JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.36.189.238

49.36.189.238 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Delhi, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.36.189.238

Whois 49.36.189.238

IP Abuse Reports for 49.36.189.238:

This IP address has been reported a total of 9 times from 7 distinct sources. 49.36.189.238 was first reported on August 24th 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-26 15:38:04 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 49.36.189.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 49.36.189.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 26 10:37:49.704421 2025] [security2:error] [pid 17499:tid 17499] [client 49.36.189.238:50781] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.kendig.thenewplace.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kendig.thenewplace.org"] [uri "/"] [unique_id "aU6rzQNAK5fhoOW7VsRP3gAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2024-08-01 22:55:47 (1 year ago)	Email account brute force: 2 attempts were recorded from 49.36.189.238 2024-08-02T00:14:23+02:00 war ... show more Email account brute force: 2 attempts were recorded from 49.36.189.238 2024-08-02T00:14:23+02:00 warning: unknown[49.36.189.238]: SASL LOGIN authentication failed: authentication failure, [email protected] 2024-08-02T00:14:24+02:00 warning: unknown[49.36.189.238]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇿 unhfree.net	2024-08-01 03:52:16 (1 year ago)	Aug 1 05:39:37 canopus postfix/smtpd[2159169]: NOQUEUE: reject: RCPT from unknown[49.36.189.238]: 5 ... show more Aug 1 05:39:37 canopus postfix/smtpd[2159169]: NOQUEUE: reject: RCPT from unknown[49.36.189.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<server20044.defaulthost.net.> Aug 1 05:45:51 canopus postfix/smtpd[2159169]: NOQUEUE: reject: RCPT from unknown[49.36.189.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<server20044.defaulthost.net.> Aug 1 05:46:29 canopus postfix/smtpd[2159253]: NOQUEUE: reject: RCPT from unknown[49.36.189.238]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<server20044.defaulthost.net.> Aug 1 05:48:45 canopus postfix/smtpd[2161820]: NOQUEUE: rejec ... show less	Brute-Force Exploited Host
🇩🇪 FeG Deutschland	2024-07-31 05:38:01 (1 year ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇹🇭 thaizone.com	2024-07-31 04:15:10 (1 year ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
🇳🇿 Tripwire	2024-01-18 07:04:21 (2 years ago)	Wordpress login scanning	Brute-Force Web App Attack
🇨🇦 0xem.ma	2021-08-24 17:41:26 (4 years ago)	Aug 24 21:41:11 SSH-Honeypot sshd[696895]: Invalid user demo from 49.36.189.238 port 59858 Aug 24 21 ... show more Aug 24 21:41:11 SSH-Honeypot sshd[696895]: Invalid user demo from 49.36.189.238 port 59858 Aug 24 21:41:14 SSH-Honeypot sshd[696895]: Failed password for invalid user demo from 49.36.189.238 port 59858 ssh2 Aug 24 21:41:24 SSH-Honeypot sshd[696916]: Invalid user demo from 49.36.189.238 port 61495 ... show less	Brute-Force SSH
🇨🇦 0xem.ma	2021-08-24 17:20:40 (4 years ago)	Aug 24 21:20:28 SSH-Honeypot sshd[695800]: Failed password for root from 49.36.189.238 port 64107 ss ... show more Aug 24 21:20:28 SSH-Honeypot sshd[695800]: Failed password for root from 49.36.189.238 port 64107 ssh2 Aug 24 21:20:37 SSH-Honeypot sshd[695807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.36.189.238 user=root Aug 24 21:20:40 SSH-Honeypot sshd[695807]: Failed password for root from 49.36.189.238 port 65259 ssh2 ... show less	Brute-Force SSH
🇨🇦 0xem.ma	2021-08-24 16:59:51 (4 years ago)	Aug 24 20:59:41 SSH-Honeypot sshd[694973]: Invalid user admin from 49.36.189.238 port 54066 Aug 24 2 ... show more Aug 24 20:59:41 SSH-Honeypot sshd[694973]: Invalid user admin from 49.36.189.238 port 54066 Aug 24 20:59:42 SSH-Honeypot sshd[694973]: Failed none for invalid user admin from 49.36.189.238 port 54066 ssh2 Aug 24 20:59:50 SSH-Honeypot sshd[694975]: Invalid user admin from 49.36.189.238 port 54988 ... show less	Brute-Force SSH

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.87.32.147

🇳🇱 160.119.69.16

🇺🇸 159.26.100.227

🇻🇳 116.98.248.48

🇺🇸 103.108.96.40

🇸🇬 68.183.236.1

🇸🇬 43.156.71.43

🇷🇴 2.57.122.177

🇺🇸 198.23.138.30

🇫🇷 176.129.130.201

🇭🇰 150.40.164.33

🇻🇳 125.212.159.158

🇻🇳 123.24.215.106

🇩🇪 109.91.4.177

🇮🇳 49.200.182.239

🇮🇳 49.36.237.16

🇨🇳 14.103.115.213

🇺🇸 3.83.245.221

🇲🇽 187.194.142.89

🇸🇬 168.144.42.72