JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.228.247.215

49.228.247.215 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 2%: ?

ISP	AIS Fibre
Usage Type	Fixed Line ISP
ASN	AS133481
Hostname(s)	49-228-247-0.24.nat.tls1a-cgn01.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Chiang Mai, Chiang Mai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.228.247.215

Whois 49.228.247.215

IP Abuse Reports for 49.228.247.215:

This IP address has been reported a total of 31 times from 19 distinct sources. 49.228.247.215 was first reported on April 4th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-06-05 12:08:14 (2 weeks ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇩🇪 DaleCooper	2025-04-08 13:43:11 (1 year ago)	2025-04-08_13:43:10.99621 User root from 49.228.247.215 not allowed because not listed in AllowUsers ... show more 2025-04-08_13:43:10.99621 User root from 49.228.247.215 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇨🇿 ☠\|ʂɧąɖơῳ\|☠	2025-04-08 11:13:11 (1 year ago)	[2025 Apr 8 08:00:15] TCP Port Scanning detected from 49.228.247.215 (49-228-247-0.24.nat.tls1a-cgn0 ... show more [2025 Apr 8 08:00:15] TCP Port Scanning detected from 49.228.247.215 (49-228-247-0.24.nat.tls1a-cgn01.myaisfibre.com) SPT=35840 -> DPT=222 show less	Port Scan
🇭🇺 DumaNet	2025-04-08 06:42:00 (1 year ago)	SSH login attempts, brute-force attack. Date: Mon Apr 7. 08:53:26 2025 +0200 Source IP: 49.228.247 ... show more SSH login attempts, brute-force attack. Date: Mon Apr 7. 08:53:26 2025 +0200 Source IP: 49.228.247.215 (TH/Thailand/49-228-247-0.24.nat.tls1a-cgn01.myaisfibre.com) Log entries: Apr 7 08:52:53 beta sshd[2434597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root Apr 7 08:52:55 beta sshd[2434597]: Failed password for root from 49.228.247.215 port 48176 ssh2 Apr 7 08:53:07 beta sshd[2434606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root Apr 7 08:53:10 beta sshd[2434606]: Failed password for root from 49.228.247.215 port 48182 ssh2 Apr 7 08:53:24 beta sshd[2434613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root show less	Brute-Force SSH
🇭🇺 DumaNet	2025-04-08 06:28:00 (1 year ago)	SSH login attempts, brute-force attack. Date: Mon Apr 7. 07:53:00 2025 +0200 Source IP: 49.228.247 ... show more SSH login attempts, brute-force attack. Date: Mon Apr 7. 07:53:00 2025 +0200 Source IP: 49.228.247.215 (TH/Thailand/49-228-247-0.24.nat.tls1a-cgn01.myaisfibre.com) Log entries: Apr 7 07:51:59 vserv sshd[24249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root Apr 7 07:52:01 vserv sshd[24249]: Failed password for root from 49.228.247.215 port 34710 ssh2 Apr 7 07:52:27 vserv sshd[24258]: Invalid user shr from 49.228.247.215 port 34716 Apr 7 07:52:28 vserv sshd[24258]: Failed password for invalid user shr from 49.228.247.215 port 34716 ssh2 Apr 7 07:52:56 vserv sshd[24266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root show less	Brute-Force SSH
🇭🇺 DumaNet	2025-04-08 06:07:00 (1 year ago)	SSH login attempts, brute-force attack. Date: Mon Apr 7. 05:03:54 2025 +0200 Source IP: 49.228.247 ... show more SSH login attempts, brute-force attack. Date: Mon Apr 7. 05:03:54 2025 +0200 Source IP: 49.228.247.215 (TH/Thailand/49-228-247-0.24.nat.tls1a-cgn01.myaisfibre.com) Log entries: Apr 7 05:03:09 vserv sshd[2445812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root Apr 7 05:03:11 vserv sshd[2445812]: Failed password for root from 49.228.247.215 port 37262 ssh2 Apr 7 05:03:30 vserv sshd[2445830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root Apr 7 05:03:33 vserv sshd[2445830]: Failed password for root from 49.228.247.215 port 37266 ssh2 Apr 7 05:03:52 vserv sshd[2445843]: Invalid user hwk from 49.228.247.215 port 37270 show less	Brute-Force SSH
🇨🇿 ☠\|ʂɧąɖơῳ\|☠	2025-04-08 06:01:08 (1 year ago)	Apr 8 07:59:31 Shadow sshd[3958354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Apr 8 07:59:31 Shadow sshd[3958354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root Apr 8 07:59:32 Shadow sshd[3958354]: Failed password for root from 49.228.247.215 port 35832 ssh2 ... show less	Brute-Force SSH
🇩🇪 sorgenfrei-it.com	2025-04-08 03:05:06 (1 year ago)	2025-04-08T05:04:45.125577+02:00 mainserver sshd[2411165]: pam_unix(sshd:auth): authentication failu ... show more 2025-04-08T05:04:45.125577+02:00 mainserver sshd[2411165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 2025-04-08T05:04:46.920559+02:00 mainserver sshd[2411165]: Failed password for invalid user shgy206 from 49.228.247.215 port 56732 ssh2 2025-04-08T05:05:04.774314+02:00 mainserver sshd[2411301]: Invalid user customer from 49.228.247.215 port 56734 2025-04-08T05:05:05.080249+02:00 mainserver sshd[2411301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 2025-04-08T05:05:06.619901+02:00 mainserver sshd[2411301]: Failed password for invalid user customer from 49.228.247.215 port 56734 ssh2 ... show less	Brute-Force SSH
🇳🇱 andronick83	2025-04-08 02:59:05 (1 year ago)	Apr 8 02:58:32 main sshd[1603318]: Failed password for root from 49.228.247.215 port 45436 ssh2 Apr ... show more Apr 8 02:58:32 main sshd[1603318]: Failed password for root from 49.228.247.215 port 45436 ssh2 Apr 8 02:58:55 main sshd[1603437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 user=root Apr 8 02:58:57 main sshd[1603437]: Failed password for root from 49.228.247.215 port 45440 ssh2 ... show less	Brute-Force SSH
🇬🇧 no1knows.com	2025-04-08 01:22:56 (1 year ago)	2025-04-08T02:22:28.508787+01:00 ldn.no1knows.com sshd-session[3319189]: Failed password for root fr ... show more 2025-04-08T02:22:28.508787+01:00 ldn.no1knows.com sshd-session[3319189]: Failed password for root from 49.228.247.215 port 41438 ssh2 2025-04-08T02:22:40.515246+01:00 ldn.no1knows.com sshd-session[3319209]: Invalid user hadoop from 49.228.247.215 port 41442 2025-04-08T02:22:40.726869+01:00 ldn.no1knows.com sshd-session[3319209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 2025-04-08T02:22:43.179867+01:00 ldn.no1knows.com sshd-session[3319209]: Failed password for invalid user hadoop from 49.228.247.215 port 41442 ssh2 2025-04-08T02:22:53.974752+01:00 ldn.no1knows.com sshd-session[3319257]: Invalid user liuqian from 49.228.247.215 port 41446 ... show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-04-08 00:05:58 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 Kraften	2025-04-07 20:45:50 (1 year ago)	ssh brute force ...	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-04-07 20:05:57 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 rouvep	2025-04-07 09:29:59 (1 year ago)	$f2bV_matches	Brute-Force SSH
🇳🇱 andronick83	2025-04-07 07:02:20 (1 year ago)	Apr 7 07:02:13 main sshd[1149984]: Invalid user zcc from 49.228.247.215 port 34614 Apr 7 07:02:13 ... show more Apr 7 07:02:13 main sshd[1149984]: Invalid user zcc from 49.228.247.215 port 34614 Apr 7 07:02:13 main sshd[1149984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.247.215 Apr 7 07:02:15 main sshd[1149984]: Failed password for invalid user zcc from 49.228.247.215 port 34614 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 210.212.136.3

🇳🇵 103.130.207.227

🇳🇱 91.92.40.231

🇨🇦 74.116.186.121

🇬🇧 51.68.200.137

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇪🇸 185.74.240.230

🇺🇸 173.255.223.143

🇨🇳 116.179.33.201

🇺🇸 104.28.219.190

🇸🇦 51.223.109.132

🇱🇹 45.227.254.170

🇸🇦 34.166.5.230

🇮🇩 182.8.227.196

🇺🇸 152.32.208.9

🇫🇮 147.185.133.162

🇵🇭 123.253.137.24

🇯🇵 118.193.61.179

🇨🇳 115.190.159.225