JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.47.131.138

49.47.131.138 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 34%: ?

34%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Patna, Bihar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.47.131.138

Whois 49.47.131.138

IP Abuse Reports for 49.47.131.138:

This IP address has been reported a total of 9 times from 6 distinct sources. 49.47.131.138 was first reported on October 18th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 11:42:34 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 49.47.131.138 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 49.47.131.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 07:42:23.641472 2026] [security2:error] [pid 3927:tid 3927] [client 49.47.131.138:63435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.47.131.138 (+1 hits since last alert)\|greensandbeans.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greensandbeans.us"] [uri "/xmlrpc.php"] [unique_id "akjxn0R69-r3FNmHIqrCzAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-04 11:40:12 (4 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
🇪🇸 SweetHoneyPress	2026-07-04 11:23:38 (4 days ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=989900 \| UA: Jetpack/12.1; WordPress/6.4; http:// ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=989900 \| UA: Jetpack/12.1; WordPress/6.4; http://site91794535.com show less	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-07-04 11:13:50 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 49.47.131.138 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 49.47.131.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 07:13:41.220454 2026] [security2:error] [pid 28305:tid 28305] [client 49.47.131.138:54698] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.47.131.138 (+1 hits since last alert)\|odinathletes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odinathletes.com"] [uri "/xmlrpc.php"] [unique_id "akjq5f4EQRemMtOPYWCvzwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 SweetHoneyPress	2026-07-04 11:08:33 (4 days ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=989810 \| UA: Jetpack by WordPress.com	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-07-04 10:42:23 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 49.47.131.138 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 49.47.131.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 06:42:11.069524 2026] [security2:error] [pid 5461:tid 5461] [client 49.47.131.138:52398] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.47.131.138 (+1 hits since last alert)\|climasyequipos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "climasyequipos.com"] [uri "/xmlrpc.php"] [unique_id "akjjgzcpCzPJsu-0r-TfjQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-04 07:44:48 (4 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
Anonymous	2026-07-04 07:29:45 (4 days ago)	[ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.sigasigacollective.com; logs=/var/log/httpd/domains/siga ... show more [ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.sigasigacollective.com; logs=/var/log/httpd/domains/sigasigacollective.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2024-10-18 17:21:00 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.195

🇺🇸 198.46.211.159

🇳🇱 193.176.31.154

🇲🇽 189.190.244.176

🇺🇸 147.185.132.145

🇦🇷 138.117.14.164

🇺🇸 64.62.156.14

🇺🇸 2607:f8b0:400e:c09::12a

🇺🇸 2604:a880:2:d1:0:1:51dc:7001

🇺🇸 74.7.241.153

🇺🇸 47.251.249.8

🇺🇸 44.222.32.255

🇺🇸 44.217.248.103

🇵🇰 39.63.250.53

🇫🇷 2001:41d0:33d:9200::40e

🇦🇷 181.104.2.87

🇹🇭 150.95.31.39

🇺🇸 147.185.132.231

🇹🇼 118.163.219.199

🇹🇼 111.70.32.11