JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.138

Neutral Activity

Abuse Confidence Score

0% Low Risk

16 reports

13 reporters · latest 9 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.138 has been reported 16 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

16 from 13 distinct reporters

First reported

January 28th 2026

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-02-07 00:11:25 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-02 20:11:21 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-01 20:11:20 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇹 yvoictra	2026-01-31 09:24:04 UTC · (9 months ago)	Jan 31 10:24:04 niove sshd[1808905]: Invalid user c from 49.228.84.138 port 59660 ...	Brute-Force SSH
🇩🇪 ghostwarriors	2026-01-31 09:20:33 UTC · (9 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇬🇧 NotCool	2026-01-31 09:18:11 UTC · (9 months ago)	(sshd) Failed SSH login from 49.228.84.138 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 10 in the last 3600 secs	Brute-Force SSH
🇩🇪 snhosting	2026-01-31 09:15:05 UTC · (9 months ago)	2026-01-31T10:10:48.481560+01:00 www4 sshd-session[2448157]: Failed password for invalid user varnish from 49.228.84.138 port 59166 ssh2 2026-01-31T10:14:34.315705+01:00 www4 sshd-session[2457343]: Invalid user frappe1 from 49.228.84.138 port 27532 2 ... show more 2026-01-31T10:10:48.481560+01:00 www4 sshd-session[2448157]: Failed password for invalid user varnish from 49.228.84.138 port 59166 ssh2 2026-01-31T10:14:34.315705+01:00 www4 sshd-session[2457343]: Invalid user frappe1 from 49.228.84.138 port 27532 2026-01-31T10:14:34.317726+01:00 www4 sshd-session[2457343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.138 2026-01-31T10:14:36.334446+01:00 www4 sshd-session[2457343]: Failed password for invalid user frappe1 from 49.228.84.138 port 27532 ssh2 2026-01-31T10:15:05.080158+01:00 www4 sshd-session[2458981]: Invalid user fabricio from 49.228.84.138 port 59704 ... show less	Phishing Email Spam Brute-Force Web App Attack SSH
🇩🇰 SikkerAPI	2026-01-31 09:10:31 UTC · (9 months ago)	SSH post-breach activity (command_count>0). sessions=1 total_commands=2 first_seen=2026-01-31T09:10:31+00:00 last_seen=2026-01-31T09:10:31+00:00 usernames=varnish hostnames=gpu-node-87 country=TH	Brute-Force SSH
🇩🇪 RobertR11	2026-01-31 09:09:33 UTC · (9 months ago)	2026-01-31T10:09:30.528215+01:00 HAMA sshd-session[105609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.138 2026-01-31T10:09:32.930697+01:00 HAMA sshd-session[105609]: Failed password for invalid ... show more 2026-01-31T10:09:30.528215+01:00 HAMA sshd-session[105609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.138 2026-01-31T10:09:32.930697+01:00 HAMA sshd-session[105609]: Failed password for invalid user varnish from 49.228.84.138 port 52532 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-31 09:04:09 UTC · (9 months ago)	(sshd) Failed SSH login from 49.228.84.138 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 31 02:53:41 13584 sshd[19337]: Invalid user rust from 49.228.84.138 po ... show more (sshd) Failed SSH login from 49.228.84.138 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 31 02:53:41 13584 sshd[19337]: Invalid user rust from 49.228.84.138 port 58768 Jan 31 02:53:42 13584 sshd[19337]: Failed password for invalid user rust from 49.228.84.138 port 58768 ssh2 Jan 31 03:01:18 13584 sshd[19997]: Invalid user kafka from 49.228.84.138 port 34670 Jan 31 03:01:20 13584 sshd[19997]: Failed password for invalid user kafka from 49.228.84.138 port 34670 ssh2 Jan 31 03:03:55 13584 sshd[20150]: Invalid user clone from 49.228.84.138 port 43646 show less	Brute-Force SSH
