JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.43.140.144

Neutral Activity

Abuse Confidence Score

0% Low Risk

74 reports

43 reporters · latest 9 months ago

ISP: Reliance Jio Infocomm Limited
Usage Type: Fixed Line ISP
ASN: AS55836
Domain Name: jio.com
Country: 🇮🇳 India
City: Shimla, Himachal Pradesh

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.43.140.144 has been reported 74 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

74 from 43 distinct reporters

First reported

November 24th 2025

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-01-24 20:11:12 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-01-23 20:11:11 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-01-22 13:39:35 UTC · (9 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-01-22 09:58:15 UTC · (9 months ago)	Try to access /xmlrpc.php	Web App Attack
🇹🇷 rtbh.com.tr	2026-01-21 20:11:08 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-01-20 20:11:07 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2026-01-20 18:39:10 UTC · (9 months ago)	(mod_security) mod_security (id:225170) triggered by 49.43.140.144 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 13:39:00.064636 2026] [security2:error] [pid 25350:tid 25350] [client 49.43.140.144:56134] M ... show more (mod_security) mod_security (id:225170) triggered by 49.43.140.144 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 13:39:00.064636 2026] [security2:error] [pid 25350:tid 25350] [client 49.43.140.144:56134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ardeeapps.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ardeeapps.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW_LxDl7kxfxpFt-hmmoKwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 16:31:37 UTC · (9 months ago)	(mod_security) mod_security (id:225170) triggered by 49.43.140.144 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 11:31:26.664707 2026] [security2:error] [pid 10037:tid 10037] [client 49.43.140.144:56716] M ... show more (mod_security) mod_security (id:225170) triggered by 49.43.140.144 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 11:31:26.664707 2026] [security2:error] [pid 10037:tid 10037] [client 49.43.140.144:56716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|velocitymech.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "velocitymech.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW-t3uFhyUrOHB_sQ1FR8wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 14:41:51 UTC · (9 months ago)	(mod_security) mod_security (id:225170) triggered by 49.43.140.144 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 09:41:42.526337 2026] [security2:error] [pid 12953:tid 13026] [client 49.43.140.144:61199] M ... show more (mod_security) mod_security (id:225170) triggered by 49.43.140.144 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 09:41:42.526337 2026] [security2:error] [pid 12953:tid 13026] [client 49.43.140.144:61199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tsengkwongchi.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tsengkwongchi.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW-UJk4HS1IV1sYlhdKDfwAAAZY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 12:37:59 UTC · (9 months ago)	(mod_security) mod_security (id:225170) triggered by 49.43.140.144 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 07:37:49.888156 2026] [security2:error] [pid 32412:tid 32412] [client 49.43.140.144:54956] M ... show more (mod_security) mod_security (id:225170) triggered by 49.43.140.144 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 07:37:49.888156 2026] [security2:error] [pid 32412:tid 32412] [client 49.43.140.144:54956] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sharonmauldin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharonmauldin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW93HV-6H2hPjx5kLI1O6QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-01-18 20:07:01 UTC · (9 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇺🇸 myagent.site	2026-01-17 14:24:24 UTC · (9 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇫🇷 Baking333	2026-01-17 13:41:18 UTC · (9 months ago)	[redacted] 49.43.140.144 - - [17/Jan/2026:14:41:15 +0100] "POST /[redacted] HTTP/1.1" 405 4877 0/38431 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/97.0.0.0 Safari/537.36" [redacted] 49.43.140.144 - - [17/Ja ... show more [redacted] 49.43.140.144 - - [17/Jan/2026:14:41:15 +0100] "POST /[redacted] HTTP/1.1" 405 4877 0/38431 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/97.0.0.0 Safari/537.36" [redacted] 49.43.140.144 - - [17/Jan/2026:14:41:17 +0100] "POST /[redacted] HTTP/1.1" 405 4877 0/40863 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/80.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇮🇩 securejdprop	2026-01-09 15:41:46 UTC · (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇩🇪 ger-stg-sifi1	2026-01-09 07:33:56 UTC · (10 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 188.240.59.49

🇸🇬 172.70.208.24

🇺🇸 162.216.149.10

🇬🇧 89.37.172.140

🇺🇸 87.81.224.62

🇳🇱 64.205.72.223

🇨🇳 36.104.144.114

🇸🇬 172.70.208.25

🇩🇪 151.243.11.31

🇨🇳 119.147.86.35

🇺🇸 93.177.119.211

🇺🇦 93.170.128.107

🇬🇧 89.37.172.157

🇩🇪 69.5.169.144

🇲🇾 49.124.153.4

🇸🇬 47.128.38.93

🇺🇸 20.29.42.53

🇺🇸 12.156.67.18

🇸🇬 199.235.129.252

🇺🇸 172.58.11.120