115.48.149.23
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China Unicom Henan province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Zhengzhou, Henan
Abuse Reports
Total reports
16 from
12 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇹🇷 oalver |
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. Sources: honeypot. First seen: 2026-09-16. Risk score: 90/100.
|
Brute-Force IoT Targeted | |
| Anonymous |
Repeated unauthorized connection attempts to restricted service observed.
|
Port Scan Hacking Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 mravb |
115.48.149.23 - - [15/Sep/2026:11:28:39 +0300] "GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0" 444 0 "-" "-"
...
|
Web App Attack Hacking | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 23
|
Port Scan Hacking Exploited Host | |
| 🇿🇦 IrisFlower |
Unauthorized connection attempt detected from IP address 115.48.149.23 to port 23 [J]
|
Port Scan Hacking | |
| 🇿🇦 IrisFlower |
Unauthorized connection attempt detected from IP address 115.48.149.23 to port 23 [J]
|
Port Scan Hacking | |
| 🇮🇳 Parth Maniar |
SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.
|
Brute-Force SSH | |
| 🇩🇪 ps-center |
CAS-AT-W: TCP-Scanner. Port: 23
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23
|
Port Scan | |
| 🇨🇿 akac |
Added into the Abuse.ch URLHaus IOC database by @lrz_urlhaus for distributing malware with tags: elf, Mozi.
Source: https://urlhaus.abuse.ch/url/2511761/
|
Hacking Exploited Host | |
| 🇩🇪 _ArminS_ |
SP-Scan 24274:23 detected 2023.01.18 04:41:01
blocked until 2023.03.08 21:43:48
|
Port Scan | |
| 🇿🇦 IrisFlower |
Unauthorized connection attempt detected from IP address 115.48.149.23 to port 8080 [J]
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown