JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.228.185.47

49.228.185.47 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 4%: ?

ISP	AIS Fibre
Usage Type	Fixed Line ISP
ASN	AS133481
Hostname(s)	49-228-185-0.24.nat.tls1b-cgn01.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Si Racha, Chon Buri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.228.185.47

Whois 49.228.185.47

IP Abuse Reports for 49.228.185.47:

This IP address has been reported a total of 3 times from 3 distinct sources. 49.228.185.47 was first reported on December 7th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-26 18:43:38 (2 days ago)	[Sat Jun 27 01:43:33.697663 2026] [security2:error] [pid 442681:tid 139695307601600] [client 49.228. ... show more [Sat Jun 27 01:43:33.697663 2026] [security2:error] [pid 442681:tid 139695307601600] [client 49.228.185.47:57189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "aj7IVVx2rrTb1DqAEUgo5wAAEwM"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[442685] [l0xYfGy6jH4] [aj7IVVx2rrTb1DqAEUgo5wAAEwM] keep_alive=[1] [2026-06-27 01:43:33.697667] [R:aj7IVVx2rrTb1DqAEUgo5wAAEwM] UA:'Mozilla/5.0 (Linux; Android 13; SM-S901B) AppleWebKit/537.36 (KHTML, like Geck ... show less	Email Spam Hacking
🇨🇭 Origon	2025-11-09 14:10:51 (7 months ago)	NOQUEUE - IP: 49.228.185.47 - Nov 9 15:10:51 plesk postfix/smtpd[2275825]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 49.228.185.47 - Nov 9 15:10:51 plesk postfix/smtpd[2275825]: NOQUEUE: reject: RCPT from unknown[49.228.185.47]: 554 5.7.1 Service unavailable; Client host [49.228.185.47] blocked using dnsbl-2.uceprotect.net; Net 49.228.0.0/16 is UCEPROTECT-Level2 listed because 451 impacts are seen from AIS-FIBRE-AS-AP AIS Fibre, TH/AS133481 there. See: http://www.uceprotect.net/rblcheck.php?ipr=49.228.185.47; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<49-228-185-0.24.nat.tls1b-cgn01.myaisfibre.com> show less	Email Spam
Anonymous	2024-12-07 11:16:57 (1 year ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.152

🇺🇸 2607:f8b0:400e:c02::127

🇨🇳 220.167.232.130

🇰🇷 211.223.107.86

🇿🇦 197.185.132.85

🇺🇸 147.185.132.229

🇨🇳 114.138.108.133

🇨🇳 106.117.116.47

🇦🇱 103.124.165.204

🇫🇷 85.217.140.8

🇷🇺 82.204.185.138

🇰🇬 46.251.206.81

🇫🇷 13.140.137.189

🇦🇷 186.139.160.182

🇺🇸 170.106.11.141

🇺🇸 162.216.149.39

🇧🇩 110.76.129.160

🇺🇸 45.33.78.24

🇿🇦 41.122.131.181

🇺🇸 34.75.218.148