🇨🇦 FredoJF	2026-01-31 08:58:09 UTC · (9 months ago)	2026-01-31T03:52:39.887774-05:00 wise0wl sshd[530609]: Invalid user rust from 49.228.84.138 port 38248 2026-01-31T03:57:32.467326-05:00 wise0wl sshd[539036]: Invalid user oracle from 49.228.84.138 port 48568 2026-01-31T03:58:03.678700-05:00 wise0wl s ... show more 2026-01-31T03:52:39.887774-05:00 wise0wl sshd[530609]: Invalid user rust from 49.228.84.138 port 38248 2026-01-31T03:57:32.467326-05:00 wise0wl sshd[539036]: Invalid user oracle from 49.228.84.138 port 48568 2026-01-31T03:58:03.678700-05:00 wise0wl sshd[540114]: Invalid user haldaemon from 49.228.84.138 port 56622 ... show less	Brute-Force SSH
🇨🇭 altux	2026-01-31 08:57:49 UTC · (9 months ago)	2026-01-31T10:53:00.853993+02:00 alwww2 sshd[2127417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.138 2026-01-31T10:53:02.297779+02:00 alwww2 sshd[2127417]: Failed password for invalid user rust ... show more 2026-01-31T10:53:00.853993+02:00 alwww2 sshd[2127417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.138 2026-01-31T10:53:02.297779+02:00 alwww2 sshd[2127417]: Failed password for invalid user rust from 49.228.84.138 port 60222 ssh2 2026-01-31T10:57:49.137082+02:00 alwww2 sshd[2128650]: Invalid user alumno from 49.228.84.138 port 35256 ... show less	Brute-Force SSH
🇩🇪 JustPlayer	2026-01-31 08:46:04 UTC · (9 months ago)	2026-01-31T08:41:28.025298+00:00 de-milk-fsn01-100 sshd[1311334]: Invalid user ww from 49.228.84.138 port 35778 2026-01-31T08:42:49.588615+00:00 de-milk-fsn01-100 sshd[1312259]: Invalid user ftpuser1 from 49.228.84.138 port 51320 2026-01-31T08:43:43. ... show more 2026-01-31T08:41:28.025298+00:00 de-milk-fsn01-100 sshd[1311334]: Invalid user ww from 49.228.84.138 port 35778 2026-01-31T08:42:49.588615+00:00 de-milk-fsn01-100 sshd[1312259]: Invalid user ftpuser1 from 49.228.84.138 port 51320 2026-01-31T08:43:43.668073+00:00 de-milk-fsn01-100 sshd[1312915]: Invalid user uftp from 49.228.84.138 port 39414 2026-01-31T08:44:49.993847+00:00 de-milk-fsn01-100 sshd[1313665]: Invalid user mama from 49.228.84.138 port 43884 2026-01-31T08:46:04.378087+00:00 de-milk-fsn01-100 sshd[1314515]: Invalid user linda from 49.228.84.138 port 42880 ... show less	Brute-Force SSH
Anonymous	2026-01-31 08:44:16 UTC · (9 months ago)	Jan 31 08:40:22 nosvoid sshd[17536]: Failed password for invalid user ww from 49.228.84.138 port 36488 ssh2 Jan 31 08:43:41 nosvoid sshd[23800]: Invalid user uftp from 49.228.84.138 port 37076 Jan 31 08:43:41 nosvoid sshd[23800]: pam_unix(sshd:auth): ... show more Jan 31 08:40:22 nosvoid sshd[17536]: Failed password for invalid user ww from 49.228.84.138 port 36488 ssh2 Jan 31 08:43:41 nosvoid sshd[23800]: Invalid user uftp from 49.228.84.138 port 37076 Jan 31 08:43:41 nosvoid sshd[23800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.138 Jan 31 08:43:44 nosvoid sshd[23800]: Failed password for invalid user uftp from 49.228.84.138 port 37076 ssh2 Jan 31 08:44:15 nosvoid sshd[24822]: Invalid user simon from 49.228.84.138 port 45376 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-31 08:43:29 UTC · (9 months ago)	49.228.84.138 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 31 02:43:06 9178 sshd[22302]: pam_unix(sshd:auth): ... show more 49.228.84.138 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 31 02:43:06 9178 sshd[22302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.138 user=root Jan 31 02:43:08 9178 sshd[22302]: Failed password for root from 49.228.84.138 port 38376 ssh2 Jan 31 01:49:43 9178 sshd[12272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.234.194 user=root Jan 31 01:51:36 9178 sshd[12613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.83.234.180 user=root Jan 31 01:51:38 9178 sshd[12613]: Failed password for root from 203.83.234.180 port 54898 ssh2 IP Addresses Blocked: show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 210.87.92.161

🇧🇷 187.16.96.250

🇺🇸 173.211.7.46

🇧🇷 138.59.217.29

🇨🇳 123.166.66.74

🇺🇸 104.164.173.169

🇮🇳 89.117.208.62

🇳🇱 64.205.72.209

🇺🇸 45.79.163.53

🇭🇰 38.207.161.55

🇪🇨 2800:bf0:b842:1128:e81f:8e79:4209:2096

🇧🇪 198.235.24.205

🇩🇪 194.88.98.83

🇧🇷 186.219.165.238

🇩🇪 185.183.179.159

🇰🇷 175.209.156.146

🇺🇸 172.84.125.195

🇻🇪 161.22.33.85

🇸🇬 139.162.1.181

🇨🇳 120.48.45.34