JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.36.168.65

49.36.168.65 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 77%: ?

77%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Lucknow, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.36.168.65

Whois 49.36.168.65

IP Abuse Reports for 49.36.168.65:

This IP address has been reported a total of 35 times from 19 distinct sources. 49.36.168.65 was first reported on July 26th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 abdubhai	2026-07-27 05:26:56 (1 day ago)	49.36.168.65 - - [27/Jul/2026:10 ...	Brute-Force
🇺🇸 TAY	2026-07-27 04:56:53 (1 day ago)	49.36.168.65 - - [27/Jul/2026:12:56:32 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack/13.0 ... show more 49.36.168.65 - - [27/Jul/2026:12:56:32 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack/13.0; WordPress/6.2; http://site73390069.com" 49.36.168.65 - - [27/Jul/2026:12:56:42 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "WordPress.com; https://wordpress.com" 49.36.168.65 - - [27/Jul/2026:12:56:52 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack by WordPress.com" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-25 11:24:02 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 49.36.168.65 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 49.36.168.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 07:23:48.877637 2026] [security2:error] [pid 4160937:tid 4160937] [client 49.36.168.65:56525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.36.168.65 (+1 hits since last alert)\|zost.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "zost.net"] [uri "/xmlrpc.php"] [unique_id "amScxJg9E7IwsdqyQDhpUwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-25 11:18:31 (3 days ago)	(wordpress) Failed wordpress login from 49.36.168.65 (IN/India/-): (CF_ENABLE)	Brute-Force
🇺🇸 kosada.com	2026-07-23 15:18:19 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 ghostwarriors	2026-07-21 12:20:27 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-21 12:16:49 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
Anonymous	2026-07-21 12:16:27 (1 week ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
Anonymous	2026-07-21 07:11:27 (1 week ago)	[redacted] 49.36.168.65 - - [21/Jul/2026:09:10:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 49.36.168.65 - - [21/Jul/2026:09:10:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 49.36.168.65 - - [21/Jul/2026:09:10:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.36.168.65 - - [21/Jul/2026:09:11:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.36.168.65 - - [21/Jul/2026:09:11:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.36.168.65 - - [21/Jul/2026:09:11:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-21 06:10:19 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-20 07:44:40 (1 week ago)	(xmlrpc) Failed xmlrpc access from 49.36.168.65 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
🇪🇸 SweetHoneyPress	2026-07-18 12:03:20 (1 week ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1064240 \| UA: Jetpack by WordPress.com (Jetpack 1 ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=1064240 \| UA: Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2) show less	Web App Attack Brute-Force
🇪🇸 SweetHoneyPress	2026-07-18 11:48:15 (1 week ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1064159 \| UA: Jetpack by WordPress.com (Jetpack 1 ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=1064159 \| UA: Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4) show less	Web App Attack Brute-Force
🇺🇸 IndigoRidge	2026-07-18 09:53:29 (1 week ago)	49.36.168.65 - - [18/Jul/2026:05:51:19 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5118 "-" "WordPress.co ... show more 49.36.168.65 - - [18/Jul/2026:05:51:19 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5118 "-" "WordPress.com; https://wordpress.com" 49.36.168.65 - - [18/Jul/2026:05:51:40 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5118 "-" "WordPress.com; https://wordpress.com" 49.36.168.65 - - [18/Jul/2026:05:52:55 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5118 "-" "WordPress.com; https://wordpress.com" 49.36.168.65 - - [18/Jul/2026:05:53:06 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5118 "-" "WordPress.com; https://wordpress.com" 49.36.168.65 - - [18/Jul/2026:05:53:27 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5118 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇫🇷 dynamix	2026-07-13 10:53:15 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:6d70:aa::11:1c8

🇺🇸 151.240.101.12

🇹🇼 104.199.210.107

🇵🇭 61.9.8.212

🇺🇸 35.91.37.19

🇺🇸 18.145.103.214

🇨🇳 182.123.215.214

🇨🇳 182.61.35.204

🇵🇱 176.53.159.133

🇺🇸 172.69.70.92

🇺🇸 104.28.240.189

🇺🇸 104.28.159.117

🇮🇳 103.241.226.73

🇹🇷 94.154.43.153

🇹🇷 94.154.43.43

🇷🇺 91.202.233.116

🇪🇸 85.87.101.189

🇺🇸 54.186.171.82

🇮🇪 52.30.95.33

🇺🇸 52.8.147.130