JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.204.239.112

49.204.239.112 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 48%: ?

48%

ISP	Beam Telecom Pvt Ltd
Usage Type	Fixed Line ISP
ASN	AS24309
Hostname(s)	broadband.actcorp.in
Domain Name	beamtele.com
Country	🇮🇳 India
City	Rasapudipalem, Andhra Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.204.239.112

Whois 49.204.239.112

IP Abuse Reports for 49.204.239.112:

This IP address has been reported a total of 21 times from 20 distinct sources. 49.204.239.112 was first reported on March 25th 2022, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-10 10:41:17 (11 hours ago)	(mod_security) mod_security (id:240335) triggered by 49.204.239.112 (broadband.actcorp.in): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 49.204.239.112 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 06:41:10.492497 2026] [security2:error] [pid 22570:tid 22691] [client 49.204.239.112:53541] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.204.239.112 (+1 hits since last alert)\|koalacogs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "koalacogs.com"] [uri "/xmlrpc.php"] [unique_id "alDMRswPw0nwCA7l2rdmkQAAANU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-10 09:37:01 (12 hours ago)	(xmlrpc) Apache: Failed xmlrpc access from 49.204.239.112 (IN/India/broadband.actcorp.in): 10 in the ... show more (xmlrpc) Apache: Failed xmlrpc access from 49.204.239.112 (IN/India/broadband.actcorp.in): 10 in the last 3600 secs (0-201) show less	Hacking
🇺🇸 WeekendWeb	2026-07-10 09:09:54 (12 hours ago)	Wordpress Vunerability attack	Web App Attack
🇫🇮 YF	2026-07-10 07:00:43 (14 hours ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇫🇷 dynamix	2026-07-10 06:00:00 (15 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-10 05:32:56 (16 hours ago)	[redacted] 49.204.239.112 - - [10/Jul/2026:07:32:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 49.204.239.112 - - [10/Jul/2026:07:32:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.4; http://site67224933.com" [redacted] 49.204.239.112 - - [10/Jul/2026:07:32:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.204.239.112 - - [10/Jul/2026:07:32:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" [redacted] 49.204.239.112 - - [10/Jul/2026:07:32:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 49.204.239.112 - - [10/Jul/2026:07:32:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" ... show less	Hacking Web App Attack
🇪🇸 alferez	2026-07-09 06:46:11 (1 day ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 bigscoots.com	2025-09-19 06:40:24 (9 months ago)	(smtpauth) Failed SMTP AUTH login from 49.204.239.112 (IN/India/broadband.actcorp.in): 5 in the last ... show more (smtpauth) Failed SMTP AUTH login from 49.204.239.112 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-09-19 02:36:38 dovecot_plain authenticator failed for (VIKAS) [49.204.239.112]:53392: 535 Incorrect authentication data (set_id=lynn_re17no) 2025-09-19 02:36:42 dovecot_plain authenticator failed for (VIKAS) [49.204.239.112]:53385: 535 Incorrect authentication data ([email protected]) 2025-09-19 02:36:47 dovecot_plain authenticator failed for (VIKAS) [49.204.239.112]:54134: 535 Incorrect authentication data (set_id=lynn_re17no) 2025-09-19 02:36:47 SMTP call from [49.204.239.112]:54415 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?", NULL) 2025-09-19 02:40:21 dovecot_plain authenticator failed for (VIKAS) [49.204.239.112]:54522: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2025-09-19 04:34:16 (9 months ago)	wordpress-trap	Web App Attack
🇹🇭 thaizone.com	2025-09-18 12:43:00 (9 months ago)	Brute Force Attack on a Web Application #1	DDoS Attack Web Spam Brute-Force Web App Attack
🇮🇩 Burayot	2025-09-18 07:07:43 (9 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 49.204.239.112 (IN/India/-): 2 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 49.204.239.112 (IN/India/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 Psycho Solutions LLC	2025-09-18 04:16:41 (9 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 9/18/2025 4:16 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-09-16 10:02:08 (9 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 bigscoots.com	2025-09-16 06:51:09 (9 months ago)	(smtpauth) Failed SMTP AUTH login from 49.204.239.112 (IN/India/broadband.actcorp.in): 5 in the last ... show more (smtpauth) Failed SMTP AUTH login from 49.204.239.112 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-09-16 02:47:16 dovecot_plain authenticator failed for (VIKAS) [49.204.239.112]:53837: 535 Incorrect authentication data 2025-09-16 02:50:48 dovecot_plain authenticator failed for (VIKAS) [49.204.239.112]:53537: 535 Incorrect authentication data ([email protected]) 2025-09-16 02:50:56 dovecot_plain authenticator failed for (VIKAS) [49.204.239.112]:53983: 535 Incorrect authentication data (set_id=travelers) 2025-09-16 02:51:07 SMTP call from [49.204.239.112]:53355 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?", NULL) 2025-09-16 02:51:08 dovecot_plain authenticator failed for (VIKAS) [49.204.239.112]:54571: 535 Incorrect authentication data show less	Brute-Force SSH
Anonymous	2025-09-13 05:29:19 (9 months ago)	Ports: 25,2525,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2400:cb00:520:1000:6878:53d9:4216:f95

🇺🇸 216.25.89.85

🇳🇱 185.189.182.234

🇮🇳 103.146.222.47

🇸🇪 78.66.44.23

🇳🇱 45.148.10.157

🇺🇸 44.112.228.160

🇺🇸 158.51.126.144

🇺🇸 130.51.22.28

🇵🇰 111.68.111.124

🇺🇸 44.112.193.35

🇺🇸 34.233.114.237

🇷🇴 2.57.121.25

🇬🇧 2.57.17.219

🇬🇧 193.163.125.36

🇦🇷 190.16.194.197

🇺🇸 172.86.116.36

🇺🇸 151.247.67.90

🇺🇸 66.132.186.211

🇨🇳 60.166.82.78