49.228.28.8
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- AIS Fibre
- Usage Type
- Mobile ISP
- ASN
- AS133481
- Domain Name
- ais.th
- Country
- 🇹🇭 Thailand
- City
- Bangkok, Bangkok
Abuse Reports
Total reports
22 from
20 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
|
Exploited Host Web App Attack | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-09-19 02:24:51 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇹🇭 Sawasdee |
SSH break in attempt
...
|
SSH | |
| 🇬🇧 sonot |
Blocked by UFW on tunneluk01 [23/tcp] | SPT: 34442 | TTL: 51 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| Anonymous |
PORT & IP Scan.
|
Port Scan Brute-Force | |
| 🇺🇸 MPL |
tcp ports: 23,22 (8 or more attempts)
|
Port Scan | |
| 🇫🇷 mailox |
Unauthorized SSH connection on tarpit
...
|
SSH | |
| Anonymous |
Unauthorized connection to SSH port 22
|
Port Scan SSH | |
| 🇺🇸 OceanTreasure |
tcp/22; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-18T04:13:45Z
|
Port Scan | |
| 🇭🇰 mutebot.net |
SRC=49.228.28.8, PROTO=TCP, SPT=46536, DPT=23
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=33380 dstport=22
|
Port Scan Hacking SSH | |
| 🇧🇾 sashan |
2026-09-17T20:35:02.197224+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=49.228.28.8 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=23337 DF PROTO=TCP SPT=51340 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| Anonymous |
Port scan and brute force attack
|
Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown