AbuseIPDB » 122.173.27.201
122.173.27.201
This IP was reported 11 times. Confidence of
Abuse
is 26% : ?
ISP
Bharti Airtel Ltd, C-25,Phase-2,Industrial Area. Mohali(SAS Nagar) Punjab-160055 IN
Usage Type
Fixed Line ISP
ASN
AS24560
Hostname(s)
abts-north-dynamic-201.27.173.122.airtelbroadband.in
Domain Name
airtel.in
Country
🇮🇳
India
City
Delhi, Delhi
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 122.173.27.201 :
This IP address has been reported a total of
11
times from
10 distinct
sources.
122.173.27.201 was first reported on
August 16th 2021 , and the most recent report was
16 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-23 15:25:56
(16 hours ago)
(mod_security) mod_security (id:240335) triggered by 122.173.27.201 (abts-north-dynamic-201.27.173.1 ...
show more
(mod_security) mod_security (id:240335) triggered by 122.173.27.201 (abts-north-dynamic-201.27.173.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 11:25:53.244819 2026] [security2:error] [pid 23958:tid 23958] [client 122.173.27.201:21839] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 122.173.27.201 (+1 hits since last alert)|texascottagebakers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "texascottagebakers.com"] [uri "/xmlrpc.php"] [unique_id "ajqlgWbW3FILnQj8LmFpPAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 11:23:53
(20 hours ago)
(mod_security) mod_security (id:240335) triggered by 122.173.27.201 (abts-north-dynamic-201.27.173.1 ...
show more
(mod_security) mod_security (id:240335) triggered by 122.173.27.201 (abts-north-dynamic-201.27.173.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 07:23:48.183365 2026] [security2:error] [pid 15867:tid 15885] [client 122.173.27.201:15774] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 122.173.27.201 (+1 hits since last alert)|mtiminis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mtiminis.com"] [uri "/xmlrpc.php"] [unique_id "ajpsxBqNVW4_oLZ1Yq0I6QAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
stefaniak41500
2026-06-22 09:16:38
(1 day ago)
Shield Guard: Scanner: wordpress.com (+55) | xmlrpc.php bloqué
Web App Attack
Port Scan
2026-06-22 06:28:54
(2 days ago)
(wordpress) Failed wordpress login from 122.173.27.201 (IN/India/abts-north-dynamic-201.27.173.122.a ...
show more
(wordpress) Failed wordpress login from 122.173.27.201 (IN/India/abts-north-dynamic-201.27.173.122.airtelbroadband.in)
show less
Brute-Force
🇩🇪
SMARTNET
2026-05-27 06:03:53
(4 weeks ago)
Aisuru(Mirai variant) DDoS | Incident ID: 0a9278f2-ffb8-4472-8b4f-87e634c16433
DDoS Attack
🇩🇪
kalof
2025-07-24 09:47:41
(10 months ago)
ports, 445/24H:1/7D:2
Port Scan
🇩🇪
Beta
2025-07-22 09:56:34
(11 months ago)
ports, 445/24H:1/7D:1
Port Scan
🇳🇱
Study Bitcoin 🤗
2025-07-22 09:48:37
(11 months ago)
Port probe to tcp/445 (smb)
[srv130]
Port Scan
Hacking
🇬🇧
Birdo
2025-07-22 05:59:42
(11 months ago)
[Birdo SMB Honeypot] SMB unauthorized attempt
Port Scan
Hacking
Brute-Force
Exploited Host
🇺🇸
nationaleventpros.com
2024-07-16 10:32:13
(1 year ago)
WordPress login attempt
Brute-Force
🇬🇧
Delta Whiskey
2021-08-16 14:05:01
(4 years ago)
Multiple failed WordPress authentication attempts
Brute-Force
Web App Attack
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: