AbuseIPDB » 122.172.84.139
122.172.84.139
This IP was reported 9 times. Confidence of
Abuse
is 37% : ?
ISP
ABTS (Karnataka),
Usage Type
Fixed Line ISP
ASN
AS24560
Hostname(s)
abts-kk-dynamic-139.84.172.122.airtelbroadband.in
Domain Name
airtel.in
Country
🇮🇳
India
City
Bengaluru, Karnataka
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 122.172.84.139 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
122.172.84.139 was first reported on
July 3rd 2024 , and the most recent report was
3 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-14 15:44:22
(3 hours ago)
(mod_security) mod_security (id:240335) triggered by 122.172.84.139 (abts-kk-dynamic-139.84.172.122. ...
show more
(mod_security) mod_security (id:240335) triggered by 122.172.84.139 (abts-kk-dynamic-139.84.172.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 11:44:17.806031 2026] [security2:error] [pid 9121:tid 9121] [client 122.172.84.139:6534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 122.172.84.139 (+1 hits since last alert)|arsenalfordemocracy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "arsenalfordemocracy.com"] [uri "/xmlrpc.php"] [unique_id "alZZUc7yR6_qW6IUy2IS0wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-07-14 15:00:06
(4 hours ago)
Web App Attack
🇺🇸
integrantservices.com
2026-07-14 14:09:21
(5 hours ago)
(wordpress) Failed wordpress login from 122.172.84.139 (IN/India/abts-kk-dynamic-139.84.172.122.airt ...
show more
(wordpress) Failed wordpress login from 122.172.84.139 (IN/India/abts-kk-dynamic-139.84.172.122.airtelbroadband.in)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-14 13:41:28
(5 hours ago)
(mod_security) mod_security (id:240335) triggered by 122.172.84.139 (abts-kk-dynamic-139.84.172.122. ...
show more
(mod_security) mod_security (id:240335) triggered by 122.172.84.139 (abts-kk-dynamic-139.84.172.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 09:41:24.686753 2026] [security2:error] [pid 17075:tid 17086] [client 122.172.84.139:28025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 122.172.84.139 (+1 hits since last alert)|leaderoftheopposition.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "leaderoftheopposition.com"] [uri "/xmlrpc.php"] [unique_id "alY8hLRKrLTPZR30K_de6wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
KnightIndustries
2026-07-14 13:37:49
(5 hours ago)
2026-07-14T15:37:27.266173+02:00 milkyway wordpress(learncryptography.pw)[3375777]: XML-RPC authenti ...
show more
2026-07-14T15:37:27.266173+02:00 milkyway wordpress(learncryptography.pw)[3375777]: XML-RPC authentication failure for mystic from 122.172.84.139
2026-07-14T15:37:37.879613+02:00 milkyway wordpress(learncryptography.pw)[3383173]: XML-RPC authentication failure for mystic from 122.172.84.139
2026-07-14T15:37:48.490510+02:00 milkyway wordpress(learncryptography.pw)[3394839]: XML-RPC authentication failure for mystic from 122.172.84.139
...
show less
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-07-14 11:15:47
(8 hours ago)
(xmlrpc) Failed xmlrpc access from 122.172.84.139 (IN/India/abts-kk-dynamic-139.84.172.122.airtelbro ...
show more
(xmlrpc) Failed xmlrpc access from 122.172.84.139 (IN/India/abts-kk-dynamic-139.84.172.122.airtelbroadband.in): 5 in the last 3600 secs (0-122)
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-14 11:15:08
(8 hours ago)
(mod_security) mod_security (id:240335) triggered by 122.172.84.139 (abts-kk-dynamic-139.84.172.122. ...
show more
(mod_security) mod_security (id:240335) triggered by 122.172.84.139 (abts-kk-dynamic-139.84.172.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 07:14:55.904402 2026] [security2:error] [pid 10692:tid 10692] [client 122.172.84.139:3521] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 122.172.84.139 (+1 hits since last alert)|iplayriichi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iplayriichi.com"] [uri "/xmlrpc.php"] [unique_id "alYaL4-tbDPf3S4I0oToowAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
unhfree.net
2024-07-03 17:16:12
(2 years ago)
Jul 3 17:14:49 canopus postfix/smtpd[340315]: NOQUEUE: reject: RCPT from unknown[122.172.84.139]: 5 ...
show more
Jul 3 17:14:49 canopus postfix/smtpd[340315]: NOQUEUE: reject: RCPT from unknown[122.172.84.139]: 554 5.7.1 <[email protected] >: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<server20044.defaulthost.net.>
Jul 3 17:21:27 canopus postfix/smtpd[340315]: NOQUEUE: reject: RCPT from unknown[122.172.84.139]: 554 5.7.1 <[email protected] >: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<server20044.defaulthost.net.>
Jul 3 18:03:17 canopus postfix/smtpd[345525]: NOQUEUE: reject: RCPT from unknown[122.172.84.139]: 554 5.7.1 <[email protected] >: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<server20044.defaulthost.net.>
Jul 3 18:09:46 canopus postfix/smtpd[346488]:
...
show less
Brute-Force
Exploited Host
🇺🇸
hostseries
2024-07-03 16:06:52
(2 years ago)
Trigger: LF_DISTATTACK
Brute-Force
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: