JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.176.223.55

122.176.223.55

Activity Trending Down

89 reports found in our database

2% ▼ ▼ ▼ Caution

Abuse confidence score ?

ISP

BHARTI TELENET LTD. NEW DELHI

Usage Type

Fixed Line ISP

ASN

AS24560

Hostname(s)

abts-north-dynamic-055.223.176.122.airtelbroadband.in

Domain Name

airtel.in

Country

🇮🇳 India

City

Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 122.176.223.55:

This IP address has been reported a total of 89 times from 40 distinct sources. 122.176.223.55 was first reported on March 25th 2026, and the most recent report was 1 week ago. In the last 60 days, the only reporter location was: Brazil with 1 report. The most common categories in these recent reports were: DDoS Attack 1 time; Exploited Host 1 time; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-08-31 22:06:56 (1 week ago)	ICS Labs identified 122.176.223.55 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇩🇪 rh24	2026-06-26 08:15:29 (2 months ago)	(xmlrpc_405) XMLRPC-Bot 405 122.176.223.55 (IN/India/abts-north-dynamic-055.223.176.122.airtelbroadb ... show more (xmlrpc_405) XMLRPC-Bot 405 122.176.223.55 (IN/India/abts-north-dynamic-055.223.176.122.airtelbroadband.in) show less	Hacking
🇺🇸 TAY	2026-06-26 06:11:26 (2 months ago)	122.176.223.55 - - [26/Jun/2026:14:10:53 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack by ... show more 122.176.223.55 - - [26/Jun/2026:14:10:53 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" 122.176.223.55 - - [26/Jun/2026:14:11:05 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" 122.176.223.55 - - [26/Jun/2026:14:11:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack by WordPress.com" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-26 05:45:06 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176. ... show more (mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 01:44:57.235643 2026] [security2:error] [pid 22700:tid 22774] [client 122.176.223.55:57343] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.176.223.55 (+1 hits since last alert)\|tradersofficepark.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tradersofficepark.com"] [uri "/xmlrpc.php"] [unique_id "aj4R2WgapHLRptWI1WNRZwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 13:05:46 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176. ... show more (mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 09:05:42.223525 2026] [security2:error] [pid 536:tid 536] [client 122.176.223.55:62734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.176.223.55 (+1 hits since last alert)\|limeroc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "limeroc.com"] [uri "/xmlrpc.php"] [unique_id "aj0nppQDFYft-tJquug8PAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 12:32:19 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176. ... show more (mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 08:32:11.234416 2026] [security2:error] [pid 23155:tid 23155] [client 122.176.223.55:63981] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.176.223.55 (+1 hits since last alert)\|pondplain.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pondplain.org"] [uri "/xmlrpc.php"] [unique_id "aj0fy-2JpdndkEMmi1ZiYQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-25 12:30:06 (2 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-06-25 08:23:28 (2 months ago)	(wordpress) Failed wordpress login from 122.176.223.55 (IN/India/abts-north-dynamic-055.223.176.122. ... show more (wordpress) Failed wordpress login from 122.176.223.55 (IN/India/abts-north-dynamic-055.223.176.122.airtelbroadband.in) show less	Brute-Force
🇩🇪 abdubhai	2026-06-25 07:46:46 (2 months ago)	122.176.223.55 - - [25/Jun/2026: ...	Brute-Force
🇺🇸 Jason Howell	2026-06-25 06:50:27 (2 months ago)	122.176.223.55 - - [25/Jun/2026:01:38:07 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4722 "-" "Jetpack by ... show more 122.176.223.55 - - [25/Jun/2026:01:38:07 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4722 "-" "Jetpack by WordPress.com" 122.176.223.55 - - [25/Jun/2026:01:40:15 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4722 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 122.176.223.55 - - [25/Jun/2026:01:47:48 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3699 "-" "WordPress.com; https://wordpress.com" 122.176.223.55 - - [25/Jun/2026:01:47:53 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4721 "-" "Jetpack by WordPress.com" 122.176.223.55 - - [25/Jun/2026:01:50:26 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4720 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 11:25:54 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176. ... show more (mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 07:25:47.494037 2026] [security2:error] [pid 9906:tid 9906] [client 122.176.223.55:62067] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.176.223.55 (+1 hits since last alert)\|yerevanpress.am\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yerevanpress.am"] [uri "/xmlrpc.php"] [unique_id "aju-u9xSU_1uieByr4bE8AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-24 10:28:40 (2 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-06-24 08:26:09 (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-24 06:25:50 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176. ... show more (mod_security) mod_security (id:240335) triggered by 122.176.223.55 (abts-north-dynamic-055.223.176.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 02:25:44.287648 2026] [security2:error] [pid 10766:tid 10766] [client 122.176.223.55:62386] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 122.176.223.55 (+1 hits since last alert)\|lgbtqhistoryinaustin.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lgbtqhistoryinaustin.org"] [uri "/xmlrpc.php"] [unique_id "ajt4aGOPDMs83qDkDX0u0AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 ICS Labs	2026-06-04 17:43:37 (3 months ago)	ICS Labs identified 122.176.223.55 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 91.196.111.8

🇳🇱 77.239.124.121

🇺🇸 73.149.100.24

🇩🇿 41.111.198.172

🇰🇷 34.50.5.208

🇺🇸 34.23.65.22

🇨🇳 1.80.0.131

🇨🇳 223.70.85.164

🇭🇰 199.45.154.119

🇭🇰 199.45.154.50

🇪🇬 197.43.253.71

🇩🇪 185.220.101.171

🇺🇸 173.239.214.184

🇨🇳 125.69.76.148

🇮🇳 125.20.60.69

🇺🇿 109.94.173.183

🇧🇩 103.52.140.67

🇲🇦 102.54.246.130

🇫🇷 88.163.32.140

🇬🇧 35.203.211.78