JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.134

Neutral Activity

Abuse Confidence Score

0% Low Risk

92 reports

65 reporters · latest 6 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.134 has been reported 92 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

92 from 65 distinct reporters

First reported

February 9th 2026

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 helix	2026-04-24 03:21:00 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇧🇷 helix	2026-04-22 03:58:49 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇧🇷 helix	2026-04-10 03:28:37 UTC · (7 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-02 23:30:56 UTC · (7 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.84.134	SSH
🇳🇱 Jos Moonen	2026-04-02 13:05:55 UTC · (7 months ago)	Apr 2 15:05:31 raspberrypi sshd[26807]: Failed password for root from 49.228.84.134 port 42152 ssh2 Apr 2 15:05:52 raspberrypi sshd[26809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user= ... show more Apr 2 15:05:31 raspberrypi sshd[26807]: Failed password for root from 49.228.84.134 port 42152 ssh2 Apr 2 15:05:52 raspberrypi sshd[26809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root Apr 2 15:05:54 raspberrypi sshd[26809]: Failed password for root from 49.228.84.134 port 59808 ssh2 ... show less	Brute-Force SSH
🇳🇱 majo-it.nl	2026-04-02 12:33:24 UTC · (7 months ago)	Apr 2 12:33:21 fail2ban sshd[3384319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root Apr 2 12:33:23 fail2ban sshd[3384319]: Failed password for root from 49.228.84.134 port 52972 ss ... show more Apr 2 12:33:21 fail2ban sshd[3384319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root Apr 2 12:33:23 fail2ban sshd[3384319]: Failed password for root from 49.228.84.134 port 52972 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-02 11:38:53 UTC · (7 months ago)	49.228.84.134 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 2 06:24:19 15066 sshd[5289]: pam_unix(sshd:auth): ... show more 49.228.84.134 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 2 06:24:19 15066 sshd[5289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root Apr 2 06:24:21 15066 sshd[5289]: Failed password for root from 49.228.84.134 port 43024 ssh2 Apr 2 06:38:42 15066 sshd[6690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.189.27.123 user=root Apr 2 06:28:21 15066 sshd[5652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root Apr 2 06:28:23 15066 sshd[5652]: Failed password for root from 49.228.84.134 port 46416 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-04-02 11:27:32 UTC · (7 months ago)	Apr 2 05:27:22 b146-26 sshd[550584]: Failed password for root from 49.228.84.134 port 45324 ssh2 Apr 2 05:27:30 b146-26 sshd[550589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root A ... show more Apr 2 05:27:22 b146-26 sshd[550584]: Failed password for root from 49.228.84.134 port 45324 ssh2 Apr 2 05:27:30 b146-26 sshd[550589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root Apr 2 05:27:32 b146-26 sshd[550589]: Failed password for root from 49.228.84.134 port 40678 ssh2 ... show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-04-02 11:24:00 UTC · (7 months ago)	[11:24] Attempted SSH login on port 2222 with credentials root:Comtom@2024	Brute-Force SSH
🇫🇮 6kilowatti	2026-04-02 11:09:22 UTC · (7 months ago)	2026-04-02T14:09:19.331844+03:00 oh6ah sshd[387418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root 2026-04-02T14:09:21.403579+03:00 oh6ah sshd[387418]: Failed password for root from 4 ... show more 2026-04-02T14:09:19.331844+03:00 oh6ah sshd[387418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root 2026-04-02T14:09:21.403579+03:00 oh6ah sshd[387418]: Failed password for root from 49.228.84.134 port 49336 ssh2 ... show less	Brute-Force SSH
