JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.156.22.70

49.156.22.70 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 23%: ?

23%

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS134630
Hostname(s)	ip-70.22.156.49.palapa.net.id
Domain Name	apnic.net
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.156.22.70

Whois 49.156.22.70

IP Abuse Reports for 49.156.22.70:

This IP address has been reported a total of 14 times from 11 distinct sources. 49.156.22.70 was first reported on August 22nd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-10 15:30:11 (1 week ago)	1000 limiting connections by zone (10m59s)	DDoS Attack
🇨🇦 leithzz	2026-05-25 11:28:24 (4 weeks ago)	Report by Cloudflare.Time: 2026-05-25T11:27:40Z	DDoS Attack
🇫🇷 MatStef132	2026-05-22 14:04:06 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇷🇴 Fn4ticHz	2026-05-09 14:01:24 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇸 COMPLEX	2026-05-08 15:49:20 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:149.0) Gecko/149.0 Firefox/149.0 show less	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2026-04-26 08:29:55 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2026-04-10 05:17:25 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:06:16 (2 months ago)	49.156.22.70 - - [05/Apr/2026:16:32:11 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp. ... show more 49.156.22.70 - - [05/Apr/2026:16:32:11 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 49.156.22.70 - - [05/Apr/2026:16:48:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 49.156.22.70 - - [05/Apr/2026:16:49:40 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 49.156.22.70 - - [05/Apr/2026:16:51:44 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 49.156.22.70 - - [05/Apr/2026:16:52:48 +0200] "GET /web/login HTTP/1.1" 499 0 "https://shop.SpppI.biz/search" "Mozilla/5. ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:52:53 (2 months ago)	49.156.22.70 - - [05/Apr/2026:16:48:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia ... show more 49.156.22.70 - - [05/Apr/2026:16:48:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 49.156.22.70 - - [05/Apr/2026:16:49:40 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 49.156.22.70 - - [05/Apr/2026:16:49:40 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 49.156.22.70 - - [05/Apr/2026:16:51:44 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 49.156.22.70 - - [05/Apr/2026:16:51:44 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Macintosh; Intel Mac ... show less	DDoS Attack
🇮🇳 liveaspankaj	2026-04-04 22:12:28 (2 months ago)	DDoS attack: 69 requests in 5m (GET / or repair.php).	DDoS Attack
Anonymous	2026-03-24 23:00:16 (2 months ago)	\| [Dangerous/Indonesia] Aggressive IP 49.156.22.70 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Indonesia] Aggressive IP 49.156.22.70 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 COMPLEX	2026-03-17 18:27:01 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0 show less	DDoS Attack Bad Web Bot
🇵🇱 IROK	2026-01-28 22:30:05 (4 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇮🇩 hermawan	2025-08-22 13:48:04 (10 months ago)	[Fri Aug 22 20:48:03.251556 2025] [security2:error] [pid 733497:tid 139823502223040] [client 49.156. ... show more [Fri Aug 22 20:48:03.251556 2025] [security2:error] [pid 733497:tid 139823502223040] [client 49.156.22.70:39246] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "180"] [id "40236"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %20 found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/using-joomla/extensions/components/search-component/search?searchword=Jawa%20Tengah&ordering=newest&searchphrase=all HTTP/2.0 Request URI RAW = /index.php/using-joomla/extensions/components/search-component/search?searchword=Jawa%20Tengah&ordering=newest&searchphrase=all Request Basename = search"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/using-joomla/extensions/components/search-component/search"] [unique_ ... show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.228.248

🇨🇳 58.19.80.99

🇺🇸 45.83.146.3

🇨🇦 20.151.228.157

🇩🇪 216.26.247.217

🇩🇪 216.26.247.209

🇩🇪 216.26.247.131

🇩🇪 216.26.247.84

🇬🇧 213.166.84.49

🇩🇪 209.50.184.180

🇨🇴 206.62.136.130

🇳🇱 195.178.110.241

🇬🇧 185.166.43.100

🇳🇱 175.110.112.8

🇺🇸 157.230.186.59

🇨🇳 123.232.130.147

🇮🇩 118.99.114.224

🇮🇹 79.40.60.117

🇩🇪 65.111.26.119

🇩🇪 64.89.163.81