JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.36.201.237

49.36.201.237 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 33%: ?

33%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Jammu, Jammu and Kashmir

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.36.201.237

Whois 49.36.201.237

IP Abuse Reports for 49.36.201.237:

This IP address has been reported a total of 12 times from 11 distinct sources. 49.36.201.237 was first reported on July 28th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2026-08-21 09:25:57 (3 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
🇨🇭 Mario Bretscher	2026-08-21 09:25:12 (3 days ago)	Aug 21 11:24:59 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[1898661]: Authentication failure for ... show more Aug 21 11:24:59 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[1898661]: Authentication failure for admin from 49.36.201.237 Aug 21 11:25:10 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[1900713]: Authentication failure for admin from 49.36.201.237 ... show less	Web Spam
🇩🇪 konseptit	2026-08-21 08:26:02 (3 days ago)	(wordpress) Failed wordpress login from 49.36.201.237 (IN/India/-)	Brute-Force
🇩🇪 abdubhai	2026-08-21 05:13:01 (3 days ago)	49.36.201.237 - - [21/Aug/2026:1 ...	Brute-Force
🇮🇹 sssrit	2026-08-21 05:11:30 (3 days ago)	49.36.201.237 - - [21/Aug/2026:07:11:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 420 "-" "Jetpack by W ... show more 49.36.201.237 - - [21/Aug/2026:07:11:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 420 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" 49.36.201.237 - - [21/Aug/2026:07:11:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 420 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
Anonymous	2026-06-12 06:56:45 (2 months ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=oro24.gr; logs=/var/log/httpd/domains/oro24.gr.log; samples=/x ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=oro24.gr; logs=/var/log/httpd/domains/oro24.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-06-12 06:48:49 (2 months ago)	49.36.201.237 - - [12/Jun/2026:14:48:49 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.co ... show more 49.36.201.237 - - [12/Jun/2026:14:48:49 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" ... show less	Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-05-16 10:19:53 (3 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
Anonymous	2026-05-07 08:17:47 (3 months ago)	[redacted] 49.36.201.237 - - [07/May/2026:10:17:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "W ... show more [redacted] 49.36.201.237 - - [07/May/2026:10:17:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.36.201.237 - - [07/May/2026:10:17:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 49.36.201.237 - - [07/May/2026:10:17:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.36.201.237 - - [07/May/2026:10:17:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 49.36.201.237 - - [07/May/2026:10:17:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-30 08:20:29 (3 months ago)	(mod_security) mod_security (id:240335) triggered by 49.36.201.237 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 49.36.201.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 04:20:20.431864 2026] [security2:error] [pid 12919:tid 12919] [client 49.36.201.237:61128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.36.201.237 (+1 hits since last alert)\|fusteriafontane.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fusteriafontane.com"] [uri "/xmlrpc.php"] [unique_id "afMQxDIA4KAlC2ecSpdsGwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-19 15:15:02 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇪🇸 Global Cyber Police	2025-07-28 09:03:35 (1 year ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 170.78.119.219

🇸🇪 81.236.211.54

🇱🇹 213.176.26.109

🇪🇹 196.188.93.169

🇲🇽 129.222.91.154

🇰🇪 105.163.156.183

🇫🇷 91.231.89.175

🇳🇱 85.11.167.150

🇺🇸 74.206.84.193

🇮🇳 49.37.117.214

🇳🇱 45.153.34.43

🇧🇷 43.164.196.47

🇨🇦 20.48.147.90

🇻🇳 171.243.148.100

🇺🇸 162.216.18.178

🇮🇳 152.58.78.245

🇨🇳 123.158.61.153

🇨🇳 120.230.22.68

🇨🇳 118.212.123.83

🇧🇩 103.224.55.165