JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.228.197.117

49.228.197.117 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	AIS Fibre
Usage Type	Mobile ISP
ASN	AS133481
Hostname(s)	49-228-197-0.24.nat.tls1b-cgn01.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Khlong Luang, Pathum Thani

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.228.197.117

Whois 49.228.197.117

IP Abuse Reports for 49.228.197.117:

This IP address has been reported a total of 15 times from 14 distinct sources. 49.228.197.117 was first reported on September 20th 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-09-20 22:41:12 (9 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.197.117	SSH
🇹🇭 Sawasdee	2025-09-20 22:18:09 (9 months ago)	Port Scan ...	Port Scan
🇪🇸 saima	2025-09-20 22:00:04 (9 months ago)	Detected 12 times. SSH Brute-Force from address 49.228.197.117	Brute-Force SSH
🇩🇪 ps-center	2025-09-20 17:58:57 (9 months ago)	SS4: Brutforce ssh Login	Brute-Force
🇩🇪 Dadelinux	2025-09-20 17:47:41 (9 months ago)	Sep 20 19:47:27 dadelinux sshd[546736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 20 19:47:27 dadelinux sshd[546736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.197.117 Sep 20 19:47:30 dadelinux sshd[546736]: Failed password for invalid user vyos from 49.228.197.117 port 36814 ssh2 Sep 20 19:47:38 dadelinux sshd[546739]: Invalid user acfeng from 49.228.197.117 port 47012 Sep 20 19:47:38 dadelinux sshd[546739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.197.117 Sep 20 19:47:40 dadelinux sshd[546739]: Failed password for invalid user acfeng from 49.228.197.117 port 47012 ssh2 show less	Brute-Force SSH
🇺🇸 kosmonot	2025-09-20 17:04:24 (9 months ago)	2025-09-20T17:04:01.590497+00:00 schlitz sshd[3070960]: Invalid user cchen from 49.228.197.117 port ... show more 2025-09-20T17:04:01.590497+00:00 schlitz sshd[3070960]: Invalid user cchen from 49.228.197.117 port 54126 2025-09-20T17:04:13.436786+00:00 schlitz sshd[3070962]: Invalid user zoh from 49.228.197.117 port 50718 2025-09-20T17:04:24.141065+00:00 schlitz sshd[3070974]: Invalid user guao from 49.228.197.117 port 59388 ... show less	Port Scan Brute-Force SSH
🇩🇪 ps-center	2025-09-20 15:10:23 (9 months ago)	C2-W: Brutforce ssh Login	Brute-Force
🇯🇵 bluecloudwork	2025-09-20 14:22:26 (9 months ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇯🇵 iBug	2025-09-20 14:19:00 (9 months ago)	2025-09-20T22:17:11.009268+08:00 rosemary sshd[1017372]: Connection closed by 49.228.197.117 port 47 ... show more 2025-09-20T22:17:11.009268+08:00 rosemary sshd[1017372]: Connection closed by 49.228.197.117 port 47236 [preauth] 2025-09-20T22:18:37.793318+08:00 rosemary sshd[1018134]: Connection closed by authenticating user root 49.228.197.117 port 50406 [preauth] 2025-09-20T22:19:00.269946+08:00 rosemary sshd[1018197]: Invalid user oracle from 49.228.197.117 port 57602 ... show less	Brute-Force SSH
🇩🇪 Wuck	2025-09-20 13:55:27 (9 months ago)	Sep 20 15:55:16 Torux sshd[2466965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Sep 20 15:55:16 Torux sshd[2466965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.197.117 Sep 20 15:55:18 Torux sshd[2466965]: Failed password for invalid user yingjun from 49.228.197.117 port 52036 ssh2 Sep 20 15:55:25 Torux sshd[2467014]: Invalid user deploy from 49.228.197.117 port 34766 Sep 20 15:55:25 Torux sshd[2467014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.197.117 Sep 20 15:55:26 Torux sshd[2467014]: Failed password for invalid user deploy from 49.228.197.117 port 34766 ssh2 ... show less	Brute-Force SSH
🇬🇧 vardium	2025-09-20 13:49:34 (9 months ago)	Fail2Ban 45	Brute-Force SSH
🇷🇺 Mga Admin	2025-09-20 13:10:40 (9 months ago)	2025-09-20T20:10:36.450608 mga-mga.mga.local sshd[2527874]: Invalid user servers from 49.228.197.117 ... show more 2025-09-20T20:10:36.450608 mga-mga.mga.local sshd[2527874]: Invalid user servers from 49.228.197.117 port 59700 2025-09-20T20:10:36.677766 mga-mga.mga.local sshd[2527874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.197.117 2025-09-20T20:10:39.342491 mga-mga.mga.local sshd[2527874]: Failed password for invalid user servers from 49.228.197.117 port 59700 ssh2 ... show less	Brute-Force SSH
🇩🇪 karger	2025-09-20 10:41:16 (9 months ago)	SSH auth attack	Brute-Force SSH
🇨🇦 hpg	2025-09-20 10:27:16 (9 months ago)	Sep 20 22:26:17 syd2 sshd-session[1208191]: Invalid user lxhuang from 49.228.197.117 port 48802	Brute-Force SSH
🇨🇳 Gone fishing	2025-09-20 09:32:56 (9 months ago)	Sep 20 17:32:42 server sshd[494257]: User root from 49.228.197.117 not allowed becaus ...	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.182.193.155

🇧🇷 187.19.194.85

🇮🇩 180.148.25.42

🇺🇦 178.158.227.187

🇧🇷 170.84.179.11

🇨🇦 165.245.224.29

🇺🇸 162.216.150.233

🇧🇬 79.124.56.210

🇺🇸 162.216.150.164

🇫🇷 143.244.57.84

🇮🇩 139.255.254.163

🇨🇳 121.237.11.60

🇰🇷 112.217.188.122

🇨🇳 111.35.7.46

🇺🇸 66.57.38.26

🇺🇸 20.85.246.45

🇮🇷 2.185.230.67

🇩🇪 213.209.159.56

🇮🇳 202.174.123.35

🇷🇺 178.185.237.79