49.228.150.4
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- AIS Fibre
- Usage Type
- Fixed Line ISP
- ASN
- AS133481
- Domain Name
- ais.th
- Country
- 🇹🇭 Thailand
- City
- Rayong, Rayong
Abuse Reports
Total reports
12 from
10 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇺 Panamaaa |
Port scan detected; Brute-force attack detected
|
Port Scan Brute-Force | |
| 🇺🇸 mutebot.net |
SRC=49.228.150.4, PROTO=TCP, SPT=55714, DPT=23
|
Port Scan | |
| 🇩🇪 slibus |
SSH/Telnet honeypot (Cowrie): 5 login attempts (users: root)
|
Brute-Force SSH IoT Targeted | |
| 🇫🇷 Yougow |
Telnet brute force against a honeypot, IoT botnet pattern (1 login attempts, then shell commands). Automated detection.
|
Brute-Force IoT Targeted Hacking | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-09 01:55:59 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 PhiJai |
Signalement automatique (DEUS NemesisBanisher). balayage : connexion à un faux service telnet.
|
Port Scan IoT Targeted | |
| 🇺🇸 RAP |
2026-11-08 18:13:32 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇵🇱 sefinek.net |
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Port Scan | |
| 🇬🇧 lumi |
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "user" at 2026-11-08T07:13:41Z
|
Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:39920 dst:23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown