JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 115.245.254.102

115.245.254.102 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 52%: ?

52%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Dadri, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 115.245.254.102

Whois 115.245.254.102

IP Abuse Reports for 115.245.254.102:

This IP address has been reported a total of 20 times from 13 distinct sources. 115.245.254.102 was first reported on June 8th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-06 06:29:57 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 115.245.254.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.254.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 02:29:50.794261 2026] [security2:error] [pid 2412:tid 2412] [client 115.245.254.102:59756] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.254.102 (+1 hits since last alert)\|tourissue.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tourissue.com"] [uri "/xmlrpc.php"] [unique_id "aktLXpQWbtH8DPZYvLHbLQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 05:59:03 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 115.245.254.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.254.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:58:57.722802 2026] [security2:error] [pid 31625:tid 31625] [client 115.245.254.102:60044] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.254.102 (+1 hits since last alert)\|havenlaneministries.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "havenlaneministries.com"] [uri "/xmlrpc.php"] [unique_id "aktEIT6PtJ4-fLwslfLQpgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 bittiguru.fi	2026-07-06 05:09:45 (6 days ago)	115.245.254.102 - [06/Jul/2026:08:09:34 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Jetpack by W ... show more 115.245.254.102 - [06/Jul/2026:08:09:34 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" "-" 115.245.254.102 - [06/Jul/2026:08:09:44 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "WordPress.com; https://wordpress.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-07-06 04:54:16 (6 days ago)	115.245.254.102 - [06/Jul/2026:07:54:05 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Jetpack by W ... show more 115.245.254.102 - [06/Jul/2026:07:54:05 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Jetpack by WordPress.com" "-" 115.245.254.102 - [06/Jul/2026:07:54:15 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "WordPress.com; https://wordpress.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-03 09:26:31 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-29 06:31:44 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-29 06:03:03 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 115.245.254.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.254.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 02:02:56.713600 2026] [security2:error] [pid 524:tid 524] [client 115.245.254.102:62505] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.254.102 (+1 hits since last alert)\|sfgardening.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sfgardening.com"] [uri "/xmlrpc.php"] [unique_id "akIKkNrO5HC3CrbIlbqaEAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-27 07:40:02 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-24 07:03:03 (2 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 10:48:56 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 115.245.254.102 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 115.245.254.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 06:48:49.589055 2026] [security2:error] [pid 4787:tid 4787] [client 115.245.254.102:58187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.245.254.102 (+1 hits since last alert)\|agworldmissions.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "agworldmissions.org"] [uri "/xmlrpc.php"] [unique_id "ajkTEUumGOUrcRI_KSc8ygAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-22 07:12:29 (2 weeks ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇲🇾 Rizzy	2026-06-22 06:43:21 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 francoisunix	2026-06-19 10:58:02 (3 weeks ago)	115.245.254.102 - - [19/Jun/2026:10:57:17 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "WordPress. ... show more 115.245.254.102 - - [19/Jun/2026:10:57:17 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "WordPress.com; https://wordpress.com" 115.245.254.102 - - [19/Jun/2026:10:57:27 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "Jetpack/12.0; WordPress/6.2; http://site49188216.com" 115.245.254.102 - - [19/Jun/2026:10:57:38 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "WordPress.com; https://wordpress.com" 115.245.254.102 - - [19/Jun/2026:10:57:49 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "Jetpack/12.0; WordPress/6.4; http://site13205780.com" 115.245.254.102 - - [19/Jun/2026:10:58:00 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "Jetpack/12.0; WordPress/6.1; http://site47374201.com" ... show less	Web App Attack
🇫🇷 dynamix	2026-06-19 09:56:20 (3 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-17 09:23:50 (3 weeks ago)	[redacted] 115.245.254.102 - - [17/Jun/2026:11:23:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 115.245.254.102 - - [17/Jun/2026:11:23:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 115.245.254.102 - - [17/Jun/2026:11:23:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site93768262.com" [redacted] 115.245.254.102 - - [17/Jun/2026:11:23:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 115.245.254.102 - - [17/Jun/2026:11:23:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 115.245.254.102 - - [17/Jun/2026:11:23:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" ... show less	Hacking Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.103.209.51

🇲🇾 180.73.162.216

🇳🇱 172.217.40.19

🇺🇸 162.216.150.59

🇺🇸 137.184.52.184

🇺🇸 108.66.136.175

🇺🇸 65.49.1.42

🇳🇱 45.148.10.141

🇳🇱 45.142.193.169

🇧🇩 203.190.10.57

🇩🇪 185.242.3.189

🇬🇧 172.71.241.165

🇻🇳 171.231.186.215

🇩🇪 69.5.169.26

🇺🇸 44.160.109.74

🇻🇳 14.174.145.14

🇨🇦 2604:a880:cad:d0:0:1:90ac:1

🇷🇺 178.178.222.58

🇩🇪 167.94.146.32

🇧🇷 138.36.131.162