JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.47.135.227

49.47.135.227 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 71%: ?

71%

ISP	Reliance Jio Infocomm Limited
Usage Type	Fixed Line ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Patna, Bihar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.47.135.227

Whois 49.47.135.227

IP Abuse Reports for 49.47.135.227:

This IP address has been reported a total of 19 times from 13 distinct sources. 49.47.135.227 was first reported on July 27th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-07-30 09:14:03 (8 hours ago)	Wordfence waf block on fairregistry	Web App Attack
🇫🇷 dynamix	2026-07-30 08:19:03 (9 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-07-30 06:32:12 (11 hours ago)	Wordpress_xmlrpc_attack	Bad Web Bot
🇳🇱 tmiland	2026-07-30 06:24:28 (11 hours ago)	(wordpress_xmlrpc) WordPress XMLPRC Attack 49.47.135.227 (IN/India/-): 3 in the last 3600 secs; IP: ... show more (wordpress_xmlrpc) WordPress XMLPRC Attack 49.47.135.227 (IN/India/-): 3 in the last 3600 secs; IP: 49.47.135.227; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 49.47.135.227 - - [30/Jul/2026:08:24:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" 49.47.135.227 - - [30/Jul/2026:08:24:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" 49.47.135.227 - - [30/Jul/2026:08:24:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com" show less	Brute-Force
🇫🇷 tecnicorioja	2026-07-29 22:01:29 (19 hours ago)	POST /xmlrpc.php [29/Jul/2026:03:32:28	Brute-Force Web App Attack
Anonymous	2026-07-29 07:00:00 (1 day ago)	Automated Apache web application probing in selected 24h window; attempts=243, unique_paths=1, error ... show more Automated Apache web application probing in selected 24h window; attempts=243, unique_paths=1, error_responses=243; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 day ago)	Apache probe; attempts=548; exact paths: /xmlrpc.php	Web App Attack
🇫🇷 dynamix	2026-07-29 05:40:33 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 debestelapp	2026-07-28 11:40:05 (2 days ago)		Web App Attack
Anonymous	2026-07-28 05:51:01 (2 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇮 KnightIndustries	2026-07-28 04:43:42 (2 days ago)	2026-07-28T06:43:20.175021+02:00 milkyway wordpress(oldscarborough.com)[932479]: XML-RPC authenticat ... show more 2026-07-28T06:43:20.175021+02:00 milkyway wordpress(oldscarborough.com)[932479]: XML-RPC authentication failure for joshua from 49.47.135.227 2026-07-28T06:43:31.141622+02:00 milkyway wordpress(oldscarborough.com)[927935]: XML-RPC authentication failure for joshua from 49.47.135.227 2026-07-28T06:43:41.819634+02:00 milkyway wordpress(oldscarborough.com)[928501]: XML-RPC authentication failure for joshua from 49.47.135.227 ... show less	Brute-Force Web App Attack
🇫🇮 KnightIndustries	2026-07-27 15:52:00 (3 days ago)	2026-07-27T17:51:38.632201+02:00 milkyway wordpress(oldscarborough.com)[870605]: XML-RPC authenticat ... show more 2026-07-27T17:51:38.632201+02:00 milkyway wordpress(oldscarborough.com)[870605]: XML-RPC authentication failure for joshua from 49.47.135.227 2026-07-27T17:51:49.279914+02:00 milkyway wordpress(oldscarborough.com)[870805]: XML-RPC authentication failure for joshua from 49.47.135.227 2026-07-27T17:52:00.178020+02:00 milkyway wordpress(oldscarborough.com)[867541]: XML-RPC authentication failure for joshua from 49.47.135.227 ... show less	Brute-Force Web App Attack
🇫🇷 Kenshin869	2026-07-24 08:39:10 (6 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-07-21 07:06:50 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 49.47.135.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 49.47.135.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 03:06:35.396687 2026] [security2:error] [pid 2129269:tid 2129269] [client 49.47.135.227:57236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 49.47.135.227 (+1 hits since last alert)\|iostation.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iostation.com"] [uri "/xmlrpc.php"] [unique_id "al8aexwqgq32wFVktCaOkgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-20 07:10:01 (1 week ago)	49.47.135.227 - - [20/Jul/2026:03:08:12 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.c ... show more 49.47.135.227 - - [20/Jul/2026:03:08:12 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" 49.47.135.227 - - [20/Jul/2026:03:08:23 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" 49.47.135.227 - - [20/Jul/2026:03:08:55 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" 49.47.135.227 - - [20/Jul/2026:03:09:49 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" 49.47.135.227 - - [20/Jul/2026:03:10:00 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.176.26.77

🇺🇸 172.172.170.199

🇺🇸 162.216.150.100

🇺🇸 147.185.132.172

🇹🇼 114.32.151.97

🇺🇸 66.132.186.196

🇻🇳 180.93.172.213

🇸🇪 171.25.158.82

🇺🇸 136.113.243.4

🇳🇱 91.92.40.124

🇭🇰 58.152.88.226

🇯🇵 43.153.147.91

🇵🇱 20.215.191.139

🇨🇴 204.157.147.25

🇬🇧 154.16.44.213

🇳🇱 138.226.239.12

🇨🇳 115.211.139.230

🇻🇳 103.200.23.107

🇺🇦 95.46.141.107

🇳🇱 85.11.167.16