JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 115.245.108.102

115.245.108.102 was found in our database!

This IP was reported 227 times. Confidence of Abuse is 93%: ?

93%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 115.245.108.102

Whois 115.245.108.102

IP Abuse Reports for 115.245.108.102:

This IP address has been reported a total of 227 times from 101 distinct sources. 115.245.108.102 was first reported on February 26th 2026, and the most recent report was 35 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-07 00:05:40 (35 minutes ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇸🇪 vaia.cloud	2026-07-06 23:19:04 (1 hour ago)	trying wp-login.php/xmlrpc.php 34 times in 1 minutes	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 23:12:00 (1 hour ago)	(mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:11:56.172358 2026] [security2:error] [pid 5941:tid 5941] [client 115.245.108.102:5314] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.108.102 (+1 hits since last alert)\|axiomemail.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "axiomemail.net"] [uri "/xmlrpc.php"] [unique_id "akw2PLDZ-woPfTQofVuYWAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-06 20:00:40 (4 hours ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-07-06 17:58:50 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 13:58:42.903365 2026] [security2:error] [pid 30379:tid 30379] [client 115.245.108.102:12413] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.108.102 (+1 hits since last alert)\|mfleetservice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mfleetservice.com"] [uri "/xmlrpc.php"] [unique_id "akvs0pxT_yKgAS41hK6algAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Victor López	2026-07-06 15:12:38 (9 hours ago)	babystudio4d.com 115.245.108.102 - - [06/Jul/2026:10:12:17 -0500] "POST /xmlrpc.php HTTP/1.1" 200 41 ... show more babystudio4d.com 115.245.108.102 - - [06/Jul/2026:10:12:17 -0500] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack/12.5; WordPress/6.2; http://site78247678.com" babystudio4d.com 115.245.108.102 - - [06/Jul/2026:10:12:26 -0500] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com" babystudio4d.com 115.245.108.102 - - [06/Jul/2026:10:12:37 -0500] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇧🇷 ICS Labs	2026-07-06 13:04:35 (11 hours ago)	ICS Labs identified 115.245.108.102 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-07-06 11:02:06 (13 hours ago)	(mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 07:02:01.098502 2026] [security2:error] [pid 7991:tid 7991] [client 115.245.108.102:18184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.108.102 (+1 hits since last alert)\|cloudex.link\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cloudex.link"] [uri "/xmlrpc.php"] [unique_id "akuLKVpWywscJxdI9PQ8rAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-07-04 05:00:58 (2 days ago)	Wordpress Vunerability attack	Web App Attack
🇪🇸 masterguru	2026-07-04 05:00:52 (2 days ago)	(xmlrpc) Failed xmlrpc access from 115.245.108.102 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 TPI-Abuse	2026-07-03 17:46:05 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 13:45:56.593903 2026] [security2:error] [pid 3162:tid 3162] [client 115.245.108.102:30183] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.108.102 (+1 hits since last alert)\|laecovillage.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "laecovillage.org"] [uri "/xmlrpc.php"] [unique_id "akf1VFwDNZu9m27DgBJj-wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-03 16:01:16 (3 days ago)	Blocked by ModSec and CSF	Port Scan
🇺🇸 TPI-Abuse	2026-07-03 12:30:20 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.108.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 08:30:12.777254 2026] [security2:error] [pid 27612:tid 27612] [client 115.245.108.102:7720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.108.102 (+1 hits since last alert)\|natickvillagerentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "natickvillagerentals.com"] [uri "/xmlrpc.php"] [unique_id "akerVPALrI3n4XH8uht8wQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-06-26 05:53:22 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇦🇺 AWW-Admin	2026-06-05 17:17:06 (1 month ago)	(wordpress) Failed wordpress login from 115.245.108.102 (IN/India/-)	Brute-Force

Showing 1 to 15 of 227 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇾 167.58.252.0

🇺🇸 47.251.34.170

🇻🇳 42.116.206.52

🇺🇸 192.254.250.171

🇲🇽 177.227.199.96

🇺🇸 172.238.160.104

🇺🇸 159.89.233.90

🇫🇮 147.185.133.121

🇺🇸 144.172.104.196

🇺🇸 107.173.122.15

🇷🇺 92.124.133.35

🇩🇪 85.215.138.48

🇫🇷 62.171.133.156

🇦🇺 45.133.6.96

🇸🇪 2a04:4e40:4400:0:e0:7afc:67a3:a547

🇪🇹 196.189.155.89

🇷🇺 194.28.72.35

🇧🇷 177.23.232.190

🇬🇧 172.236.15.36

🇫🇮 147.185.133.221