JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.161.50.78

122.161.50.78 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 55%: ?

55%

ISP	Bharti Airtel Ltd.,224, Okhla industrial Area Phase III New Delhi
Usage Type	Fixed Line ISP
ASN	AS24560
Hostname(s)	abts-north-dynamic-078.50.161.122.airtelbroadband.in
Domain Name	airtel.in
Country	🇮🇳 India
City	Ghaziabad, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.161.50.78

Whois 122.161.50.78

IP Abuse Reports for 122.161.50.78:

This IP address has been reported a total of 24 times from 18 distinct sources. 122.161.50.78 was first reported on May 19th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rh24	2026-07-25 09:54:38 (1 day ago)	(xmlrpc_405) XMLRPC-Bot 405 122.161.50.78 (IN/India/abts-north-dynamic-078.50.161.122.airtelbroadban ... show more (xmlrpc_405) XMLRPC-Bot 405 122.161.50.78 (IN/India/abts-north-dynamic-078.50.161.122.airtelbroadband.in) show less	Hacking
Anonymous	2026-07-25 09:50:26 (1 day ago)	[redacted] 122.161.50.78 - - [25/Jul/2026:11:49:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 122.161.50.78 - - [25/Jul/2026:11:49:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 122.161.50.78 - - [25/Jul/2026:11:49:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 122.161.50.78 - - [25/Jul/2026:11:50:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site78436627.com" [redacted] 122.161.50.78 - - [25/Jul/2026:11:50:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 122.161.50.78 - - [25/Jul/2026:11:50:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 09:23:39 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.161.50.78 (abts-north-dynamic-078.50.161.12 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.50.78 (abts-north-dynamic-078.50.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:23:34.434737 2026] [security2:error] [pid 1230863:tid 1230863] [client 122.161.50.78:16145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.50.78 (+1 hits since last alert)\|fernfield.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fernfield.com"] [uri "/xmlrpc.php"] [unique_id "amSAln-ZhzUHhaZBSISGfgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-07-25 08:49:16 (1 day ago)	122.161.50.78 - - [25/Jul/2026:1 ...	Brute-Force
🇺🇸 TPI-Abuse	2026-07-25 08:13:37 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.161.50.78 (abts-north-dynamic-078.50.161.12 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.50.78 (abts-north-dynamic-078.50.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 04:13:31.592182 2026] [security2:error] [pid 51284:tid 51284] [client 122.161.50.78:17040] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.50.78 (+1 hits since last alert)\|assembliesofgodinsamoa.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "assembliesofgodinsamoa.org"] [uri "/xmlrpc.php"] [unique_id "amRwK3_U-YvgxEJc_1WhyAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 06:57:07 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.161.50.78 (abts-north-dynamic-078.50.161.12 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.50.78 (abts-north-dynamic-078.50.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:56:59.955739 2026] [security2:error] [pid 1281280:tid 1281280] [client 122.161.50.78:30853] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.50.78 (+1 hits since last alert)\|shannonraevocalstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shannonraevocalstudio.com"] [uri "/xmlrpc.php"] [unique_id "amReO4E1c_PS7qszIlxorAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-25 06:55:10 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-25 06:09:40 (1 day ago)	(xmlrpc) Failed xmlrpc access from 122.161.50.78 (IN/India/abts-north-dynamic-078.50.161.122.airtelb ... show more (xmlrpc) Failed xmlrpc access from 122.161.50.78 (IN/India/abts-north-dynamic-078.50.161.122.airtelbroadband.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-25 05:07:22 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 122.161.50.78 (abts-north-dynamic-078.50.161.12 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.50.78 (abts-north-dynamic-078.50.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 01:07:16.828313 2026] [security2:error] [pid 843837:tid 843837] [client 122.161.50.78:3678] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.50.78 (+1 hits since last alert)\|btccasting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "btccasting.com"] [uri "/xmlrpc.php"] [unique_id "amREhOkJ4IsXbUXGijCOLAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-22 07:30:44 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-15 13:10:19 (1 week ago)	ELEVATED_THREAT \| 518 IPs targeting /brand.html \| URL template shared by 233 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 518 IPs targeting /brand.html \| URL template shared by 233 IPs: /brand.html?bulb_shape_type=&bulb_shape=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.97, unique_ips=710) show less	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-07-12 11:13:16 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-10 12:09:06 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 quilla	2026-04-03 03:20:35 (3 months ago)	Botnet infected device observed in honeypot (Vector: TCP)	DDoS Attack
🇩🇪 marzzzello	2025-08-28 01:29:34 (10 months ago)	Ports: 15x 30266	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 165.227.129.146

🇳🇵 157.10.100.12

🇮🇳 125.19.182.118

🇮🇳 103.104.127.49

🇮🇶 80.76.50.249

🇩🇪 69.5.169.219

🇺🇸 54.152.39.42

🇳🇬 41.207.248.198

🇳🇱 195.178.110.137

🇮🇳 182.78.86.62

🇲🇽 177.225.75.138

🇺🇸 104.234.53.246

🇺🇸 104.28.33.46

🇮🇳 103.250.137.119

🇰🇷 103.86.47.31

🇱🇹 77.90.185.20

🇩🇪 64.89.163.146

🇩🇪 46.225.11.104

🇺🇸 20.163.14.222

🇺🇸 2605:a140:2304:2189::1