JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

122.154.24.254

Neutral Activity

Abuse confidence score ?

0% Low Risk

33 reports

18 reporters · latest 5 years ago

ISP	CAT Telecom public company Ltd
Usage Type	Fixed Line ISP
ASN	AS9931
Domain Name	ntplc.co.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

122.154.24.254 has been reported 33 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 122.154.24.254

Export CSV

This IP address has been reported a total of 33 times from 18 distinct sources. 122.154.24.254 was first reported on November 23rd 2020, and the most recent report was 5 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇩 iHost	2021-04-11 04:14:49 (5 years ago)	Port Scan detected from 122.154.24.254 (TH/Thailand/-). 3 hits in the last 185 seconds; Ports: ; ... show more Port Scan* detected from 122.154.24.254 (TH/Thailand/-). 3 hits in the last 185 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Apr 11 11:14:39 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=122.154.24.254 DST=31.131.1.80 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=5466 DF PROTO=TCP SPT=62730 DPT=888 WINDOW=8192 RES=0x00 SYN URGP=0 Apr 11 11:14:42 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=122.154.24.254 DST=31.131.1.80 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=10101 DF PROTO=TCP SPT=62730 DPT=888 WINDOW=8192 RES=0x00 SYN URGP=0 Apr 11 11:14:46 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=122.154.24.254 DST=31.131.1.80 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=11663 DF PROTO=TCP SPT=63882 DPT=8080 WINDOW=8192 RES=0x00 SYN URGP=0 show less	Port Scan
🇳🇱 Savvii	2021-04-05 04:47:33 (5 years ago)	10 attempts against mh_ha-misc-ban on seed	Brute-Force Web App Attack
🇺🇸 antlac1	2021-03-30 15:32:28 (5 years ago)	SERVER-WEBAPP Joomla JDatabaseDriverMysqli unserialize code execution attempt (1:37078:4) at 2021-03 ... show more SERVER-WEBAPP Joomla JDatabaseDriverMysqli unserialize code execution attempt (1:37078:4) at 2021-03-30 15:03:07 show less	Hacking
🇺🇸 antlac1	2021-03-30 15:02:27 (5 years ago)	SERVER-WEBAPP PHPUnit PHP remote code execution attempt (1:45749:2) at 2021-03-30 14:59:55	Web App Attack
🇱🇮 aerobeta.li	2021-03-30 04:48:39 (5 years ago)	none	Web App Attack
🇺🇸 ogbc-admin	2021-03-28 18:17:25 (5 years ago)	[Sun Mar 28 17:17:24.055859 2021] [proxy_fcgi:error] [pid 1050577:tid 140615064999680] [client 122.1 ... show more [Sun Mar 28 17:17:24.055859 2021] [proxy_fcgi:error] [pid 1050577:tid 140615064999680] [client 122.154.24.254:21431] AH01071: Got error 'Primary script unknown' [Sun Mar 28 17:17:24.321294 2021] [proxy_fcgi:error] [pid 1050577:tid 140615710910208] [client 122.154.24.254:21431] AH01071: Got error 'Primary script unknown' [Sun Mar 28 17:17:24.584553 2021] [proxy_fcgi:error] [pid 1050577:tid 140614930781952] [client 122.154.24.254:21431] AH01071: Got error 'Primary script unknown' [Sun Mar 28 17:17:24.849047 2021] [proxy_fcgi:error] [pid 1050577:tid 140615852807936] [client 122.154.24.254:21431] AH01071: Got error 'Primary script unknown' [Sun Mar 28 17:17:25.112304 2021] [proxy_fcgi:error] [pid 1050577:tid 140615752873728] [client 122.154.24.254:21431] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 FireballDWF	2021-03-24 13:40:08 (5 years ago)	404 NOT FOUND	Web App Attack
🇩🇪 ThomasSc	2021-03-23 13:18:04 (5 years ago)	tests urls like /myadmin/, shell.php, /login, /jenkins/login etc.	Web App Attack
🇵🇱 ChillScanner	2021-03-22 19:39:07 (5 years ago)	1 probe(s) @ TCP(8080)	Port Scan
🇮🇪 RoboSOC	2021-03-22 04:56:11 (5 years ago)	HP Universal CMDB Default Credentials Security Bypass Vulnerability , PTR: PTR record not found	Hacking
🇲🇩 iHost	2021-03-22 02:44:43 (5 years ago)	Port Scan detected from 122.154.24.254 (TH/Thailand/-). 3 hits in the last 195 seconds; Ports: ; ... show more Port Scan* detected from 122.154.24.254 (TH/Thailand/-). 3 hits in the last 195 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Mar 22 08:44:31 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=122.154.24.254 DST=31.131.1.28 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=3701 DF PROTO=TCP SPT=3108 DPT=888 WINDOW=8192 RES=0x00 SYN URGP=0 Mar 22 08:44:36 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=122.154.24.254 DST=31.131.1.28 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=12166 DF PROTO=TCP SPT=4471 DPT=8080 WINDOW=8192 RES=0x00 SYN URGP=0 Mar 22 08:44:39 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=122.154.24.254 DST=31.131.1.28 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=16030 DF PROTO=TCP SPT=5124 DPT=8983 WINDOW=8192 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 antlac1	2021-03-21 21:02:21 (5 years ago)	SERVER-WEBAPP Joomla JDatabaseDriverMysqli unserialize code execution attempt (1:37078:4) at 2021-03 ... show more SERVER-WEBAPP Joomla JDatabaseDriverMysqli unserialize code execution attempt (1:37078:4) at 2021-03-21 20:51:31 show less	Hacking
🇮🇪 RoboSOC	2021-03-11 08:26:21 (5 years ago)	Joomla HTTP User Agent Object Injection Vulnerability , PTR: PTR record not found	Exploited Host
🇳🇱 Savvii	2021-03-10 18:19:18 (5 years ago)	10 attempts against mh_ha-misc-ban on chive	Brute-Force Web App Attack
Anonymous	2021-03-10 11:55:20 (5 years ago)	attack=Apache.Axis2.Default.Password.Access	Hacking Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 201.190.173.251

🇮🇳 187.126.118.91

🇲🇦 105.157.233.185

🇺🇸 103.144.3.181

🇷🇺 81.25.77.252

🇳🇱 77.91.71.91

🇺🇸 66.187.9.189

🇺🇸 43.135.149.32

🇺🇸 34.83.228.94

🇷🇴 2.57.122.150

🇹🇼 198.235.24.87

🇪🇹 196.188.230.184

🇬🇧 188.240.59.4

🇺🇸 164.92.107.174

🇺🇸 162.216.149.36

🇸🇬 161.118.235.88

🇨🇳 116.138.191.211

🇨🇳 106.117.104.90

🇧🇪 81.245.186.248

🇺🇸 70.170.128.57