JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

14.195.21.130

Neutral Activity

Abuse confidence score ?

0% Low Risk

26 reports

17 reporters · latest 1 month ago

ISP	Tata Teleservices Limited -GSM Division
Usage Type	Fixed Line ISP
ASN	AS45820
Hostname(s)	static-130.21.195.14-tataidc.co.in
Domain Name	tatatel.co.in
Country	🇮🇳 India
City	Dadri, Uttar Pradesh

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 14.195.21.130

This IP address has been reported a total of 26 times from 17 distinct sources. 14.195.21.130 was first reported on April 24th 2026, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: United States of America with 1 report. The only category in these recent reports was: Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-06 01:24:26 (1 month ago)	Attack detected: 14.195.21.130 [2026-08-06] Categories: 18 --- xmlrpc abuse (150 hits) --- 14.195.21 ... show more Attack detected: 14.195.21.130 [2026-08-06] Categories: 18 --- xmlrpc abuse (150 hits) --- 14.195.21.130 - - [04/May/2026:16:33:37 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "WordPress.com; https://wordpress.com" 14.195.21.130 - - [04/May/2026:16:33:47 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "Jetpack/13.0; WordPress/6.3; http://site83828918.com" 14.195.21.130 - - [04/May/2026:16:33:58 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "WordPress.com; https://wordpress.com" 14.195.21.130 - - [04/May/2026:16:34:09 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "WordPress.com; https://wordpress.com" 14.195.21.130 - - [04/May/2026:16:34:19 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "WordPress.com; https://wordpress.com" show less	Brute-Force
Anonymous	2026-07-22 00:33:20 (2 months ago)	Attack detected: 14.195.21.130 [2026-07-22] Categories: 18 --- xmlrpc abuse (150 hits) --- 14.195.21 ... show more Attack detected: 14.195.21.130 [2026-07-22] Categories: 18 --- xmlrpc abuse (150 hits) --- 14.195.21.130 - - [04/May/2026:16:33:37 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "WordPress.com; https://wordpress.com" 14.195.21.130 - - [04/May/2026:16:33:47 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "Jetpack/13.0; WordPress/6.3; http://site83828918.com" 14.195.21.130 - - [04/May/2026:16:33:58 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "WordPress.com; https://wordpress.com" 14.195.21.130 - - [04/May/2026:16:34:09 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "WordPress.com; https://wordpress.com" 14.195.21.130 - - [04/May/2026:16:34:19 +0000] "POST /xmlrpc.php HTTP/1.1" 200 3234 "-" "WordPress.com; https://wordpress.com" show less	Brute-Force
Anonymous	2026-05-13 15:14:38 (4 months ago)	[redacted] 14.195.21.130 - - [13/May/2026:17:13:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 14.195.21.130 - - [13/May/2026:17:13:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 14.195.21.130 - - [13/May/2026:17:14:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 14.195.21.130 - - [13/May/2026:17:14:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 14.195.21.130 - - [13/May/2026:17:14:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site15473038.com" [redacted] 14.195.21.130 - - [13/May/2026:17:14:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇨🇦 Paulo Henrique dos Santos Nichio	2026-05-12 15:59:07 (4 months ago)	(ls_brute) LiteSpeed Brute Force Attack 14.195.21.130 (IN/India/static-130.21.195.14-tataidc.co.in): ... show more (ls_brute) LiteSpeed Brute Force Attack 14.195.21.130 (IN/India/static-130.21.195.14-tataidc.co.in): 3 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-05-12 12:58:42.307382 [WARN] [681271] [T0] [172.71.82.126:14235:HTTP2-59>14.195.21.130#APVH_www.wolftechnology.com.br:443] Brute force detected for IP [14.195.21.130], throttle. 2026-05-12 12:58:53.300430 [WARN] [681271] [T0] [172.71.82.126:14235:HTTP2-61>14.195.21.130#APVH_www.wolftechnology.com.br:443] Brute force detected for IP [14.195.21.130], throttle. 2026-05-12 12:59:03.522525 [WARN] [681271] [T0] [172.71.82.126:14235:HTTP2-63>14.195.21.130#APVH_www.wolftechnology.com.br:443] Brute force detected for IP [14.195.21.130], throttle. show less	Port Scan