🇨🇿 plzenskypruvodce.cz	2026-04-02 11:01:22 UTC · (7 months ago)	2026-04-02T13:01:22.010287+02:00 eproxy sshd[177770]: User root not allowed because account is locked 2026-04-02T13:01:22.200773+02:00 eproxy sshd[177770]: Received disconnect from 49.228.84.134 port 51278:11: Bye Bye [preauth] ...	Web App Attack
🇺🇸 yzfdude1	2026-04-02 10:39:46 UTC · (7 months ago)	Apr 2 04:39:17 b146-54 sshd[563441]: Failed password for root from 49.228.84.134 port 58690 ssh2 Apr 2 04:39:44 b146-54 sshd[563449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root A ... show more Apr 2 04:39:17 b146-54 sshd[563441]: Failed password for root from 49.228.84.134 port 58690 ssh2 Apr 2 04:39:44 b146-54 sshd[563449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root Apr 2 04:39:46 b146-54 sshd[563449]: Failed password for root from 49.228.84.134 port 56210 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-04-02 10:23:43 UTC · (7 months ago)	Apr 2 12:20:51 fell sshd[4026279]: User root from 49.228.84.134 not allowed because not listed in AllowUsers Apr 2 12:22:23 fell sshd[4026288]: User root from 49.228.84.134 not allowed because not listed in AllowUsers Apr 2 12:23:42 fell sshd[4026 ... show more Apr 2 12:20:51 fell sshd[4026279]: User root from 49.228.84.134 not allowed because not listed in AllowUsers Apr 2 12:22:23 fell sshd[4026288]: User root from 49.228.84.134 not allowed because not listed in AllowUsers Apr 2 12:23:42 fell sshd[4026294]: User root from 49.228.84.134 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇩🇪 moretrix	2026-04-02 10:16:53 UTC · (7 months ago)	2026-04-02T12:16:41.406387+02:00 ieyasu.moretrix.com sshd-session[279380]: User root from 49.228.84.134 not allowed because none of user's groups are listed in AllowGroups 2026-04-02T12:16:51.536539+02:00 ieyasu.moretrix.com sshd-session[279382]: Con ... show more 2026-04-02T12:16:41.406387+02:00 ieyasu.moretrix.com sshd-session[279380]: User root from 49.228.84.134 not allowed because none of user's groups are listed in AllowGroups 2026-04-02T12:16:51.536539+02:00 ieyasu.moretrix.com sshd-session[279382]: Connection from 49.228.84.134 port 39844 on 176.9.64.17 port 22 rdomain "" 2026-04-02T12:16:52.582687+02:00 ieyasu.moretrix.com sshd-session[279382]: User root from 49.228.84.134 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-02 10:15:31 UTC · (7 months ago)	49.228.84.134 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 2 05:11:53 14190 sshd[30137]: pam_unix(sshd:auth) ... show more 49.228.84.134 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 2 05:11:53 14190 sshd[30137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.229.125.106 user=root Apr 2 05:11:55 14190 sshd[30137]: Failed password for root from 103.229.125.106 port 37110 ssh2 Apr 2 04:40:24 14190 sshd[26820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.134 user=root Apr 2 04:40:25 14190 sshd[26820]: Failed password for root from 49.228.84.134 port 36498 ssh2 Apr 2 05:15:13 14190 sshd[30530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.229.125.106 user=root IP Addresses Blocked: 103.229.125.106 (HK/Hong Kong/-) show less	Brute-Force SSH

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇷 217.219.45.219

🇨🇳 123.144.21.189

🇰🇷 121.131.93.21

🇺🇸 104.167.19.82

🇮🇩 103.121.23.204

🇺🇸 66.132.172.102

🇱🇹 62.60.134.134

🇰🇷 220.116.117.213

🇺🇸 192.253.209.7

🇳🇱 160.119.71.193

🇨🇳 101.126.4.240

🇸🇪 83.233.100.175

🇱🇹 82.197.202.147

🇯🇵 34.97.169.190

🇳🇱 195.178.110.217

🇩🇪 194.88.98.86

🇳🇱 193.47.62.108

🇺🇸 157.245.141.54

🇺🇸 72.13.46.8

🇮🇶 65.20.251.41