JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.228.197.74

49.228.197.74 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 0%: ?

ISP	AIS Fibre
Usage Type	Mobile ISP
ASN	AS133481
Hostname(s)	49-228-197-0.24.nat.tls1b-cgn01.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Khlong Luang, Pathum Thani

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.228.197.74

Whois 49.228.197.74

IP Abuse Reports for 49.228.197.74:

This IP address has been reported a total of 44 times from 32 distinct sources. 49.228.197.74 was first reported on February 28th 2021, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-21 20:08:55 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-20 20:08:55 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-09-20 08:06:00 (11 months ago)	Sep 20 10:05:59 eiaf sshd[3624367]: Connection from 49.228.197.74 port 39430 on 88.218.224.13 port 5 ... show more Sep 20 10:05:59 eiaf sshd[3624367]: Connection from 49.228.197.74 port 39430 on 88.218.224.13 port 5123 rdomain "" Sep 20 10:06:00 eiaf sshd[3624367]: Invalid user cchen from 49.228.197.74 port 39430 ... show less	DDoS Attack Port Scan Brute-Force SSH
Anonymous	2025-09-20 05:03:19 (11 months ago)	Sep 20 07:03:14 mailserver sshd\[10689\]: Address 49.228.197.74 maps to 49-228-197-0.24.nat.tls1b-cg ... show more Sep 20 07:03:14 mailserver sshd\[10689\]: Address 49.228.197.74 maps to 49-228-197-0.24.nat.tls1b-cgn01.myaisfibre.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ... show less	Brute-Force SSH
🇺🇸 anon333	2025-09-20 04:33:06 (11 months ago)	Login hacks found during syslog review at 2025-09-20T04:33+00:00	Brute-Force SSH
🇩🇪 Raist	2025-09-20 02:01:58 (11 months ago)	Sep 20 04:01:54 localhost sshd[1763400]: Invalid user gpu01 from 49.228.197.74 port 37512 Sep 20 04: ... show more Sep 20 04:01:54 localhost sshd[1763400]: Invalid user gpu01 from 49.228.197.74 port 37512 Sep 20 04:01:55 localhost sshd[1763400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.197.74 Sep 20 04:01:57 localhost sshd[1763400]: Failed password for invalid user gpu01 from 49.228.197.74 port 37512 ssh2 ... show less	Brute-Force SSH
🇵🇱 hyperqbe	2025-09-20 00:47:27 (11 months ago)	Sep 20 02:47:10 slaro sshd\[5866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 e ... show more Sep 20 02:47:10 slaro sshd\[5866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.197.74 user=root Sep 20 02:47:12 slaro sshd\[5866\]: Failed password for root from 49.228.197.74 port 39820 ssh2 Sep 20 02:47:25 slaro sshd\[5869\]: Invalid user vyos from 49.228.197.74 ... show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-20 00:08:53 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-09-20 00:08:02 (11 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.197.74	SSH
🇪🇸 saima	2025-09-20 00:00:07 (11 months ago)	Detected 15 times. SSH Brute-Force from address 49.228.197.74	Brute-Force SSH
🇺🇸 Rocky Mountain Bioengineering Symposium	2025-09-19 23:54:11 (11 months ago)	Sep 19 17:54:11 KLAS-A sshd[110536]: Connection closed by 49.228.197.74 port 52080 [preauth] ...	Brute-Force SSH
🇩🇪 m7	2025-09-19 22:58:00 (11 months ago)	Sep 20 00:57:53 m7server sshd[3437972]: Invalid user airloft from 49.228.197.74 port 55092 Sep 20 00 ... show more Sep 20 00:57:53 m7server sshd[3437972]: Invalid user airloft from 49.228.197.74 port 55092 Sep 20 00:57:59 m7server sshd[3437974]: Connection from 49.228.197.74 port 45724 on 10.1.0.30 port 22 rdomain "" Sep 20 00:58:00 m7server sshd[3437974]: Invalid user linjiaxin from 49.228.197.74 port 45724 show less	Brute-Force SSH
🇩🇪 ps-center	2025-09-19 22:48:17 (11 months ago)	MYH-W: Brutforce ssh Login	Brute-Force
🇩🇪 H. Hampel	2025-09-19 21:06:43 (11 months ago)	2025-09-19T21:06:23.315013nc2 sshd[796961]: Invalid user deploy from 49.228.197.74 port 60576 2025-0 ... show more 2025-09-19T21:06:23.315013nc2 sshd[796961]: Invalid user deploy from 49.228.197.74 port 60576 2025-09-19T21:06:42.028422nc2 sshd[797382]: Invalid user spotlight from 49.228.197.74 port 40116 ... show less	Brute-Force SSH
🇭🇰 bluecloudwork	2025-09-19 20:17:32 (11 months ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:800:14:0:3:688f:9000

🇨🇳 223.75.156.89

🇱🇹 213.176.26.77

🇺🇸 205.210.31.84

🇭🇰 199.45.154.179

🇹🇳 197.3.19.49

🇫🇮 147.185.133.9

🇪🇸 62.93.179.158

🇳🇱 5.61.209.44

🇬🇧 193.176.29.16

🇺🇸 184.168.21.211

🇧🇬 79.124.62.126

🇳🇱 62.195.180.2

🇺🇸 54.204.76.69

🇺🇸 34.73.56.148

🇺🇸 23.92.27.206

🇫🇷 13.140.147.186

🇮🇳 223.185.132.187

🇺🇸 209.38.153.207

🇭🇰 199.45.154.183