JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.47.130.44

49.47.130.44 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 75%: ?

75%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Patna, Bihar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.47.130.44

Whois 49.47.130.44

IP Abuse Reports for 49.47.130.44:

This IP address has been reported a total of 26 times from 20 distinct sources. 49.47.130.44 was first reported on December 19th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TAY	2026-07-16 14:54:03 (15 hours ago)	49.47.130.44 - - [16/Jul/2026:22:53:40 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5893 "-" "Jetpack by W ... show more 49.47.130.44 - - [16/Jul/2026:22:53:40 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5893 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 49.47.130.44 - - [16/Jul/2026:22:53:58 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5893 "-" "Jetpack/12.5; WordPress/6.1; http://site21876950.com" 49.47.130.44 - - [16/Jul/2026:22:54:02 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5893 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" ... show less	Brute-Force
🇺🇸 lostswordfish.com	2026-07-15 14:38:03 (1 day ago)	Wordfence waf block on flintlocal432	Web App Attack
🇩🇪 ghostwarriors	2026-07-15 13:50:41 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 13:49:42 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-15 12:08:05 (1 day ago)	(xmlrpc) Failed xmlrpc access from 49.47.130.44 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
Anonymous	2026-07-15 11:41:04 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 09:01:59 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 49.47.130.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 49.47.130.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 05:01:45.893153 2026] [security2:error] [pid 13336:tid 13393] [client 49.47.130.44:58700] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.47.130.44 (+1 hits since last alert)\|pilargarciamanzanares.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pilargarciamanzanares.com"] [uri "/xmlrpc.php"] [unique_id "aldMeW0LBg-hIw_lRPEQKwAAAYc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 08:33:07 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 49.47.130.44 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 49.47.130.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 04:32:56.852475 2026] [security2:error] [pid 11525:tid 11525] [client 49.47.130.44:57824] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.47.130.44 (+1 hits since last alert)\|36sovereignchambers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "36sovereignchambers.com"] [uri "/xmlrpc.php"] [unique_id "aldFuLSoKd1KJ3zSBnYbYAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-07-13 12:33:31 (3 days ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇩🇪 abdubhai	2026-07-09 05:09:48 (1 week ago)	49.47.130.44 - - [09/Jul/2026:10 ...	Brute-Force
🇹🇷 ycoskun41	2026-07-09 05:05:13 (1 week ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇪🇸 SweetHoneyPress	2026-07-07 13:49:46 (1 week ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1002307 \| UA: Jetpack by WordPress.com (Jetpack 1 ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=1002307 \| UA: Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4) show less	Web App Attack Brute-Force
🇪🇸 SweetHoneyPress	2026-07-07 13:34:41 (1 week ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1002236 \| UA: Jetpack by WordPress.com	Web App Attack Brute-Force
Anonymous	2026-07-07 13:01:12 (1 week ago)	[web.zebs.ch] httpd-xmlrpc-post: sites=www.asiqual.com; logs=/var/log/httpd/domains/asiqual.com.log; ... show more [web.zebs.ch] httpd-xmlrpc-post: sites=www.asiqual.com; logs=/var/log/httpd/domains/asiqual.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇩🇪 konseptit	2026-07-07 11:48:15 (1 week ago)	(wordpress) Failed wordpress login from 49.47.130.44 (IN/India/-)	Brute-Force

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 159.203.0.224

🇵🇰 153.117.34.154

🇸🇬 146.190.100.172

🇸🇬 128.199.241.199

🇸🇬 94.231.206.159

🇺🇸 69.74.29.21

🇩🇪 69.5.169.176

🇺🇸 66.132.186.134

🇬🇧 2a06:4880:2000::26

🇭🇰 199.45.154.127

🇧🇪 198.235.24.185

🇩🇪 151.243.11.233

🇨🇳 119.51.242.3

🇭🇰 112.120.171.95

🇫🇷 91.231.89.76

🇨🇦 85.217.149.66

🇩🇪 69.5.169.236

🇩🇪 69.5.169.178

🇺🇸 66.132.186.131

🇮🇹 45.91.20.121