north-dynamic-101.48.161.1 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.48.101 (abts-north-dynamic-101.48.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 04:15:26.517821 2026] [security2:error] [pid 6404:tid 6404] [client 122.161.48.101:18014] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.48.101 (+1 hits since last alert)\|varnadorefamily.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "varnadorefamily.com"] [uri "/xmlrpc.php"] [unique_id "alXwHjWYVdnQWKCjW4VRcwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 05:37:32 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.161.48.101 (abts-north-dynamic-101.48.161.1 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.48.101 (abts-north-dynamic-101.48.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 01:37:25.377170 2026] [security2:error] [pid 14666:tid 14666] [client 122.161.48.101:1491] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.48.101 (+1 hits since last alert)\|georgesmarina.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "georgesmarina.com"] [uri "/xmlrpc.php"] [unique_id "alXLFRHgHcHvuPtyKxOmKwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 05:04:08 (1 day ago)	WordPress Brute Force	Brute-Force
🇷🇴 INTEQ	2024-12-25 00:15:29 (1 year ago)	SPAM from 122.161.48.101	Email Spam
🇩🇪 ⓔⓜⓙⓔⓔ	2024-07-08 13:04:05 (2 years ago)	SMB 🖴 Honeypot: connected to port 445 by 122.161.48.101: port 9304	Port Scan
🇩🇪 IP Analyzer	2022-12-19 16:30:20 (3 years ago)	Unauthorized connection attempt from IP address 122.161.48.101 on Port 445(SMB)	Port Scan
🇩🇪 creoline GmbH	2021-09-11 12:11:05 (4 years ago)	E-Mail Spam (RBL) [T613CEE23L00000001]	Email Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 163.7.1.156

🇨🇳 123.118.230.64

🇰🇷 121.151.188.210

🇸🇬 101.47.18.50

🇯🇵 52.253.111.48

🇳🇱 45.153.34.167

🇯🇵 40.81.194.185

🇺🇸 20.106.213.99

🇺🇸 18.219.14.0

🇺🇸 2607:f8b0:4001:c17::123

🇰🇷 218.156.93.203

🇧🇷 205.210.31.234

🇪🇸 196.196.150.124

🇺🇸 172.214.209.153

🇹🇼 111.70.38.54

🇮🇪 108.132.209.190

🇺🇸 66.132.224.25

🇨🇱 45.166.147.237

🇺🇸 34.16.204.46

🇵🇱 176.53.159.197