JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 115.245.246.21

115.245.246.21 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 43%: ?

43%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Dadri, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 115.245.246.21

Whois 115.245.246.21

IP Abuse Reports for 115.245.246.21:

This IP address has been reported a total of 12 times from 8 distinct sources. 115.245.246.21 was first reported on June 25th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-19 09:12:40 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 115.245.246.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 115.245.246.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 05:12:31.739901 2026] [security2:error] [pid 20697:tid 20697] [client 115.245.246.21:58124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.246.21 (+1 hits since last alert)\|amywoodruff.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "amywoodruff.com"] [uri "/xmlrpc.php"] [unique_id "alyU_wZy4dlSvUdA3yAY2AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 applemooz	2026-07-19 09:10:19 (1 day ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-13 22:33:24 (6 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇮🇹 Progetto1	2026-07-13 21:10:03 (6 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 17:52:02 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 115.245.246.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 115.245.246.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 13:51:55.333664 2026] [security2:error] [pid 19671:tid 19671] [client 115.245.246.21:52686] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.246.21 (+1 hits since last alert)\|sacoriverjazz.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sacoriverjazz.org"] [uri "/xmlrpc.php"] [unique_id "aj68O-gH-K3g0aEj9wdRnwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-06-26 17:18:49 (3 weeks ago)	Wordpress Vunerability attack	Web App Attack
🇧🇪 cmbplf	2026-06-26 00:37:46 (3 weeks ago)	4.101 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 23:48:59 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 115.245.246.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 115.245.246.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:48:53.703952 2026] [security2:error] [pid 30643:tid 30643] [client 115.245.246.21:55103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.246.21 (+1 hits since last alert)\|directcch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "directcch.com"] [uri "/xmlrpc.php"] [unique_id "aj2-ZWOHSbmYBUFDZx9GcAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-25 23:39:18 (3 weeks ago)	[redacted] 115.245.246.21 - - [26/Jun/2026:01:38:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 115.245.246.21 - - [26/Jun/2026:01:38:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 115.245.246.21 - - [26/Jun/2026:01:38:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 115.245.246.21 - - [26/Jun/2026:01:39:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" [redacted] 115.245.246.21 - - [26/Jun/2026:01:39:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 115.245.246.21 - - [26/Jun/2026:01:39:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site58265726.com" ... show less	Hacking Web App Attack
🇺🇸 integrantservices.com	2026-06-25 20:04:26 (3 weeks ago)	(wordpress) Failed wordpress login from 115.245.246.21 (IN/India/-)	Brute-Force
🇫🇷 dynamix	2026-06-25 19:35:07 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-06-25 19:01:45 (3 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇩🇪 134.255.255.140

🇮🇳 128.185.194.162

🇰🇷 125.140.111.102

🇪🇬 102.41.252.255

🇹🇷 94.154.43.229

🇫🇷 91.231.89.210

🇭🇰 47.239.255.134

🇮🇳 223.181.21.42

🇩🇪 216.26.246.235

🇧🇪 198.235.24.236

🇪🇹 196.188.75.58

🇷🇺 188.0.166.185

🇨🇴 186.31.95.163

🇩🇪 167.94.146.50

🇺🇸 143.110.193.219

🇭🇰 129.226.114.61

🇭🇰 123.58.213.118

🇻🇳 123.24.119.65

🇨🇳 123.13.95.153