JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.228.106.233

49.228.106.233 was found in our database!

This IP was reported 497 times. Confidence of Abuse is 0%: ?

ISP	AIS Fibre
Usage Type	Fixed Line ISP
ASN	AS133481
Hostname(s)	49-228-106-0.24.nat.cwdc-cgn02.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.228.106.233

Whois 49.228.106.233

IP Abuse Reports for 49.228.106.233:

This IP address has been reported a total of 497 times from 255 distinct sources. 49.228.106.233 was first reported on November 5th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iamimmanuelraj	2025-12-20 02:27:03 (5 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1762446917	Brute-Force SSH
🇸🇬 sh97	2025-11-17 07:59:37 (6 months ago)	SG05-ON: SSH Brute Force from 49.228.106.233 at 2025-11-17 13:29:37 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-11-10 20:09:51 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-11-10 00:17:20 (7 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.106.233	SSH
🇹🇷 rtbh.com.tr	2025-11-09 20:09:50 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 john 666	2025-11-09 10:00:32 (7 months ago)	Detected brute force attempt	Brute-Force
🇺🇸 bigscoots.com	2025-11-09 07:01:46 (7 months ago)	49.228.106.233 (TH/Thailand/49-228-106-0.24.nat.cwdc-cgn02.myaisfibre.com), 5 distributed sshd attac ... show more 49.228.106.233 (TH/Thailand/49-228-106-0.24.nat.cwdc-cgn02.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 9 01:01:40 17715 sshd[18904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.106.233 user=root Nov 9 00:43:16 17715 sshd[17299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.195.83.210 user=root Nov 9 00:43:18 17715 sshd[17299]: Failed password for root from 14.195.83.210 port 64101 ssh2 Nov 9 01:00:09 17715 sshd[18782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.106.233 user=root Nov 9 01:00:11 17715 sshd[18782]: Failed password for root from 49.228.106.233 port 50794 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-09 06:41:06 (7 months ago)	(sshd) Failed SSH login from 49.228.106.233 (TH/Thailand/49-228-106-0.24.nat.cwdc-cgn02.myaisfibre.c ... show more (sshd) Failed SSH login from 49.228.106.233 (TH/Thailand/49-228-106-0.24.nat.cwdc-cgn02.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Nov 9 00:37:43 16332 sshd[8691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.106.233 user=root Nov 9 00:37:45 16332 sshd[8691]: Failed password for root from 49.228.106.233 port 36880 ssh2 Nov 9 00:39:19 16332 sshd[8871]: Invalid user sonar from 49.228.106.233 port 57224 Nov 9 00:39:21 16332 sshd[8871]: Failed password for invalid user sonar from 49.228.106.233 port 57224 ssh2 Nov 9 00:40:55 16332 sshd[9001]: Invalid user ftpuser from 49.228.106.233 port 32902 show less	Brute-Force SSH
🇺🇸 ShadowWhisperer	2025-11-09 06:38:07 (7 months ago)	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2025-11-09T06:38:04Z and 2025-11-0 ... show more Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2025-11-09T06:38:04Z and 2025-11-09T06:38:07Z show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-09 05:58:04 (7 months ago)	49.228.106.233 (TH/Thailand/49-228-106-0.24.nat.cwdc-cgn02.myaisfibre.com), 5 distributed sshd attac ... show more 49.228.106.233 (TH/Thailand/49-228-106-0.24.nat.cwdc-cgn02.