147.50.131.221
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- reassign to VCloud 10G Service
- Usage Type
- Fixed Line ISP
- ASN
- AS4750
- Domain Name
- csloxinfo.net
- Country
- 🇹🇭 Thailand
- City
- Bangkok, Bangkok
Abuse Reports
Total reports
72 from
39 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-11-02 11:21:42 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3389)
Source port: 31637
TTL: 239
Packet length: 44
TOS: 0x00
This report (for 147.50.131.221) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-11-02 06:50:33 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3389)
Source port: 21614
TTL: 239
Packet length: 44
TOS: 0x00
This report (for 147.50.131.221) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 xclmp |
Unauthorized connection attempts consistent with that of port probing and scanning from 147.50.131.221 were detected at 2026-11-02 04:04:27 UTC. Learn More: https://fia.project-furina.com/report/14497
|
Port Scan | |
| 🇺🇸 xclmp |
Unauthorized connection attempts consistent with that of port probing and scanning from 147.50.131.221 were detected at 2026-11-02 03:46:52 UTC. Learn More: https://fia.project-furina.com/report/14477
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-02 03:30:10 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇺🇸 shabi |
UFW Blocked [22/TCP]
Source: 147.50.131.221:8738
TTL: 236
Lenth: 44
TOS: 0x00
|
Port Scan SSH Brute-Force | |
| 🇺🇸 Necrotic |
Unsolicited connection attempt to a port with no service behind it (scan trap). Automated report.
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 147.50.131.221 [TCP]
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 236 | Len: 44B | Win: 1025(1) | F2B/ufw-honeypot@2026-11-02T00:54:51Z
|
Port Scan Hacking | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: RDP brute-force. 4 events observed. Reported automatically from a honeypot sensor.
|
Brute-Force | |
| 🇩🇪 phil2k |
|
Port Scan | |
| 🇸🇪 www.remote24.se |
3389BruteforceStormFW21
|
Brute-Force | |
| 🇯🇵 knock |
Knock-Knock honeypot brute-force: RDP (2 total hits)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown