JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.43.132.61

49.43.132.61

Recent Activity

165 reports found in our database

5% ▲ ▲ ▲ Caution

Abuse confidence score ?

ISP

Reliance Jio Infocomm Limited

Usage Type

Fixed Line ISP

ASN

AS55836

Domain Name

jio.com

Country

🇮🇳 India

City

Gurugram, Haryana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 49.43.132.61:

This IP address has been reported a total of 165 times from 78 distinct sources. 49.43.132.61 was first reported on July 13th 2025, and the most recent report was 2 days ago. In the last 60 days, the only reporter location was: United States of America with 3 reports. The most common categories in these recent reports were: DDoS Attack 3 times; Bad Web Bot 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-09-07 08:19:18 (2 days ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_edition%3A505&f%5B1%5D=digest_key_terms%3A315&f%5B2%5D=digest_key_terms%3A507&f%5B3%5D=digest_key_terms%3A519&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B328%5D=328 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-27 04:00:54 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-12 12:47:46 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-05-12 07:11:42 (3 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇮🇳 evicky2002	2026-04-29 17:37:15 (4 months ago)	Confirmed malicious by STILWaters CTI (score≥85)	Hacking Brute-Force SSH
Anonymous	2026-04-17 15:54:31 (4 months ago)	(xmlrpc) Failed wordpress XMLRPC 49.43.132.61 (IN/India/-)	Brute-Force
🇨🇭 4server	2026-04-16 19:03:43 (4 months ago)	[ThuApr1621:03:27.3387312026][security2:error][pid2339763:tid2339798][client49.43.132.61:0]ModSecuri ... show more [ThuApr1621:03:27.3387312026][security2:error][pid2339763:tid2339798][client49.43.132.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"manishimwe.ch\"][uri\"/xmlrpc.php\"][unique_id\"aeEyfyDf4lHIveUJC-ZukQAAARc\"] show less	Hacking Web App Attack
🇺🇸 graphics-muse.org	2026-04-15 18:45:40 (4 months ago)	Wed Apr 15 12:45:30.318455 202649.43.132.61 - - [15/Apr/2026:11:22:47 -0600] "POST /xmlrpc.php HTTP/ ... show more Wed Apr 15 12:45:30.318455 202649.43.132.61 - - [15/Apr/2026:11:22:47 -0600] "POST /xmlrpc.php HTTP/1.1" 200 446 Wed Apr 15 12:45:30.318455 202649.43.132.61 - - [15/Apr/2026:11:22:47 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3378 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.0.0 Safari/537.36" Wed Apr 15 12:45:30.318455 202649.43.132.61 - - [15/Apr/2026:11:31:41 -0600] "POST /xmlrpc.php HTTP/1.1" 200 446 Wed Apr 15 12:45:30.318455 202649.43.132.61 - - [15/Apr/2026:11:31:41 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3378 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" Wed Apr 15 12:45:30.318455 202649.43.132.61 - - [15/Apr/2026:11:32:58 -0600] "POST /xmlrpc.php HTTP/1.1" 200 446 Wed Apr 15 12:45:30.318455 202649.43.132.61 - - [15/Apr/2026:11:32:58 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3378 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safa ... show less	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-04-15 07:14:51 (4 months ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 4server	2026-04-15 04:03:02 (4 months ago)	[WedApr1506:02:53.6169742026][security2:error][pid2502839:tid2502858][client49.43.132.61:0]ModSecuri ... show more [WedApr1506:02:53.6169742026][security2:error][pid2502839:tid2502858][client49.43.132.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"148\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prstartup.ch\"][uri\"/xmlrpc.php\"][unique_id\"ad8N7QNuCh2_SsH1CuUh0AAAABA\"] show less	Port Scan Brute-Force Web App Attack
🇸🇪 EmK530	2026-04-14 19:35:33 (4 months ago)	URL flagged by RegEx: /xmlrpc.php	Web App Attack
🇩🇪 ger-stg-sifi1	2026-04-14 10:51:39 (4 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 myagent.site	2026-04-14 08:59:38 (4 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇦🇹 Pingger Shikkoken	2026-04-14 07:33:40 (4 months ago)	2026-04-14T07:33:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-04-14T07:33:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=49.43.132.61 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=26056 DF PROTO=TCP SPT=60317 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-14T07:33:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=49.43.132.61 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=26057 DF PROTO=TCP SPT=60317 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-14T07:33:43+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=49.43.132.61 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=26058 DF PROTO=TCP SPT=60317 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot
🇩🇪 grassau.com	2026-04-13 21:02:55 (4 months ago)	(wordpress) Failed wordpress login from 49.43.132.61 (IN/India/Haryana/Ambāla/-)	Brute-Force

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4002:c2c::124

🇫🇷 2001:41d0:33a:a00::40e

🇦🇴 196.249.229.22

🇧🇩 180.210.130.30

🇻🇳 171.231.198.235

🇺🇬 154.72.204.131

🇨🇳 113.215.189.116

🇺🇸 108.46.229.102

🇺🇸 91.230.168.249

🇺🇸 2602:80d:1008::2b

🇺🇸 212.56.54.246

🇲🇳 202.72.241.31

🇺🇸 192.241.143.75

🇨🇴 190.121.143.165

🇮🇳 182.18.145.21

🇮🇳 125.23.204.74

🇮🇩 103.187.215.237

🇻🇳 103.74.122.88

🇷🇺 80.244.42.204

🇮🇩 49.0.3.142