JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.70.254.56

182.70.254.56 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 32%: ?

32%

ISP	Bharti Airtel Ltd, 1 Malviya Nagar Bhopal Madhya Pradesh 462003
Usage Type	Fixed Line ISP
ASN	AS24560
Hostname(s)	abts-mp-dynamic-056.254.70.182.airtelbroadband.in
Domain Name	airtel.in
Country	🇮🇳 India
City	Indore, Madhya Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.70.254.56

Whois 182.70.254.56

IP Abuse Reports for 182.70.254.56:

This IP address has been reported a total of 32 times from 20 distinct sources. 182.70.254.56 was first reported on April 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rh24	2026-06-15 06:00:18 (1 day ago)	(xmlrpc_405) XMLRPC-Bot 405 182.70.254.56 (IN/India/abts-mp-dynamic-056.254.70.182.airtelbroadband.i ... show more (xmlrpc_405) XMLRPC-Bot 405 182.70.254.56 (IN/India/abts-mp-dynamic-056.254.70.182.airtelbroadband.in) show less	Hacking
🇫🇷 Kenshin869	2026-06-15 05:29:32 (1 day ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-06-11 10:01:32 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.a ... show more (mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 06:01:24.369211 2026] [security2:error] [pid 26546:tid 26556] [client 182.70.254.56:62198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.70.254.56 (+1 hits since last alert)\|teritemme.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "teritemme.com"] [uri "/xmlrpc.php"] [unique_id "aiqHdGMWuVm3tuHSv7dEHwAAAMg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 06:03:40 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.a ... show more (mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:03:36.186606 2026] [security2:error] [pid 4047:tid 4047] [client 182.70.254.56:51049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.70.254.56 (+1 hits since last alert)\|pcga.golf\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pcga.golf"] [uri "/xmlrpc.php"] [unique_id "aipPuAVHA9TgKbl8jIpG7AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 antihack.anarchista.xyz	2026-06-11 06:00:44 (5 days ago)	Brute-force login: 5 fails in 10 min, last user "deska", URI /xmlrpc.php, UA WordPress.com; https:// ... show more Brute-force login: 5 fails in 10 min, last user "deska", URI /xmlrpc.php, UA WordPress.com; https://wordpress.com show less	Brute-Force Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-10 06:22:42 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.a ... show more (mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 02:22:35.543163 2026] [security2:error] [pid 4409:tid 4415] [client 182.70.254.56:64219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.70.254.56 (+1 hits since last alert)\|greencitymethods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greencitymethods.com"] [uri "/xmlrpc.php"] [unique_id "aikCq0CMeWRUf8lW4O1rRAAAAUQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 05:45:17 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.a ... show more (mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:45:11.016567 2026] [security2:error] [pid 14089:tid 14089] [client 182.70.254.56:53003] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.70.254.56 (+1 hits since last alert)\|oogeothermal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oogeothermal.com"] [uri "/xmlrpc.php"] [unique_id "aieoZ6BnKv2IhM6Dm_d0-gAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 07:36:16 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.a ... show more (mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:36:10.192907 2026] [security2:error] [pid 25709:tid 25709] [client 182.70.254.56:64037] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.70.254.56 (+1 hits since last alert)\|kh6jim.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kh6jim.com"] [uri "/xmlrpc.php"] [unique_id "aiZw6sOe6KifxmTECrRFoQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 QT	2026-04-18 07:38:46 (1 month ago)	Unauthorised WordPress admin login attempted at 2026-04-18 17:38:39 +1000	Web App Attack
🇺🇸 TPI-Abuse	2026-04-18 03:19:30 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.a ... show more (mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 23:19:26.139895 2026] [security2:error] [pid 1198969:tid 1198969] [client 182.70.254.56:49308] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.70.254.56 (+1 hits since last alert)\|lysedzija.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lysedzija.com"] [uri "/xmlrpc.php"] [unique_id "aeL4Ph8Utj_Wx94EUOHp1AAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 23:14:49 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.a ... show more (mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 19:14:41.128017 2026] [security2:error] [pid 3966283:tid 3966283] [client 182.70.254.56:54278] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.70.254.56 (+1 hits since last alert)\|acarsubscription.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "acarsubscription.com"] [uri "/xmlrpc.php"] [unique_id "aeK-4Vzg1oTeLCimDrTJRwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-04-17 20:27:51 (1 month ago)	(wordpress) Failed wordpress login from 182.70.254.56 (IN/India/abts-mp-dynamic-056.254.70.182.airte ... show more (wordpress) Failed wordpress login from 182.70.254.56 (IN/India/abts-mp-dynamic-056.254.70.182.airtelbroadband.in) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-17 17:49:50 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.a ... show more (mod_security) mod_security (id:240335) triggered by 182.70.254.56 (abts-mp-dynamic-056.254.70.182.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 13:49:43.783038 2026] [security2:error] [pid 1998405:tid 1998405] [client 182.70.254.56:61171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.70.254.56 (+1 hits since last alert)\|ssion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ssion.com"] [uri "/xmlrpc.php"] [unique_id "aeJyt_sS0g1euw_yEhWPkgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-04-17 17:23:13 (1 month ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 Mario Silber	2026-04-13 12:03:05 (2 months ago)	(wordpress) Failed wordpress login from 182.70.254.56 (IN/India/abts-mp-dynamic-056.254.70.182.airte ... show more (wordpress) Failed wordpress login from 182.70.254.56 (IN/India/abts-mp-dynamic-056.254.70.182.airtelbroadband.in) show less	Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 207.219.221.101

🇺🇸 191.96.150.250

🇮🇳 165.22.221.65

🇻🇪 154.194.13.95

🇺🇸 152.32.150.117

🇮🇳 103.248.120.6

🇷🇺 85.174.180.237

🇧🇷 45.164.251.106

🇩🇪 37.114.49.47

🇬🇧 35.203.211.160

🇹🇷 213.74.135.179

🇮🇳 168.144.127.145

🇻🇪 138.122.4.13

🇨🇳 118.196.56.74

🇨🇳 111.36.152.14

🇮🇩 103.157.48.80

🇱🇾 102.221.11.131

🇲🇦 102.103.173.224

🇫🇮 91.204.74.10

🇺🇸 89.208.245.72