49.156.22.238
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- PT Palapa Global Nusantara
- Usage Type
- Fixed Line ISP
- ASN
- AS134630
- Domain Name
- palapa.net.id
- Country
- 🇮🇩 Indonesia
- City
- Salatiga, Central Java
Abuse Reports
Total reports
26 from
17 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇴 clauss |
IP reached maximum auth failures for a one day block
|
Brute-Force | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-05 UTC.
|
Brute-Force | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
|
DDoS Attack | |
| 🇨🇿 Countryman |
repeated unauthorized VPN login attempt, user sweep
|
VPN IP Hacking Brute-Force | |
| 🇳🇴 cyruz |
Email login Brute force
|
Hacking Brute-Force | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-grease-mismatch)
|
DDoS Attack | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-platform-js-coercion)
|
DDoS Attack | |
| Anonymous |
| [Dangerous/Indonesia] Aggressive IP 49.156.22.238 (~30 hits). Type: DoS Defender- Web server 400 error code
|
Web App Attack Hacking SQL Injection | |
| 🇳🇱 GES |
Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.
|
DDoS Attack Port Scan | |
| 🇨🇿 lp |
Unauthorized VPN login attempts: 1 attempts were recorded from 49.156.22.238
2026-10-30T13:04:13+0100 vpn Access-Reject station: 49.156.22.238
|
Brute-Force Web App Attack | |
| 🇿🇦 vanderhost |
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-admin/ via rule: /wp-admin
|
Web App Attack Bad Web Bot | |
| 🇩🇪 LRob |
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 | 2026-10-28 01:45 UTC
|
Web App Attack Hacking | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-grease-mismatch)
|
DDoS Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown