Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
49.228.103.72 has been reported 567
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
(sshd) Failed SSH login from 49.228.103.72 (TH/Thailand/49-228-103-0.24.nat.cwdc-cgn02.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 6 09:23:49 17576 sshd[11473]: pam_unix(sshd:auth): authentication fa ...
show more(sshd) Failed SSH login from 49.228.103.72 (TH/Thailand/49-228-103-0.24.nat.cwdc-cgn02.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 6 09:23:49 17576 sshd[11473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.103.72 user=root
Jan 6 09:23:51 17576 sshd[11473]: Failed password for root from 49.228.103.72 port 49412 ssh2
Jan 6 09:27:34 17576 sshd[11858]: Invalid user claude from 49.228.103.72 port 34458
Jan 6 09:27:36 17576 sshd[11858]: Failed password for invalid user claude from 49.228.103.72 port 34458 ssh2
Jan 6 09:28:45 17576 sshd[11967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.103.72 user=root
show less
2026-01-06T15:50:32.167289+01:00 T440s sshd[846475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.103.72
2026-01-06T15:50:33.881777+01:00 T440s sshd[846475]: Failed password for invalid user claude fr ...
show more2026-01-06T15:50:32.167289+01:00 T440s sshd[846475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.103.72
2026-01-06T15:50:33.881777+01:00 T440s sshd[846475]: Failed password for invalid user claude from 49.228.103.72 port 45476 ssh2
2026-01-06T15:53:32.078506+01:00 T440s sshd[846588]: Invalid user oracle from 49.228.103.72 port 49486
...
show less
2026-01-06T15:34:53.751470+01:00 ns3136794 sshd[827662]: Failed password for invalid user claude from 49.228.103.72 port 58974 ssh2
2026-01-06T15:37:43.985696+01:00 ns3136794 sshd[829906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ...
show more2026-01-06T15:34:53.751470+01:00 ns3136794 sshd[827662]: Failed password for invalid user claude from 49.228.103.72 port 58974 ssh2
2026-01-06T15:37:43.985696+01:00 ns3136794 sshd[829906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.103.72 user=root
2026-01-06T15:37:45.797182+01:00 ns3136794 sshd[829906]: Failed password for root from 49.228.103.72 port 51138 ssh2
...
show less
49.228.103.72 (TH/Thailand/49-228-103-0.24.nat.cwdc-cgn02.myaisfibre.com), 5 distributed sshd attacks on account [claude] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 6 07:47:09 14339 sshd[31321]: Invalid user cla ...
show more49.228.103.72 (TH/Thailand/49-228-103-0.24.nat.cwdc-cgn02.myaisfibre.com), 5 distributed sshd attacks on account [claude] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 6 07:47:09 14339 sshd[31321]: Invalid user claude from 118.194.230.231 port 59596
Jan 6 07:47:11 14339 sshd[31321]: Failed password for invalid user claude from 118.194.230.231 port 59596 ssh2
Jan 6 07:47:11 14339 sshd[31326]: Invalid user claude from 185.196.11.128 port 53842
Jan 6 08:35:50 14339 sshd[2478]: Invalid user claude from 49.228.103.72 port 59082
Jan 6 07:47:13 14339 sshd[31326]: Failed password for invalid user claude from 185.196.11.128 port 53842 ssh2
IP Addresses Blocked:
118.194.230.231 (JP/Japan/vinfeshop.com)
185.196.11.128 (CH/Switzerland/VPS-KKAmzTHN)
show less
2026-01-06T21:15:58.378588+08:00 *hostname* sshd-session[1915320]: Invalid user kafka from 49.228.103.72 port 47790
2026-01-06T21:16:19.883940+08:00 *hostname* sshd-session[1915328]: Connection from 49.228.103.72 port 57882 on 199.15.78.48 port 22 rd ...
show more2026-01-06T21:15:58.378588+08:00 *hostname* sshd-session[1915320]: Invalid user kafka from 49.228.103.72 port 47790
2026-01-06T21:16:19.883940+08:00 *hostname* sshd-session[1915328]: Connection from 49.228.103.72 port 57882 on 199.15.78.48 port 22 rdomain ""
2026-01-06T21:16:20.308506+08:00 *hostname* sshd-session[1915328]: Invalid user ts3 from 49.228.103.72 port 57882
2026-01-06T21:19:49.845334+08:00 *hostname* sshd-session[1915363]: Connection from 49.228.103.72 port 48982 on 199.15.78.48 port 22 rdomain ""
2026-01-06T21:19:50.262797+08:00 *hostname* sshd-session[1915363]: Invalid user server from 49.228.103.72 port 48982
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown