182.52.128.49
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- TOT Public Company Limited
- Usage Type
- Fixed Line ISP
- ASN
- AS23969
- Hostname(s)
- node-pbl.pool-182-52.dynamic.nt-isp.net
- Domain Name
- totidc.net
- Country
- 🇹🇭 Thailand
- City
- Bangkok, Bangkok
Abuse Reports
Total reports
15 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 donarev419 |
Port scan detected on port 23 (connection without data transfer)
|
Port Scan | |
| 🇬🇧 lumi |
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-10-27T00:50:40Z
|
Brute-Force SSH | |
| 🇺🇸 RAP |
2026-10-26 23:30:36 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 Petre 21_ip |
|
Port Scan | |
| 🇧🇾 StatsMe |
Date: 2026-10-26T05:32:06.000+00:00 | Action: deny | Port: 23 | Log: Connection Failed
|
Brute-Force SSH Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-10-26 02:40:39 | LAST=2026-10-26 02:40:40. Last seen 2026-10-26 02:40:41.
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 60195
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 182.52.128.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 23
|
Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:36547 dst:23
|
Port Scan | |
| 🇺🇸 drewf.ink |
[15:41] Attempted telnet login with credentials admin:a***n
|
Brute-Force IoT Targeted | |
| 🇩🇪 FDC |
Malicious activity from 182.52.128.49 detected by FDC honeypots. Categories: 14,15,22. 5 events in last 24h.
|
Port Scan Hacking SSH | |
| 🇺🇸 drewf.ink |
[15:11] Attempted telnet login with credentials admin:a***n
|
Brute-Force IoT Targeted | |
| 🇺🇸 ISPLtd |
Oct 25 10:39:23 182.52.128.49 TCP SPT=11920 DPT=23 SYN
Oct 25 10:54:20 182.52.128.49 TCP SPT=62120 DPT=23 SYN
Oct 25 11:09:09 182.52.128.49 TCP SPT=64423 DPT=23 SYN
...
|
Port Scan | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇺🇸 RLDD |
WP login attempts -dyn
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown