JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.173.28.209

122.173.28.209 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 42%: ?

42%

ISP	Bharti Airtel Ltd, C-25,Phase-2,Industrial Area. Mohali(SAS Nagar) Punjab-160055 IN
Usage Type	Fixed Line ISP
ASN	AS24560
Hostname(s)	abts-north-dynamic-209.28.173.122.airtelbroadband.in
Domain Name	airtel.in
Country	🇮🇳 India
City	Hisar, Haryana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.173.28.209

Whois 122.173.28.209

IP Abuse Reports for 122.173.28.209:

This IP address has been reported a total of 9 times from 6 distinct sources. 122.173.28.209 was first reported on July 30th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-01 17:39:54 (13 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.173.28.209 (abts-north-dynamic-209.28.173.1 ... show more (mod_security) mod_security (id:240335) triggered by 122.173.28.209 (abts-north-dynamic-209.28.173.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:39:49.848574 2026] [security2:error] [pid 4189989:tid 4189989] [client 122.173.28.209:17156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.173.28.209 (+1 hits since last alert)\|jacquelineperriam.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jacquelineperriam.com"] [uri "/xmlrpc.php"] [unique_id "am4vZRJheHatzusbQJxwgwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-01 14:03:26 (17 hours ago)	(xmlrpc) Apache: Failed xmlrpc access from 122.173.28.209 (IN/India/abts-north-dynamic-209.28.173.12 ... show more (xmlrpc) Apache: Failed xmlrpc access from 122.173.28.209 (IN/India/abts-north-dynamic-209.28.173.122.airtelbroadband.in): 10 in the last 3600 secs (0-201) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-01 13:04:54 (18 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.173.28.209 (abts-north-dynamic-209.28.173.1 ... show more (mod_security) mod_security (id:240335) triggered by 122.173.28.209 (abts-north-dynamic-209.28.173.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:04:47.195122 2026] [security2:error] [pid 1997930:tid 1997930] [client 122.173.28.209:28025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.173.28.209 (+1 hits since last alert)\|calvarycavaliers.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "calvarycavaliers.org"] [uri "/xmlrpc.php"] [unique_id "am3u78F2t5NWXDocu1MXqQAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 10:58:49 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.173.28.209 (abts-north-dynamic-209.28.173.1 ... show more (mod_security) mod_security (id:240335) triggered by 122.173.28.209 (abts-north-dynamic-209.28.173.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 06:58:45.062867 2026] [security2:error] [pid 1821717:tid 1821717] [client 122.173.28.209:3432] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.173.28.209 (+1 hits since last alert)\|southernstatespool.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "southernstatespool.com"] [uri "/xmlrpc.php"] [unique_id "am3RZR1mdNOUeYnOEltKTAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 10:32:53 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 122.173.28.209 (abts-north-dynamic-209.28.173.1 ... show more (mod_security) mod_security (id:240335) triggered by 122.173.28.209 (abts-north-dynamic-209.28.173.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 06:32:48.346050 2026] [security2:error] [pid 4057048:tid 4057048] [client 122.173.28.209:11611] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.173.28.209 (+1 hits since last alert)\|cosplayculture.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cosplayculture.com"] [uri "/xmlrpc.php"] [unique_id "am3LUIgLw122rTvO7tBfIQAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-07-31 08:05:07 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 grassau.com	2026-07-31 07:46:17 (1 day ago)	(wordpress) Failed wordpress login from 122.173.28.209 (IN/India/Chandigarh/Chandigarh/abts-north-dy ... show more (wordpress) Failed wordpress login from 122.173.28.209 (IN/India/Chandigarh/Chandigarh/abts-north-dynamic-209.28.173.122.airtelbroadband.in) show less	Brute-Force
🇫🇷 dynamix	2026-07-30 17:28:38 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇪🇸 alferez	2026-07-30 15:15:20 (2 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.77

🇬🇹 168.227.22.122

🇺🇸 162.216.150.58

🇺🇸 64.62.197.52

🇺🇸 64.62.197.51

🇷🇴 2.57.122.209

🇺🇸 2a09:bac1:76a0:480::11:1c2

🇬🇧 2a06:4880:a000::bd

🇩🇪 2003:c1:5f02:2100:1cf3:c99e:544f:cf6f

🇷🇺 213.226.113.174

🇸🇬 213.35.127.232

🇬🇧 193.163.125.83

🇺🇸 184.105.139.76

🇬🇧 167.172.54.137

🇨🇳 115.204.1.250

🇺🇸 104.196.46.111

🇺🇸 64.62.197.49

🇺🇸 64.62.197.43

🇨🇳 60.176.110.174

🇳🇱 45.148.10.151