JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 59.183.109.147

59.183.109.147 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 23%: ?

23%

ISP	Mahanagar Telephone Nigam Limited
Usage Type	Mobile ISP
ASN	AS9829
Hostname(s)	triband-mum-59.183.109.147.mtnl.net.in
Domain Name	mtnl.net.in
Country	🇮🇳 India
City	Ludhiana, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 59.183.109.147

Whois 59.183.109.147

IP Abuse Reports for 59.183.109.147:

This IP address has been reported a total of 14 times from 8 distinct sources. 59.183.109.147 was first reported on February 7th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-05 04:26:25 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 59.183.109.147 (triband-mum-59.183.109.147.mtnl ... show more (mod_security) mod_security (id:240335) triggered by 59.183.109.147 (triband-mum-59.183.109.147.mtnl.net.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 00:26:16.822790 2026] [security2:error] [pid 10700:tid 10700] [client 59.183.109.147:51279] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.183.109.147 (+1 hits since last alert)\|superzilla.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "superzilla.com"] [uri "/xmlrpc.php"] [unique_id "aiJP6LxAyyxTEzwRhkh_kAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-04 19:04:10 (2 weeks ago)	[redacted] 59.183.109.147 - - [04/Jun/2026:21:03:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 59.183.109.147 - - [04/Jun/2026:21:03:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" [redacted] 59.183.109.147 - - [04/Jun/2026:21:03:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 59.183.109.147 - - [04/Jun/2026:21:03:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 59.183.109.147 - - [04/Jun/2026:21:03:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" [redacted] 59.183.109.147 - - [04/Jun/2026:21:04:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 14:19:38 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 59.183.109.147 (triband-mum-59.183.109.147.mtnl ... show more (mod_security) mod_security (id:240335) triggered by 59.183.109.147 (triband-mum-59.183.109.147.mtnl.net.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 10:19:33.775368 2026] [security2:error] [pid 26392:tid 26519] [client 59.183.109.147:60669] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.183.109.147 (+1 hits since last alert)\|rawhabitat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rawhabitat.com"] [uri "/xmlrpc.php"] [unique_id "aiGJdU7otI96L_XP7hhrmQAAAdg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-04 13:49:28 (2 weeks ago)	[ns41.kdns.gr] httpd-xmlrpc-post: sites=medisto.gr; logs=/var/log/httpd/domains/medisto.gr.log; samp ... show more [ns41.kdns.gr] httpd-xmlrpc-post: sites=medisto.gr; logs=/var/log/httpd/domains/medisto.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-06-04 13:48:34 (2 weeks ago)	[redacted] 59.183.109.147 - - [04/Jun/2026:15:47:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ... show more [redacted] 59.183.109.147 - - [04/Jun/2026:15:47:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 59.183.109.147 - - [04/Jun/2026:15:47:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com" [redacted] 59.183.109.147 - - [04/Jun/2026:15:48:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/13.0; WordPress/6.1; http://site31058314.com" [redacted] 59.183.109.147 - - [04/Jun/2026:15:48:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.1; WordPress/6.2; http://site81777746.com" [redacted] 59.183.109.147 - - [04/Jun/2026:15:48:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" [redacted] 59.183.109.147 - - [04/Jun/2026:15:48:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 59.183.109.147 - - [04/Jun/2026:15:48:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 41 ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-06-04 13:23:07 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-02-05 04:50:34 (4 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2025-10-06 04:09:50 (8 months ago)	Blocked by UFW (TCP on 23) Source port: 47784 TTL: 49 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 47784 TTL: 49 Packet length: 40 TOS: 0x00 This report (for 59.183.109.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2025-10-06 04:03:07 (8 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2025-08-16 23:35:01 (10 months ago)	Blocked by cpGuard/ModSecurity WAF	Web App Attack
Anonymous	2025-08-11 02:29:35 (10 months ago)	Blocked by cpGuard/ModSecurity WAF	Web App Attack
🇹🇷 pamircil	2025-03-23 11:27:41 (1 year ago)	🍯 WinnieThePooh Honeypot : Detected (smbd/445) 💀	Port Scan Brute-Force Web App Attack
Anonymous	2025-03-17 09:35:23 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2025-02-07 10:31:39 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.172.177

🇺🇸 2607:f8b0:4004:1000::128

🇧🇷 205.210.31.208

🇳🇱 185.213.174.141

🇺🇸 44.245.225.29

🇨🇴 2001:4860:7:1206::f6

🇺🇦 176.109.10.49

🇦🇫 149.54.62.22

🇨🇳 121.228.126.172

🇨🇳 120.230.23.231

🇺🇸 45.79.207.129

🇬🇧 35.203.211.56

🇫🇷 5.135.4.149

🇬🇪 2.57.217.229

🇨🇳 223.89.221.191

🇺🇸 207.182.24.16

🇺🇸 147.185.132.171

🇹🇼 123.195.208.111

🇻🇳 123.17.250.222

🇮🇳 122.187.240.209