Anonymous	2026-05-12 14:22:46 (4 months ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 21:37:15 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 14.195.21.130 (static-130.21.195.14-tataidc.co. ... show more (mod_security) mod_security (id:240335) triggered by 14.195.21.130 (static-130.21.195.14-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 17:37:08.113259 2026] [security2:error] [pid 18322:tid 18322] [client 14.195.21.130:53077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 14.195.21.130 (+1 hits since last alert)\|jesussotoca.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jesussotoca.com"] [uri "/xmlrpc.php"] [unique_id "agJMBO9mCEliG01k8ZpX8AAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-05-11 21:30:27 (4 months ago)	4.587 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2026-05-11 19:43:06 (4 months ago)	14.195.21.130 - - [11/May/2026:21:42:45 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by W ... show more 14.195.21.130 - - [11/May/2026:21:42:45 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by WordPress.com" 14.195.21.130 - - [11/May/2026:21:42:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 14.195.21.130 - - [11/May/2026:21:42:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" 14.195.21.130 - - [11/May/2026:21:42:53 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" 14.195.21.130 - - [11/May/2026:21:43:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" ... show less	Brute-Force Web App Attack
🇫🇷 applemooz	2026-05-07 18:30:42 (4 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-06 14:41:21 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 14.195.21.130 (static-130.21.195.14-tataidc.co. ... show more (mod_security) mod_security (id:240335) triggered by 14.195.21.130 (static-130.21.195.14-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 10:41:13.490324 2026] [security2:error] [pid 17500:tid 17500] [client 14.195.21.130:53922] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 14.195.21.130 (+1 hits since last alert)\|fusionrep.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fusionrep.com"] [uri "/xmlrpc.php"] [unique_id "aftTCWLHAY21O6PW6C88cwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-05 19:11:08 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 14.195.21.130 (static-130.21.195.14-tataidc.co. ... show more (mod_security) mod_security (id:240335) triggered by 14.195.21.130 (static-130.21.195.14-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 15:11:01.494959 2026] [security2:error] [pid 3388:tid 3388] [client 14.195.21.130:50551] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 14.195.21.130 (+1 hits since last alert)\|eye7graphics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eye7graphics.com"] [uri "/xmlrpc.php"] [unique_id "afpAxSfTwg5vESBM6zFpiwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-05-05 16:02:00 (4 months ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
Anonymous	2026-05-04 22:55:02 (4 months ago)	Bot / scanning and/or hacking attempts: GET /feed/ HTTP/1.1, [0/0] Software caused connection abort, ... show more Bot / scanning and/or hacking attempts: GET /feed/ HTTP/1.1, [0/0] Software caused connection abort, POST /xmlrpc.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-01 20:34:50 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 14.195.21.130 (static-130.21.195.14-tataidc.co. ... show more (mod_security) mod_security (id:240335) triggered by 14.195.21.130 (static-130.21.195.14-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 16:34:46.986892 2026] [security2:error] [pid 18777:tid 18777] [client 14.195.21.130:57731] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 14.195.21.130 (+1 hits since last alert)\|iconbizpromo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iconbizpromo.com"] [uri "/xmlrpc.php"] [unique_id "afUOZslF1QvOHDZCA34I0gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-04-30 20:12:28 (4 months ago)	AutoBlock: 🔐 WordPress Login Brute Force (50X) (Decay-Based)	Brute-Force Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.75.97.38

🇸🇬 200.69.21.47

🇻🇳 103.78.0.229

🇫🇷 2400:cb00:538:1000:6a0a:efba:4a92:ebf6

🇺🇸 2001:470:1:fb5::200

🇮🇳 210.89.45.20

🇹🇭 203.150.107.244

🇧🇷 187.110.238.50

🇧🇴 181.115.181.140

🇷🇺 178.47.92.74

🇮🇳 147.93.153.124

🇺🇿 95.130.227.195

🇨🇳 94.231.206.5

🇫🇷 91.231.89.253

🇺🇦 91.207.54.182

🇨🇦 85.217.149.60

🇱🇹 77.90.185.39

🇺🇸 74.207.240.168

🇸🇬 68.178.170.218

🇻🇳 45.119.214.98