JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.161.53.30

122.161.53.30 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 41%: ?

41%

ISP	Bharti Airtel Ltd.,224, Okhla industrial Area Phase III New Delhi
Usage Type	Fixed Line ISP
ASN	AS24560
Hostname(s)	abts-north-dynamic-030.53.161.122.airtelbroadband.in
Domain Name	airtel.in
Country	🇮🇳 India
City	Ghaziabad, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.161.53.30

Whois 122.161.53.30

IP Abuse Reports for 122.161.53.30:

This IP address has been reported a total of 21 times from 17 distinct sources. 122.161.53.30 was first reported on September 28th 2021, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-22 11:30:08 (18 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 09:27:28 (21 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.161.53.30 (abts-north-dynamic-030.53.161.12 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.53.30 (abts-north-dynamic-030.53.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 05:27:23.138334 2026] [security2:error] [pid 1168083:tid 1168083] [client 122.161.53.30:8462] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.53.30 (+1 hits since last alert)\|peterndudar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "peterndudar.com"] [uri "/xmlrpc.php"] [unique_id "amCM-whWZAOS4pO7aJBjxAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 08:58:36 (21 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.161.53.30 (abts-north-dynamic-030.53.161.12 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.53.30 (abts-north-dynamic-030.53.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 04:58:28.861186 2026] [security2:error] [pid 5544:tid 5544] [client 122.161.53.30:27074] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.53.30 (+1 hits since last alert)\|seagrovesrealty.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seagrovesrealty.com"] [uri "/xmlrpc.php"] [unique_id "amCGNFmaO-lawflfN6Kn0QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 08:54:53 (21 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-07-22 08:43:59 (21 hours ago)	cloudlinux2 fail2ban: 2026-07-22 10:39:00,256 fail2ban.filter [1589]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-22 10:39:00,256 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 59.153.16.97 - 2026-07-22 10:39:00cloudlinux2 fail2ban: 2026-07-22 10:39:11,306 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 172.98.32.49 - 2026-07-22 10:39:10cloudlinux2 fail2ban: 2026-07-22 10:39:30,571 fail2ban.filter [1589]: INFO [recidive] Found 117.238.127.91 - 2026-07-22 10:39:30cloudlinux2 fail2ban: 2026-07-22 10:39:30,202 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 117.238.127.91 - 2026-07-22 10:39:30cloudlinux2 fail2ban: 2026-07-22 10:39:30,565 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Ban 117.238.127.91cloudlinux2 fail2ban: 2026-07-22 10:39:53,367 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 122.161.53.30 - 2026-07-22 10:39:53cloudlinux2 fail2ban: 2026-07-22 10:40:03,226 fail2ban.filter [1589]: INFO [recidive] Found 59.153.16.97 - 2026-07-22 10:40:03cloudlinux2 fail2ban: 2026-07-22 10:40: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 07:03:10 (23 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.161.53.30 (abts-north-dynamic-030.53.161.12 ... show more (mod_security) mod_security (id:240335) triggered by 122.161.53.30 (abts-north-dynamic-030.53.161.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 03:03:02.574146 2026] [security2:error] [pid 442350:tid 442350] [client 122.161.53.30:20649] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.161.53.30 (+1 hits since last alert)\|casadelsolmexico.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "casadelsolmexico.net"] [uri "/xmlrpc.php"] [unique_id "amBrJlMWYoWrNoEIPbp5rAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-07-22 05:23:32 (1 day ago)	(wordpress) Failed wordpress login from 122.161.53.30 (IN/India/abts-north-dynamic-030.53.161.122.ai ... show more (wordpress) Failed wordpress login from 122.161.53.30 (IN/India/abts-north-dynamic-030.53.161.122.airtelbroadband.in) show less	Brute-Force
🇩🇪 Vegascosmetics	2026-06-29 06:30:37 (3 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇳🇱 exxos	2025-08-08 17:06:03 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-08-05 22:03:01 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-08-05 21:28:04 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇺🇸 antbr.com	2025-08-05 20:21:23 (11 months ago)	AntBR.com: [Web Probe]==> /index2.php?page=tutors%27&p=9	Web App Attack
🇵🇹 Information Security	2025-08-05 19:03:41 (11 months ago)	Web App Attack	Web App Attack
🇧🇪 Ivo Vynckier	2025-04-10 17:31:00 (1 year ago)	122.161.53.30 - - [10/Apr/2025:08:45:53 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 ... show more 122.161.53.30 - - [10/Apr/2025:08:45:53 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 122.161.53.30 - - [10/Apr/2025:08:45:53 +0200] "GET /xmlrpc.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.110.223.224

🇵🇰 163.223.93.235

🇺🇸 159.65.164.114

🇺🇸 137.184.89.67

🇸🇬 47.82.14.241

🇺🇸 45.33.40.18

🇧🇷 187.49.20.146

🇪🇨 181.198.97.178

🇩🇪 167.94.146.77

🇺🇸 162.216.150.112

🇬🇧 139.59.163.248

🇷🇺 109.194.141.166

🇸🇬 47.82.51.109

🇸🇬 47.79.51.28

🇳🇱 45.148.10.152

🇯🇵 20.78.139.214

🇺🇸 205.210.31.93

🇹🇭 182.53.207.106

🇸🇪 171.25.158.58

🇺🇸 170.187.163.133