JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.43.132.120

49.43.132.120 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 0%: ?

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Jhajjar, Haryana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.43.132.120

Whois 49.43.132.120

IP Abuse Reports for 49.43.132.120:

This IP address has been reported a total of 105 times from 69 distinct sources. 49.43.132.120 was first reported on November 26th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-01 01:59:30 (4 months ago)	(xmlrpc) Apache: Failed xmlrpc access from 49.43.132.120 (IN/India/-): 10 in the last 3600 secs (0-2 ... show more (xmlrpc) Apache: Failed xmlrpc access from 49.43.132.120 (IN/India/-): 10 in the last 3600 secs (0-201) show less	Hacking
🇳🇱 Site.eu	2026-05-31 21:51:06 (4 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇬🇧 noise.agency	2026-05-31 11:26:51 (4 months ago)	(wordpress) Failed wordpress login from 49.43.132.120 (IN/India/-)	Brute-Force
🇺🇸 lostswordfish.com	2026-05-31 07:24:03 (4 months ago)	Wordfence waf block on taussigtravel	Web App Attack
🇺🇸 moppetto	2026-05-31 04:15:31 (4 months ago)	XMLRPC vulnerability prober; POST /xmlrpc.php	Bad Web Bot Web App Attack
🇺🇸 Jason Howell	2026-05-31 00:28:16 (4 months ago)	49.43.132.120 - - [30/May/2026:19:22:18 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3401 "-" "Mozilla/5.0 ... show more 49.43.132.120 - - [30/May/2026:19:22:18 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3401 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/61.0.0.0 Safari/537.36" 49.43.132.120 - - [30/May/2026:19:26:48 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3401 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.0.0 Safari/537.36" 49.43.132.120 - - [30/May/2026:19:27:16 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3402 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/96.0.0.0 Safari/537.36" 49.43.132.120 - - [30/May/2026:19:27:48 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3400 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/97.0.0.0 Safari/537.36" 49.43.132.120 - - [30/May/2026:19:28:16 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3402 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇭 4server	2026-05-30 08:35:13 (4 months ago)	[SatMay3010:35:04.4418502026][security2:error][pid1604623:tid1604860][client49.43.132.120:0]ModSecur ... show more [SatMay3010:35:04.4418502026][security2:error][pid1604623:tid1604860][client49.43.132.120:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"cadvending.ch\"][uri\"/xmlrpc.php\"][unique_id\"ahqhOGbFNnZxJrCHUF54ngAAARM\"] show less	Hacking Web App Attack
Anonymous	2026-05-30 06:20:05 (4 months ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=anyfantis.gr; logs=/var/log/httpd/domains/anyfantis.gr.log; sa ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=anyfantis.gr; logs=/var/log/httpd/domains/anyfantis.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-05-29 05:46:13 (4 months ago)	(wordpress) Failed wordpress login from 49.43.132.120 (IN/India/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-05-29 04:57:04 (4 months ago)	Blocked by siteaihub.com: live autoban: immediate: /xmlrpc.php	Web App Attack Hacking
🇩🇪 4server	2026-05-28 11:06:29 (4 months ago)	[ThuMay2813:06:21.8298062026][security2:error][pid531921:tid531998][client49.43.132.120:0]ModSecurit ... show more [ThuMay2813:06:21.8298062026][security2:error][pid531921:tid531998][client49.43.132.120:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"noleggi.ch\"][uri\"/xmlrpc.php\"][unique_id\"ahghrd_B3O5ErLsVFVXBjgAAAJA\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 ambor	2026-05-28 09:56:31 (4 months ago)	Honeypot access: WordPress XML-RPC attack attempt. Path: /xmlrpc.php	Brute-Force Web App Attack
Anonymous	2026-05-28 09:46:00 (4 months ago)	Fail2ban filtered ...	Web App Attack
Anonymous	2026-05-27 05:21:38 (4 months ago)	49.43.132.120 - - [27/May/2026:07:21:37 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Lin ... show more 49.43.132.120 - - [27/May/2026:07:21:37 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/64.0.0.0 Safari/537.36" show less	Web App Attack
🇬🇧 andypiper	2026-05-27 01:00:28 (4 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 213.132.126.45

🇺🇸 147.185.132.81

🇵🇰 119.152.236.190

🇰🇷 111.118.115.20

🇭🇰 103.146.159.173

🇫🇷 91.196.152.89

🇫🇷 45.90.163.37

🇳🇱 35.204.147.187

🇺🇸 91.230.168.218

🇺🇸 75.80.65.214

🇮🇷 2.180.6.8

🇮🇶 185.158.22.150

🇻🇳 103.167.89.222

🇱🇹 62.60.130.173

🇹🇭 203.154.158.195

🇩🇪 201.79.9.130

🇳🇱 185.223.235.62

🇺🇸 172.84.100.13

🇩🇪 109.160.32.40

🇱🇾 102.215.196.206