JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.117

Neutral Activity

Abuse Confidence Score

0% Low Risk

11 reports

10 reporters · latest 7 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.117 has been reported 11 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

11 from 10 distinct reporters

First reported

December 26th 2025

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 McClay	2026-03-17 16:08:55 UTC · (7 months ago)	Illegal access attempt:2026-03-17T17:08:51.631304+01:00 xn--kster-juait sshd[3394398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 2026-03-17T17:08:54.170648+01:00 xn--kster-juait sshd[3394398 ... show more Illegal access attempt:2026-03-17T17:08:51.631304+01:00 xn--kster-juait sshd[3394398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 2026-03-17T17:08:54.170648+01:00 xn--kster-juait sshd[3394398]: Failed password for invalid user rd from 49.228.84.117 port 47572 ssh2 ... show less	Brute-Force SSH
🇺🇸 shaunc	2026-03-17 16:01:06 UTC · (7 months ago)	Mar 17 11:00:43 mailman sshd[20131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 Mar 17 11:00:45 mailman sshd[20131]: Failed password for invalid user pruebas from 49.228.84.117 port 49094 ssh ... show more Mar 17 11:00:43 mailman sshd[20131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 Mar 17 11:00:45 mailman sshd[20131]: Failed password for invalid user pruebas from 49.228.84.117 port 49094 ssh2 Mar 17 11:00:46 mailman sshd[20131]: Disconnected from 49.228.84.117 port 49094 [preauth] show less	Brute-Force SSH
🇳🇱 vanadrighem.eu	2026-03-17 16:00:24 UTC · (7 months ago)	2026-03-17T17:00:20.824369+01:00 pietje sshd-session[2360937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 2026-03-17T17:00:22.572238+01:00 pietje sshd-session[2360937]: Failed password for in ... show more 2026-03-17T17:00:20.824369+01:00 pietje sshd-session[2360937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 2026-03-17T17:00:22.572238+01:00 pietje sshd-session[2360937]: Failed password for invalid user pruebas from 49.228.84.117 port 36426 ssh2 2026-03-17T17:00:23.587161+01:00 pietje sshd-session[2360937]: Disconnected from invalid user pruebas 49.228.84.117 port 36426 [preauth] ... show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-12-27 20:10:41 UTC · (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-26 20:10:40 UTC · (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-12-26 04:20:09 UTC · (10 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-26 03:08:31 UTC · (10 months ago)	49.228.84.117 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 25 20:37:47 17125 sshd[16100]: pam_unix(sshd:auth) ... show more 49.228.84.117 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 25 20:37:47 17125 sshd[16100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.47.48.138 user=root Dec 25 20:33:48 17125 sshd[15788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.47.48.138 user=root Dec 25 20:33:50 17125 sshd[15788]: Failed password for root from 101.47.48.138 port 34740 ssh2 Dec 25 21:08:17 17125 sshd[18644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 user=root Dec 25 21:08:19 17125 sshd[18644]: Failed password for root from 49.228.84.117 port 55742 ssh2 IP Addresses Blocked: 101.47.48.138 (SG/Singapore/-) show less	Brute-Force SSH
🇩🇪 YumXac	2025-12-26 02:59:48 UTC · (10 months ago)	2025-12-26T03:55:52.074898+01:00 pve-osd-201 sshd[209773]: Disconnected from invalid user reza 49.228.84.117 port 36360 [preauth] 2025-12-26T03:59:44.506821+01:00 pve-osd-201 sshd[209860]: Invalid user abdo from 49.228.84.117 port 51642 2025-12-26T03 ... show more 2025-12-26T03:55:52.074898+01:00 pve-osd-201 sshd[209773]: Disconnected from invalid user reza 49.228.84.117 port 36360 [preauth] 2025-12-26T03:59:44.506821+01:00 pve-osd-201 sshd[209860]: Invalid user abdo from 49.228.84.117 port 51642 2025-12-26T03:59:44.512309+01:00 pve-osd-201 sshd[209860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 2025-12-26T03:59:44.519722+01:00 pve-osd-201 sshd[209860]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 user=abdo 2025-12-26T03:59:47.043779+01:00 pve-osd-201 sshd[209860]: Failed password for invalid user abdo from 49.228.84.117 port 51642 ssh2 2025-12-26T03:59:47.654335+01:00 pve-osd-201 sshd[209860]: Disconnected from invalid user abdo 49.228.84.117 port 51642 [preauth] ... show less	Brute-Force SSH
🇬🇧 pearbright	2025-12-26 02:47:11 UTC · (10 months ago)	2025-12-26T02:41:55.398254+00:00 srv740043 sshd[1507896]: Failed password for invalid user tianhao from 49.228.84.117 port 51466 ssh2 2025-12-26T02:47:09.089899+00:00 srv740043 sshd[1508030]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more 2025-12-26T02:41:55.398254+00:00 srv740043 sshd[1507896]: Failed password for invalid user tianhao from 49.228.84.117 port 51466 ssh2 2025-12-26T02:47:09.089899+00:00 srv740043 sshd[1508030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.117 user=root 2025-12-26T02:47:10.962841+00:00 srv740043 sshd[1508030]: Failed password for root from 49.228.84.117 port 12876 ssh2 ... show less	Brute-Force SSH
🇱🇺 SiteXL	2025-12-26 02:36:04 UTC · (10 months ago)	{"event":{"DateTime":"2025-12-26T02:29:01Z","RemoteAddr":"49.228.84.117:53910","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"c79d8d4d-aa13-4b6a-a3c8-c57eaa4e04ba","Environ":"","User":"test", ... show more {"event":{"DateTime":"2025-12-26T02:29:01Z","RemoteAddr":"49.228.84.117:53910","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"c79d8d4d-aa13-4b6a-a3c8-c57eaa4e04ba","Environ":"","User":"test","Password":"q1w2e3r4","Client":"SSH-2.0-libssh_0.11.1","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"49.228.84.117","SourcePort":"53910","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2025-12-26T02:34:45Z","RemoteAddr":"49.228.84.117:38300","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"0b368c30-1b14-4670-bc0a-71deb4fb6d59","Environ":"","User":"user4","Password":"password123","Client":"SSH-2.0-libssh_0.11.1","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":" show less	Port Scan Hacking Brute-Force SSH
🇫🇷 rev-crew.info	2025-12-26 02:32:55 UTC · (10 months ago)	2025-12-26T03:31:24.299306+01:00 vpn.rev-crew.info sshd-session[303250]: Invalid user test from 49.228.84.117 port 57216 2025-12-26T03:31:24.473329+01:00 vpn.rev-crew.info sshd-session[303250]: Disconnected from invalid user test 49.228.84.117 port 5 ... show more 2025-12-26T03:31:24.299306+01:00 vpn.rev-crew.info sshd-session[303250]: Invalid user test from 49.228.84.117 port 57216 2025-12-26T03:31:24.473329+01:00 vpn.rev-crew.info sshd-session[303250]: Disconnected from invalid user test 49.228.84.117 port 57216 [preauth] 2025-12-26T03:32:36.451638+01:00 vpn.rev-crew.info sshd-session[303253]: Disconnected from authenticating user root 49.228.84.117 port 58950 [preauth] 2025-12-26T03:32:54.191176+01:00 vpn.rev-crew.info sshd-session[303255]: Disconnected from authenticating user root 49.228.84.117 port 57558 [preauth] ... show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 201.28.234.10

🇨🇦 149.56.99.200

🇨🇳 116.179.32.110

🇷🇺 46.8.246.27

🇫🇷 2001:41d0:33d:9200::408

🇨🇳 218.13.214.18

🇩🇪 195.63.25.26

🇳🇱 185.15.209.148

🇺🇦 176.103.4.156

🇨🇳 36.112.209.154

🇺🇸 207.90.244.21

🇸🇪 185.186.78.33

🇷🇺 91.202.233.64

🇳🇱 35.214.253.221

🇺🇸 193.39.184.14

🇫🇷 185.177.72.15

🇭🇰 20.255.80.194

🇰🇷 218.149.228.141

🇳🇱 195.178.110.26

🇩🇪 161.120.216.2