JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.36.81.90

Neutral Activity

Abuse Confidence Score

0% Low Risk

23 reports

18 reporters · latest 2 months ago

ISP: Reliance Jio Infocomm Limited
Usage Type: Fixed Line ISP
ASN: AS55836
Domain Name: jio.com
Country: 🇮🇳 India
City: Vadodara, Gujarat

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.36.81.90 has been reported 23 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

23 from 18 distinct reporters

First reported

February 18th 2024

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-15 13:10:05 UTC · (2 months ago)	Bot / scanning and/or hacking attempts: GET /xmlrpc.php HTTP/1.1, POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
Anonymous	2026-08-15 10:58:08 UTC · (3 months ago)	[redacted] 49.36.81.90 - - [15/Aug/2026:12:57:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.36.81.90 - - [15/Aug/2026:12:57:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; Wor ... show more [redacted] 49.36.81.90 - - [15/Aug/2026:12:57:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.36.81.90 - - [15/Aug/2026:12:57:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.1; http://site35278489.com" [redacted] 49.36.81.90 - - [15/Aug/2026:12:57:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 49.36.81.90 - - [15/Aug/2026:12:57:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 49.36.81.90 - - [15/Aug/2026:12:58:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site18499308.com" ... show less	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-08-15 09:48:08 UTC · (3 months ago)	49.36.81.90 - - [15/Aug/2026:05:46:21 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5088 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/81.0.0.0 Safari/537.36" 49.36.81.90 - - [15/Aug/2026:05:46:50 -0400] "POST /xmlrpc.ph ... show more 49.36.81.90 - - [15/Aug/2026:05:46:21 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5088 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/81.0.0.0 Safari/537.36" 49.36.81.90 - - [15/Aug/2026:05:46:50 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5088 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36" 49.36.81.90 - - [15/Aug/2026:05:47:19 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5088 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.0.0 Safari/537.36" 49.36.81.90 - - [15/Aug/2026:05:47:51 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5088 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/85.0.0.0 Safari/537.36" 49.36.81.90 - - [15/Aug/2026:05:48:07 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5088 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 abdubhai	2026-08-15 08:02:56 UTC · (3 months ago)	49.36.81.90 - - [15/Aug/2026:13: ...	Brute-Force
🇩🇪 abdubhai	2026-08-15 07:08:39 UTC · (3 months ago)	49.36.81.90 - - [15/Aug/2026:12: ...	Brute-Force
🇫🇷 dynamix	2026-08-15 05:26:46 UTC · (3 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-08-12 11:20:31 UTC · (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-08-12 11:02:58 UTC · (3 months ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
Anonymous	2026-07-07 11:41:27 UTC · (4 months ago)	[ssd1.kdns.gr] httpd-xmlrpc-post: sites=www.filoixenofontos.gr; logs=/var/log/httpd/domains/filoixenofontos.gr.log; samples=/xmlrpc.php	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-04-03 06:45:49 UTC · (7 months ago)	Web App Attack	Web App Attack
🇺🇸 johnkarlhill	2026-03-11 01:13:14 UTC · (8 months ago)	WebKnight blocked malicious web request on johnkarlhill.com	Brute-Force SSH
🇫🇷 Sklurk	2025-08-11 11:53:47 UTC · (1 year ago)	Web App Attack	Web App Attack
🇺🇸 Psycho Solutions LLC	2024-05-15 11:57:28 UTC · (2 years ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 5/15/2024 6:57 am (UTC-6)	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2024-05-15 07:44:40 UTC · (2 years ago)	(sshd) Failed SSH login from 49.36.81.90 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 15 02:44:20 13308 sshd[7934]: Invalid user [email protected] from 49.36.81.90 port 57476 May 15 02:44:22 13308 sshd[7 ... show more (sshd) Failed SSH login from 49.36.81.90 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 15 02:44:20 13308 sshd[7934]: Invalid user [email protected] from 49.36.81.90 port 57476 May 15 02:44:22 13308 sshd[7934]: Failed password for invalid user [email protected] from 49.36.81.90 port 57476 ssh2 May 15 02:44:24 13308 sshd[7936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.36.81.90 user=root May 15 02:44:25 13308 sshd[7936]: Failed password for root from 49.36.81.90 port 58931 ssh2 May 15 02:44:27 13308 sshd[7974]: Invalid user jshen from 49.36.81.90 port 58636 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2024-05-15 07:21:21 UTC · (2 years ago)	(smtpauth) Failed SMTP AUTH login from 49.36.81.90 (IN/India/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-05-15 03:18:08 dovecot_plain authenticator failed for (COMPUTER) [49.36.81.90]:51645: 535 Inco ... show more (smtpauth) Failed SMTP AUTH login from 49.36.81.90 (IN/India/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-05-15 03:18:08 dovecot_plain authenticator failed for (COMPUTER) [49.36.81.90]:51645: 535 Incorrect authentication data (set_id=abby) 2024-05-15 03:18:12 dovecot_plain authenticator failed for (COMPUTER) [49.36.81.90]:53081: 535 Incorrect authentication data ([email protected]) 2024-05-15 03:18:16 dovecot_plain authenticator failed for (COMPUTER) [49.36.81.90]:54240: 535 Incorrect authentication data (set_id=abby) 2024-05-15 03:18:16 SMTP call from [49.36.81.90]:55050 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?", NULL) 2024-05-15 03:21:20 dovecot_plain authenticator failed for (COMPUTER) [49.36.81.90]:51621: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 185.194.178.74

🇬🇧 45.133.173.156

🇺🇿 213.230.127.104

🇧🇷 201.86.42.211

🇫🇷 185.194.178.104

🇳🇱 176.65.148.114

🇺🇸 129.121.75.215

🇱🇻 84.15.223.18

🇷🇺 46.44.0.185

🇺🇸 35.193.221.181

🇺🇸 34.75.13.133

🇧🇪 34.38.26.98

🇺🇸 34.24.196.48

🇸🇬 34.21.241.247

🇺🇸 162.216.150.201

🇺🇸 152.163.242.204

🇫🇷 147.135.252.179

🇧🇷 131.161.47.199

🇵🇭 124.105.27.80

🇨🇳 106.117.110.82