JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.37.134.94

49.37.134.94 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 34%: ?

34%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.37.134.94

Whois 49.37.134.94

IP Abuse Reports for 49.37.134.94:

This IP address has been reported a total of 12 times from 9 distinct sources. 49.37.134.94 was first reported on August 1st 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-03 16:42:50 (1 hour ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 Teufel100	2026-07-03 15:39:14 (2 hours ago)	Brutforceangriff auf /xmlrpc.php	Brute-Force Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 04:04:29 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 49.37.134.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 49.37.134.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 00:04:13.178212 2026] [security2:error] [pid 7744:tid 7744] [client 49.37.134.94:55410] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.37.134.94 (+1 hits since last alert)\|themadwriter.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "themadwriter.us"] [uri "/xmlrpc.php"] [unique_id "ajDLPXGmwFpl_6OyFV7g1gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-06-13 09:09:01 (2 weeks ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 07:12:55 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 49.37.134.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 49.37.134.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:12:46.595319 2026] [security2:error] [pid 28295:tid 28295] [client 49.37.134.94:51978] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.37.134.94 (+1 hits since last alert)\|michelehoop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michelehoop.com"] [uri "/xmlrpc.php"] [unique_id "ai0C7u321QvCJCVsV9wGwAAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-13 05:13:10 (2 weeks ago)	Attac	Brute-Force
🇺🇸 cwytech	2026-06-13 04:04:57 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇨🇿 antihack.anarchista.xyz	2026-06-08 15:47:12 (3 weeks ago)	Brute-force login: 5 fails in 10 min, last user "admin", URI /xmlrpc.php, UA Jetpack by WordPress.co ... show more Brute-force login: 5 fails in 10 min, last user "admin", URI /xmlrpc.php, UA Jetpack by WordPress.com show less	Brute-Force Web App Attack Bad Web Bot
Anonymous	2025-08-11 10:16:30 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-08-09 20:28:06 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 Jason Howell	2025-08-07 15:53:23 (10 months ago)	49.37.134.94 - - [07/Aug/2025:09:55:06 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Mozilla/5.0 ... show more 49.37.134.94 - - [07/Aug/2025:09:55:06 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 49.37.134.94 - - [07/Aug/2025:09:56:53 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3218 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" 49.37.134.94 - - [07/Aug/2025:10:50:33 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 49.37.134.94 - - [07/Aug/2025:10:51:58 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 49.37.134.94 - - [07/Aug/2025:10:53:22 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2025-08-01 08:51:41 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.246.229

🇬🇭 179.64.71.178

🇺🇸 147.185.132.125

🇮🇩 103.134.222.110

🇬🇧 87.236.176.139

🇳🇱 45.156.128.156

🇺🇸 20.65.193.163

🇨🇳 111.229.210.165

🇰🇪 102.210.148.41

🇺🇸 2604:a880:2:d1:0:1:51e7:f001

🇩🇪 213.209.159.238

🇫🇷 185.202.223.107

🇺🇸 74.209.148.55

🇬🇧 5.252.83.184

🇮🇳 135.235.138.43

🇨🇳 116.179.37.132

🇺🇸 109.105.209.3

🇺🇸 45.132.115.17

🇺🇸 45.74.252.153

🇧🇾 37.212.90.192