JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

115.242.55.148

Recent Activity

Abuse confidence score ?

33% Elevated

16 reports

12 reporters · latest 1 day ago

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Virar, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 115.242.55.148

Export CSV

This IP address has been reported a total of 16 times from 12 distinct sources. 115.242.55.148 was first reported on March 5th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Netherlands with 3 reports; Germany with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Brute-Force 4 times; Web App Attack 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 maxxsense	2026-10-07 12:46:12 (1 day ago)	(wordpress) Failed wordpress login from 115.242.55.148 (IN/India/-)	Brute-Force
🇩🇪 LRob	2026-10-06 10:30:15 (2 days ago)	WordPress login brute force \| path: /xmlrpc.php \| ua: Jetpack by WordPress.com, Jetpack/13.0; WordPr ... show more WordPress login brute force \| path: /xmlrpc.php \| ua: Jetpack by WordPress.com, Jetpack/13.0; WordPress/6.1; http://site44212523.com show less	Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-05 04:58:30 (3 days ago)	[ti-22al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-22al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 115.242.55.148 - - [05/Oct/2026:06:57:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6018 "-" "WordPress.com; https://wordpress.com" 115.242.55.148 - - [05/Oct/2026:06:57:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6018 "-" "Jetpack/12.0; WordPress/6.2; http://site73712839.com" 115.242.55.148 - - [05/Oct/2026:06:58:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6018 "-" "Jetpack/12.0; WordPress/6.1; http://site30737931.com" 115.242.55.148 - - [05/Oct/2026:06:58:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 6018 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇳🇱 ConsulHosting	2026-09-22 09:50:34 (2 weeks ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
Anonymous	2026-09-22 09:32:54 (2 weeks ago)	(wordpress) Failed wordpress login from 115.242.55.148 (IN/India/Maharashtra/Mumbai/-/[redacted])	Brute-Force
🇺🇸 TPI-Abuse	2026-04-20 07:17:03 (5 months ago)	(mod_security) mod_security (id:240335) triggered by 115.242.55.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 115.242.55.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 03:16:54.306206 2026] [security2:error] [pid 2829368:tid 2829368] [client 115.242.55.148:52859] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.242.55.148 (+1 hits since last alert)\|spacebooger.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "spacebooger.com"] [uri "/xmlrpc.php"] [unique_id "aeXS5iFfJCW1ZatwXnspDAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-20 06:25:25 (5 months ago)	(mod_security) mod_security (id:240335) triggered by 115.242.55.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 115.242.55.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 02:25:17.926008 2026] [security2:error] [pid 4016197:tid 4016197] [client 115.242.55.148:279] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.242.55.148 (+1 hits since last alert)\|midwayisland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "midwayisland.com"] [uri "/xmlrpc.php"] [unique_id "aeXGzQ7H05WVg9ovy9p2QwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-18 05:05:41 (5 months ago)	Fail2ban filtered ...	Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 10:55:05 (5 months ago)	(mod_security) mod_security (id:240335) triggered by 115.242.55.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 115.242.55.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 06:54:57.111520 2026] [security2:error] [pid 386568:tid 386568] [client 115.242.55.148:30892] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.242.55.148 (+1 hits since last alert)\|ssion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ssion.com"] [uri "/xmlrpc.php"] [unique_id "aeDAAfFXSCcIoVehdMK0FQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-15 07:42:37 (5 months ago)	(mod_security) mod_security (id:240335) triggered by 115.242.55.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 115.242.55.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 03:42:29.352059 2026] [security2:error] [pid 885273:tid 885273] [client 115.242.55.148:21090] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.242.55.148 (+1 hits since last alert)\|97films.media\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "97films.media"] [uri "/xmlrpc.php"] [unique_id "ad9BZTTUH9tPtRPc5FBm-QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-13 11:35:04 (5 months ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 WeekendWeb	2026-04-13 05:40:03 (5 months ago)	Wordpress Vunerability attack	Web App Attack
🇩🇪 LRob	2026-04-08 05:45:15 (6 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 4server	2026-04-08 04:18:32 (6 months ago)	[WedApr0806:18:27.0496522026][security2:error][pid1841731:tid1841749][client115.242.55.148:0]ModSecu ... show more [WedApr0806:18:27.0496522026][security2:error][pid1841731:tid1841749][client115.242.55.148:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"112\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"alessandrolucchini.ch\"][uri\"/xmlrpc.php\"][unique_id\"adXXE5UEfdULK2tTFN5V_wAAAIw\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-03-05 05:06:03 (7 months ago)	Trying to access config files	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.131

🇺🇸 216.25.89.116

🇳🇱 195.178.110.30

🇻🇪 190.8.166.123

🇳🇱 188.166.21.112

🇪🇸 188.114.111.202

🇺🇸 172.190.89.127

🇺🇸 157.230.155.62

🇨🇳 124.135.20.244

🇮🇳 123.253.162.253

🇺🇸 107.22.158.243

🇭🇰 104.208.108.166

🇵🇰 103.191.123.202

🇹🇳 102.156.209.175

🇫🇷 91.231.89.168

🇳🇱 81.19.216.88

🇩🇪 46.101.137.209

🇷🇺 37.139.53.80

🇨🇳 14.103.115.115

🇷🇴 2.57.121.112