JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.249.49.155

45.249.49.155 was found in our database!

This IP was reported 205 times. Confidence of Abuse is 100%: ?

100%

ISP	E Net Entertainment Pvt Ltd
Usage Type	Fixed Line ISP
ASN	AS135188
Domain Name	e-net.in
Country	🇮🇳 India
City	Vijayawada, Andhra Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.249.49.155

Whois 45.249.49.155

IP Abuse Reports for 45.249.49.155:

This IP address has been reported a total of 205 times from 90 distinct sources. 45.249.49.155 was first reported on March 11th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-04 08:48:38 (20 hours ago)	[ThuJun0410:48:30.3220102026][security2:error][pid3356420:tid3356623][client45.249.49.155:0]ModSecur ... show more [ThuJun0410:48:30.3220102026][security2:error][pid3356420:tid3356623][client45.249.49.155:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"behindthemoon.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiE73vHAGS2Xa6ApdGARLQAAAQA\"] show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-06-04 05:37:40 (23 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 dklueh79	2026-06-03 16:57:33 (1 day ago)	Probe for vulnerabilities. Path attempted: /xmlrpc.php	Web App Attack
Anonymous	2026-06-03 16:43:07 (1 day ago)	45.249.49.155 - - [03/Jun/2026:18:41:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 ... show more 45.249.49.155 - - [03/Jun/2026:18:41:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" 45.249.49.155 - - [03/Jun/2026:18:41:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" 45.249.49.155 - - [03/Jun/2026:18:42:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.0.0 Safari/537.36" 45.249.49.155 - - [03/Jun/2026:18:42:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.0.0 Safari/537.36" 45.249.49.155 - - [03/Jun/2026:18:43:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/82.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇨🇦 zXero	2026-06-03 12:37:21 (1 day ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇫🇷 masterguru	2026-06-03 12:22:53 (1 day ago)	(xmlrpc) Apache: Failed xmlrpc access from 45.249.49.155 (IN/India/-): 10 in the last 3600 secs (0-2 ... show more (xmlrpc) Apache: Failed xmlrpc access from 45.249.49.155 (IN/India/-): 10 in the last 3600 secs (0-201) show less	Hacking
🇦🇺 screwlooseit.com.au	2026-06-03 06:50:39 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
🇩🇪 4server	2026-06-03 00:13:04 (2 days ago)	[WedJun0302:12:55.9325552026][security2:error][pid887830:tid887926][client45.249.49.155:0]ModSecurit ... show more [WedJun0302:12:55.9325552026][security2:error][pid887830:tid887926][client45.249.49.155:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"agilityrossoblu.ch\"][uri\"/xmlrpc.php\"][unique_id\"ah9xh79wuSUJ5s8vfEC7YQAAAQA\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 stinpriza	2026-06-02 16:42:22 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 Savoie	2026-06-02 10:48:00 (2 days ago)	45.249.49.155 *.* - [02/Jun/2026:12:48:29 +0200] "POST /xmlrpc.php HTTP/1.1" 302 250 "-" "Mozill ... show more 45.249.49.155 *.* - [02/Jun/2026:12:48:29 +0200] "POST /xmlrpc.php HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-06-01 09:45:07 (3 days ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇨🇦 zXero	2026-05-29 12:31:26 (6 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇩🇪 ger-stg-sifi1	2026-05-26 09:38:02 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 2048	2026-05-26 06:10:42 (1 week ago)	2026-05-26T08:10:38.826538+02:00 machodeer kernel: [2483756.185646] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-26T08:10:38.826538+02:00 machodeer kernel: [2483756.185646] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=45.249.49.155 DST=REDACTED LEN=52 TOS=0x08 PREC=0x20 TTL=113 ID=24280 DF PROTO=TCP SPT=50396 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-26T08:10:39.933734+02:00 machodeer kernel: [2483757.292756] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=45.249.49.155 DST=REDACTED LEN=52 TOS=0x08 PREC=0x20 TTL=113 ID=24281 DF PROTO=TCP SPT=50396 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-26T08:10:41.934592+02:00 machodeer kernel: [2483759.293697] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=45.249.49.155 DST=REDACTED LEN=52 TOS=0x08 PREC=0x20 TTL=113 ID=24282 DF PROTO=TCP SPT=50396 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-05-18 20:58:24 (2 weeks ago)	45.249.49.155 - - [18/May/2026:22:58:19 +0200] "POST /xmlrpc.php HTTP/1.1" 302 - 45.249.49.155 - - [ ... show more 45.249.49.155 - - [18/May/2026:22:58:19 +0200] "POST /xmlrpc.php HTTP/1.1" 302 - 45.249.49.155 - - [18/May/2026:22:58:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 ... show less	Brute-Force Bad Web Bot

Showing 1 to 15 of 205 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 128.251.36.118

🇰🇷 121.165.84.80

🇮🇳 103.133.196.146

🇫🇷 91.231.89.106

🇨🇦 85.217.149.6

🇱🇹 45.227.254.170

🇳🇱 45.140.222.119

🇮🇩 36.93.154.207

🇺🇸 34.138.135.178

🇳🇱 5.61.209.33

🇧🇪 198.235.24.245

🇺🇸 194.5.52.5

🇮🇳 182.95.228.22

🇵🇹 161.230.217.176

🇸🇰 88.212.19.153

🇦🇲 176.32.193.16

🇳🇱 172.211.56.214

🇺🇸 104.152.52.208

🇱🇹 81.30.98.158

🇺🇸 64.62.197.82