JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.36.209.44

49.36.209.44 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 27%: ?

27%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Lucknow, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.36.209.44

Whois 49.36.209.44

IP Abuse Reports for 49.36.209.44:

This IP address has been reported a total of 10 times from 9 distinct sources. 49.36.209.44 was first reported on January 15th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Jason Howell	2026-08-30 08:38:37 (2 days ago)	49.36.209.44 - - [30/Aug/2026:03:36:10 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4356 "-" "Mozilla/5.0 ... show more 49.36.209.44 - - [30/Aug/2026:03:36:10 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4356 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/73.0.0.0 Safari/537.36" 49.36.209.44 - - [30/Aug/2026:03:36:58 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4357 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/77.0.0.0 Safari/537.36" 49.36.209.44 - - [30/Aug/2026:03:37:32 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4355 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/97.0.0.0 Safari/537.36" 49.36.209.44 - - [30/Aug/2026:03:38:04 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4355 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.0.0 Safari/537.36" 49.36.209.44 - - [30/Aug/2026:03:38:36 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4356 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/82.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 12:38:46 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 49.36.209.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 49.36.209.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 08:38:33.597586 2026] [security2:error] [pid 16239:tid 16239] [client 49.36.209.44:64531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|zost.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zost.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aow7SauXvRkWWCjDR74gNAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-24 10:15:11 (1 week ago)	(xmlrpc) Apache: Failed xmlrpc access from 49.36.209.44 (IN/India/-): 10 in the last 3600 secs (0-20 ... show more (xmlrpc) Apache: Failed xmlrpc access from 49.36.209.44 (IN/India/-): 10 in the last 3600 secs (0-201) show less	Hacking
🇺🇸 kosada.com	2026-07-20 06:02:21 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-10 07:56:28 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇳🇱 maxxsense	2026-03-26 08:27:56 (5 months ago)	49.36.209.44 (IN/India/-), 12 distributed imapd attacks on account [redacted]	Brute-Force
Anonymous	2024-07-30 02:39:07 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-28 03:51:53 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇬🇧 Bytemark	2024-02-11 02:37:46 (2 years ago)	49.36.209.44 - - [11/Feb/2024:02:37:45 +0000] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 ( ... show more 49.36.209.44 - - [11/Feb/2024:02:37:45 +0000] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 49.36.209.44 - - [11/Feb/2024:02:37:45 +0000] "GET /xmlrpc.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 49.36.209.44 - - [11/Feb/2024:02:37:45 +0000] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Brute-Force Web App Attack
Anonymous	2022-01-15 00:59:13 (4 years ago)	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ... show more Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools show less	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:3c01::2000:c4ff:fe7c:8db6

🇺🇸 172.71.158.215

🇺🇸 147.185.132.48

🇰🇷 123.212.9.122

🇵🇰 110.38.7.226

🇬🇧 83.104.211.213

🇺🇸 35.237.181.53

🇩🇪 34.89.200.160

🇺🇸 216.25.89.149

🇷🇺 213.109.204.191

🇧🇪 207.175.158.75

🇮🇳 202.141.104.59

🇬🇭 197.253.114.166

🇨🇴 181.62.56.67

🇮🇳 152.58.191.62

🇨🇳 121.15.140.235

🇮🇳 110.173.190.221

🇫🇷 104.23.225.147

🇫🇷 104.23.225.146

🇸🇬 103.250.10.42