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 8 23:57:49 14922 sshd[29806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.106.233 user=root Nov 8 23:55:17 14922 sshd[29618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.219.120 user=root Nov 8 23:55:19 14922 sshd[29618]: Failed password for root from 45.78.219.120 port 60346 ssh2 Nov 8 23:56:44 14922 sshd[29714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.219.99 user=root Nov 8 23:56:46 14922 sshd[29714]: Failed password for root from 45.78.219.99 port 38662 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇵🇱 Wepted	2025-11-09 05:52:45 (7 months ago)	2025-11-09T06:48:55.554316+01:00 axisverse sshd-session[127353]: Invalid user guest from 49.228.106. ... show more 2025-11-09T06:48:55.554316+01:00 axisverse sshd-session[127353]: Invalid user guest from 49.228.106.233 port 50430 2025-11-09T06:49:51.611914+01:00 axisverse sshd-session[129526]: Invalid user oracle from 49.228.106.233 port 59756 2025-11-09T06:52:44.638523+01:00 axisverse sshd-session[136347]: Invalid user admin from 49.228.106.233 port 42406 ... show less	Brute-Force SSH
🇺🇸 chrisj	2025-11-09 05:49:36 (7 months ago)	2025-11-09T05:47:22.754108+00:00 aws sshd[22039]: Failed password for invalid user root from 49.228. ... show more 2025-11-09T05:47:22.754108+00:00 aws sshd[22039]: Failed password for invalid user root from 49.228.106.233 port 42724 ssh2 2025-11-09T05:49:33.833742+00:00 aws sshd[22072]: Invalid user alex from 49.228.106.233 port 36900 2025-11-09T05:49:33.836661+00:00 aws sshd[22072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.106.233 2025-11-09T05:49:35.691232+00:00 aws sshd[22072]: Failed password for invalid user alex from 49.228.106.233 port 36900 ssh2 ... show less	Brute-Force SSH
🇺🇸 kipfel★	2025-11-09 05:37:28 (7 months ago)	2025-11-08T23:32:38.660927-06:00 nocix-dedi-bf2421-mci sshd[2598336]: Invalid user tomcat from 49.22 ... show more 2025-11-08T23:32:38.660927-06:00 nocix-dedi-bf2421-mci sshd[2598336]: Invalid user tomcat from 49.228.106.233 port 34384 2025-11-08T23:36:44.817083-06:00 nocix-dedi-bf2421-mci sshd[2598563]: Invalid user elastic from 49.228.106.233 port 50668 2025-11-08T23:37:27.477366-06:00 nocix-dedi-bf2421-mci sshd[2598603]: Invalid user cmk from 49.228.106.233 port 34186 ... show less	Brute-Force SSH
🇺🇸 bing	2025-11-09 05:31:02 (7 months ago)	2025-11-09T05:30:59.442443 racknerd-7dfffdf sshd[769789]: pam_unix(sshd:auth): authentication failur ... show more 2025-11-09T05:30:59.442443 racknerd-7dfffdf sshd[769789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.106.233 user=root 2025-11-09T05:31:02.023638 racknerd-7dfffdf sshd[769789]: Failed password for root from 49.228.106.233 port 42584 ssh2 ... show less	Brute-Force SSH
🇩🇪 ranklord	2025-11-09 05:04:46 (7 months ago)	2025-11-09T07:04:00.733927+02:00 nata sshd[678958]: Invalid user chenl from 49.228.106.233 port 3446 ... show more 2025-11-09T07:04:00.733927+02:00 nata sshd[678958]: Invalid user chenl from 49.228.106.233 port 34460 2025-11-09T07:04:45.312287+02:00 nata sshd[679385]: Invalid user install from 49.228.106.233 port 24654 ... show less	Brute-Force SSH

Showing 1 to 15 of 497 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 179.57.170.71

🇩🇪 78.111.67.242

🇨🇳 218.59.201.12

🇨🇱 200.89.69.247

🇸🇬 103.187.146.90

🇳🇱 92.110.139.249

🇳🇱 77.91.71.12

🇺🇸 64.62.197.217

🇳🇱 45.148.10.151

🇺🇸 45.131.194.22

🇺🇸 2607:f8b0:4001:c58::128

🇬🇧 193.163.125.160

🇲🇽 189.232.44.106

🇺🇸 147.185.132.180

🇺🇸 143.198.112.141

🇲🇽 139.177.102.11

🇺🇸 135.119.112.180

🇺🇸 72.214.49.194

🇺🇸 67.207.93.64

🇬🇧 35.203.210.181