JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 59.98.126.104

59.98.126.104 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 55%: ?

55%

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL Bangalore
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.in
Country	🇮🇳 India
City	Tirunelveli, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 59.98.126.104

Whois 59.98.126.104

IP Abuse Reports for 59.98.126.104:

This IP address has been reported a total of 18 times from 13 distinct sources. 59.98.126.104 was first reported on April 9th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-24 11:24:27 (8 hours ago)	(mod_security) mod_security (id:240335) triggered by 59.98.126.104 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 59.98.126.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:24:18.767765 2026] [security2:error] [pid 3808232:tid 3808332] [client 59.98.126.104:52031] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.98.126.104 (+1 hits since last alert)\|bortec-corp.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bortec-corp.com"] [uri "/xmlrpc.php"] [unique_id "amNLYooEHmBUfe0z-dsV1AAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-24 10:35:21 (9 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-24 09:43:14 (10 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
Anonymous	2026-07-24 08:41:23 (11 hours ago)	[redacted] 59.98.126.104 - - [24/Jul/2026:10:40:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 59.98.126.104 - - [24/Jul/2026:10:40:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 59.98.126.104 - - [24/Jul/2026:10:40:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 59.98.126.104 - - [24/Jul/2026:10:40:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site84760029.com" [redacted] 59.98.126.104 - - [24/Jul/2026:10:41:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" [redacted] 59.98.126.104 - - [24/Jul/2026:10:41:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" ... show less	Hacking Web App Attack
Anonymous	2026-07-24 08:37:47 (11 hours ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=www.inieek.gr; logs=/var/log/httpd/domains/inieek.gr.log; s ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=www.inieek.gr; logs=/var/log/httpd/domains/inieek.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-24 08:36:48 (11 hours ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇱🇻 garmtech.com	2026-07-24 08:19:08 (11 hours ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 08:14:06 (11 hours ago)	(mod_security) mod_security (id:240335) triggered by 59.98.126.104 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 59.98.126.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:14:01.872997 2026] [security2:error] [pid 1986010:tid 1986010] [client 59.98.126.104:58544] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.98.126.104 (+1 hits since last alert)\|assembliesofgodinsamoa.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "assembliesofgodinsamoa.org"] [uri "/xmlrpc.php"] [unique_id "amMeyTBtEJN-BD3v4_F3TgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:12:28 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 59.98.126.104 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 59.98.126.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:12:24.085330 2026] [security2:error] [pid 3457759:tid 3457759] [client 59.98.126.104:57754] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.98.126.104 (+1 hits since last alert)\|ralphharris.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ralphharris.org"] [uri "/xmlrpc.php"] [unique_id "amMQWK-GbIJFDXxrIJbn9AAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Tha_14	2026-07-24 06:07:13 (13 hours ago)	Limit on login attempts is reached	Brute-Force
🇫🇷 dynamix	2026-07-24 05:25:59 (14 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2025-11-04 21:30:59 (8 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2025-07-18 18:02:25 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-06-05 12:32:50 (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇨🇳 ThreatBook.io	2025-04-11 01:45:20 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/59.98.126.104	SSH

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.113.165.180

🇮🇳 157.20.215.123

🇭🇰 156.225.1.87

🇦🇺 122.148.199.165

🇨🇦 38.80.122.131

🇺🇸 147.185.132.183

🇻🇳 103.75.183.177

🇳🇱 45.148.10.151

🇧🇷 187.40.196.123

🇳🇱 185.223.235.29

🇺🇸 173.251.97.110

🇺🇸 136.144.35.53

🇨🇳 119.54.0.36

🇵🇱 89.70.166.43

🇺🇸 66.132.195.47

🇲🇾 49.124.142.137

🇦🇷 181.164.43.48

🇫🇷 141.253.107.23

🇺🇸 75.83.0.219

🇳🇱 45.148.10.157