AbuseIPDB » 49.37.72.117
49.37.72.117
This IP was reported 9 times. Confidence of
Abuse
is 21% : ?
ISP
Reliance Jio Infocomm Limited
Usage Type
Fixed Line ISP
ASN
AS55836
Domain Name
jio.com
Country
🇮🇳
India
City
Jamshedpur, Jharkhand
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 49.37.72.117 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
49.37.72.117 was first reported on
January 3rd 2023 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-29 07:00:00
(3 days ago)
Automated Apache web application probing in selected 24h window; attempts=82, unique_paths=1, error_ ...
show more
Automated Apache web application probing in selected 24h window; attempts=82, unique_paths=1, error_responses=82; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths.
show less
Web App Attack
2026-07-29 07:00:00
(3 days ago)
Apache probe; attempts=82; exact paths: /xmlrpc.php
Web App Attack
🇺🇸
IndigoRidge
2026-07-28 08:44:04
(4 days ago)
49.37.72.117 - - [28/Jul/2026:04:43:26 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.co ...
show more
49.37.72.117 - - [28/Jul/2026:04:43:26 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com"
49.37.72.117 - - [28/Jul/2026:04:43:39 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5782 "-" "WordPress.com; https://wordpress.com"
49.37.72.117 - - [28/Jul/2026:04:43:43 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com"
49.37.72.117 - - [28/Jul/2026:04:43:52 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com"
49.37.72.117 - - [28/Jul/2026:04:44:03 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
🇫🇷
bigorre.org
2026-07-21 15:40:41
(1 week ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇸🇪
Johan Finn
2025-07-06 06:37:10
(1 year ago)
malicious activity, botnet
Web App Attack
🇺🇸
TPI-Abuse
2024-10-07 15:11:56
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 49.37.72.117 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 49.37.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 11:11:50.657777 2024] [security2:error] [pid 10101:tid 10101] [client 49.37.72.117:51293] [client 49.37.72.117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nwtree.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nwtree.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZwP6NnDCRh_998WjsxFlrgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-07-22 02:34:59
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-07-21 01:25:12
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇿🇦
maximonline.co.za
2023-01-03 17:32:43
(3 years ago)
Attempts at SQL injection.
SQL Injection
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: