Identicon of IP address 15.228.41.50

15.228.41.50

IP Risk Score: 100 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 15.228.41.50
Country: Brazil flag Brazil (BR)
Region Name: São Paulo (SP)
City: São Paulo
ISP: Amazon.com, Inc.
Organization: AWS EC2 (sa-east-1)
Threat level: 100 / 100
Conf. level: 100 / 100
Properties
ASN: AS16509
AS Name: Amazon.com, Inc.
Timezone: America/Sao_Paulo
Reverse DNS: ec2-15-228-41-50.sa-east-1.compute.amazonaws.com
Status: Critical
Hosting

Observed Client Profile
  • OS: Linux (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP has exhibited highly suspicious behavior with multiple hits to sensitive paths, all resulting in 404 responses. The absence of JavaScript support and the high frequency of requests in a short time frame indicate automated probing for vulnerabilities. The traffic is originating from a known cloud provider, further raising concerns about potential malicious intent.

🍯
Honeypot Hit
📡
Scanner
JavaScript Support
⚠️ No
User-Agent Samples
  • Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36

IP Location

Region: São Paulo, Brazil

City: São Paulo

Local time: 2026-06-22 05:37:40