JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.229.153.18

49.229.153.18 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 32%: ?

32%

ISP	[email protected]
Usage Type	Mobile ISP
ASN	AS45458
Domain Name	sbn.co.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.229.153.18

Whois 49.229.153.18

IP Abuse Reports for 49.229.153.18:

This IP address has been reported a total of 78 times from 43 distinct sources. 49.229.153.18 was first reported on August 20th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Ghost Rider	2026-06-25 11:36:48 (6 days ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 filstal.org	2026-06-22 07:06:03 (1 week ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇨🇭 Origon	2026-06-16 03:09:06 (2 weeks ago)	NOQUEUE - IP: 49.229.153.18 - Jun 16 05:09:06 plesk postfix/smtpd[2961800]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 49.229.153.18 - Jun 16 05:09:06 plesk postfix/smtpd[2961800]: NOQUEUE: reject: RCPT from unknown[49.229.153.18]: 554 5.7.1 Service unavailable; Client host [49.229.153.18] blocked using dnsbl-1.uceprotect.net; IP 49.229.153.18 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=49.229.153.18; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<49.229.153.18> show less	Email Spam
🇨🇭 Origon	2026-06-11 07:41:43 (2 weeks ago)	NOQUEUE - IP: 49.229.153.18 - Jun 11 09:41:43 plesk postfix/smtpd[3120787]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 49.229.153.18 - Jun 11 09:41:43 plesk postfix/smtpd[3120787]: NOQUEUE: reject: RCPT from unknown[49.229.153.18]: 554 5.7.1 Service unavailable; Client host [49.229.153.18] blocked using dnsbl-1.uceprotect.net; IP 49.229.153.18 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=49.229.153.18; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[49.229.153.18]> show less	Email Spam
🇬🇧 PeravixGroup	2026-06-06 14:56:30 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 filstal.org	2026-06-01 17:26:10 (4 weeks ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇩🇪 Viveronese	2026-06-01 14:14:52 (4 weeks ago)	SASL LOGIN authentication failed	Brute-Force
🇩🇪 filstal.org	2026-05-31 08:51:02 (1 month ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇩🇪 filstal.org	2026-05-29 20:06:18 (1 month ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
Anonymous	2026-05-29 16:17:40 (1 month ago)	2026-05-29T18:17:39.975116+02:00 gollum postfix/smtpd[1223394]: NOQUEUE: reject: RCPT from unknown[4 ... show more 2026-05-29T18:17:39.975116+02:00 gollum postfix/smtpd[1223394]: NOQUEUE: reject: RCPT from unknown[49.229.153.18]: 554 5.7.1 Service unavailable; Client host [49.229.153.18] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/49.229.153.18 / Listed by CSS, see https://check.spamhaus.org/query/ip/49.229.153.18 / Listed by PBL, see https://check.spamhaus.org/query/ip/49.229.153.18; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<49.229.153.18> ... show less	Email Spam
🇨🇭 Origon	2026-05-29 14:54:39 (1 month ago)	NOQUEUE - IP: 49.229.153.18 - May 29 16:54:38 plesk postfix/smtpd[1069532]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 49.229.153.18 - May 29 16:54:38 plesk postfix/smtpd[1069532]: NOQUEUE: reject: RCPT from unknown[49.229.153.18]: 554 5.7.1 Service unavailable; Client host [49.229.153.18] blocked using dnsbl-1.uceprotect.net; IP 49.229.153.18 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=49.229.153.18; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<49.229.153.18> show less	Email Spam
🇩🇪 Viveronese	2026-05-28 16:49:01 (1 month ago)	SASL LOGIN authentication failed	Brute-Force
🇩🇪 filstal.org	2026-05-28 11:42:44 (1 month ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇨🇭 Origon	2026-05-26 13:58:00 (1 month ago)	NOQUEUE - IP: 49.229.153.18 - May 26 15:57:33 plesk postfix/smtpd[3178021]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 49.229.153.18 - May 26 15:57:33 plesk postfix/smtpd[3178021]: NOQUEUE: reject: RCPT from unknown[49.229.153.18]: 554 5.7.1 Service unavailable; Client host [49.229.153.18] blocked using dnsbl-1.uceprotect.net; IP 49.229.153.18 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=49.229.153.18; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<49.229.153.18> show less	Email Spam
🇮🇹 VHosting	2026-05-22 12:38:40 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2400:cb00:497:1024::a29e:a93f

🇨🇳 180.76.98.187

🇰🇷 175.195.238.137

🇨🇳 121.237.180.222

🇫🇷 91.231.89.78

🇳🇱 217.103.68.200

🇦🇷 186.38.26.5

🇵🇱 138.124.20.112

🇨🇳 114.84.205.186

🇺🇸 66.132.195.125

🇺🇸 64.62.156.173

🇺🇸 45.130.83.193

🇺🇸 34.19.116.48

🇬🇧 2a06:4880:c000::fb

🇺🇸 144.202.92.17

🇨🇳 116.179.33.76

🇳🇱 45.148.10.141

🇺🇸 43.162.124.208

🇬🇭 41.242.115.83

🇵🇰 39.43.182.230