AbuseIPDB » 49.228.168.172
49.228.168.172 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 0%: ?
| ISP |
AIS Fibre
|
| Usage Type |
Fixed Line ISP
|
| ASN |
AS133481
|
| Hostname(s) |
49-228-168-0.24.nat.tls1b-cgn02.myaisfibre.com
|
| Domain Name |
ais.th
|
| Country |
🇹🇭
Thailand
|
| City |
Udon Thani, Udon Thani
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 49.228.168.172:
This IP address has been reported a total of
6
times from
6 distinct
sources.
49.228.168.172 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇷🇺
alexsertar
|
|
Port scanning
|
Port Scan
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 49.228.168.172 (49-228-168-0.24.nat.tls1b-cgn02 ...
show more
(mod_security) mod_security (id:225170) triggered by 49.228.168.172 (49-228-168-0.24.nat.tls1b-cgn02.myaisfibre.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 03 01:59:09.223614 2024] [security2:error] [pid 7304:tid 7304] [client 49.228.168.172:60167] [client 49.228.168.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||salernospizza.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "salernospizza.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Zq3HLZUyuo8nViteY5BnlgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇸🇬
mypatricks
|
|
49.228.168.172 | Port: 14718 | DNS: 49-228-168-0.24.nat.tls1b-cgn02.myaisfibre.com 2023-10-28T09:15: ...
show more
49.228.168.172 | Port: 14718 | DNS: 49-228-168-0.24.nat.tls1b-cgn02.myaisfibre.com 2023-10-28T09:15:27+08:00 Asia/Singapore | Suspicious User Abuse Activity | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 HTTP/1.1 443 GET | URL: / | Ref: http://xxxxxx/ | Country: TH/Thailand/+07:00 IP City: Udon Thani macOS 81cf53e5685e2721-BKK/Bangkok, Thailand 1 hits/0 secs Robots 0
show less
|
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack
|
|
|
🇸🇬
pusathosting.com
|
|
polres bruteforce
|
Brute-Force
Web App Attack
|
|
|
🇲🇾
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
|
Anonymous
|
|
Malicious activity detected
|
Hacking
Web App Attack
|
|
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: