JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.173

Neutral Activity

Abuse Confidence Score

0% Low Risk

10 reports

8 reporters · latest 8 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.173 has been reported 10 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

10 from 8 distinct reporters

First reported

November 2nd 2025

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-02-20 03:49:45 UTC · (8 months ago)	49.228.84.173 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 19 21:48:38 14407 sshd[4817]: pam_unix(sshd:auth): ... show more 49.228.84.173 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 19 21:48:38 14407 sshd[4817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 user=root Feb 19 21:48:39 14407 sshd[4817]: Failed password for root from 49.228.84.173 port 45210 ssh2 Feb 19 21:48:59 14407 sshd[4821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.115.143 user=root Feb 19 21:49:01 14407 sshd[4821]: Failed password for root from 14.103.115.143 port 43734 ssh2 Feb 19 21:49:22 14407 sshd[4960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 user=root IP Addresses Blocked: show less	Brute-Force SSH
Anonymous	2026-02-20 03:40:02 UTC · (8 months ago)	Feb 20 04:29:27 dell sshd[31030]: Failed password for invalid user httpd from 49.228.84.173 port 41274 ssh2	SSH
🇺🇸 NeverBehave	2026-02-20 03:32:44 UTC · (8 months ago)	[fail2ban] service sshd jail	Brute-Force SSH
🇩🇪 NetWatch	2026-02-20 03:30:01 UTC · (8 months ago)	The IP 49.228.84.173 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇨🇭 altux	2026-02-20 03:24:15 UTC · (8 months ago)	2026-02-20T04:21:18.024905webmail sshd[729437]: Invalid user kusanagi from 49.228.84.173 port 24608 2026-02-20T04:21:18.030047webmail sshd[729437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 ... show more 2026-02-20T04:21:18.024905webmail sshd[729437]: Invalid user kusanagi from 49.228.84.173 port 24608 2026-02-20T04:21:18.030047webmail sshd[729437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 2026-02-20T04:21:19.912024webmail sshd[729437]: Failed password for invalid user kusanagi from 49.228.84.173 port 24608 ssh2 2026-02-20T04:24:14.407675webmail sshd[731869]: Invalid user anthony from 49.228.84.173 port 46134 ... show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2026-02-20 03:23:12 UTC · (8 months ago)	ID: 265158952 \| PORT: 58436 \| https://49-228-84-173.scanthe.net	Port Scan
🇭🇺 BeeServers	2026-02-07 04:58:20 UTC · (9 months ago)	2026-02-07T05:53:36.285770+01:00 beeservers sshd[1930770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 user=root 2026-02-07T05:53:38.309339+01:00 beeservers sshd[1930770]: Failed password for ... show more 2026-02-07T05:53:36.285770+01:00 beeservers sshd[1930770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 user=root 2026-02-07T05:53:38.309339+01:00 beeservers sshd[1930770]: Failed password for root from 49.228.84.173 port 52068 ssh2 2026-02-07T05:58:18.115011+01:00 beeservers sshd[2037947]: Invalid user drcom from 49.228.84.173 port 45428 2026-02-07T05:58:18.115871+01:00 beeservers sshd[2037947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 2026-02-07T05:58:19.852698+01:00 beeservers sshd[2037947]: Failed password for invalid user drcom from 49.228.84.173 port 45428 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-07 04:57:45 UTC · (9 months ago)	49.228.84.173 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 6 22:57:38 15616 sshd[7331]: pam_unix(sshd:auth): ... show more 49.228.84.173 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 6 22:57:38 15616 sshd[7331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 user=root Feb 6 22:57:17 15616 sshd[7322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.81.52.147 user=root Feb 6 22:57:19 15616 sshd[7322]: Failed password for root from 2.81.52.147 port 43444 ssh2 Feb 6 22:53:17 15616 sshd[6727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.141.196 user=root Feb 6 22:53:20 15616 sshd[6727]: Failed password for root from 151.80.141.196 port 41752 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-07 04:38:23 UTC · (9 months ago)	(sshd) Failed SSH login from 49.228.84.173 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 6 22:36:12 14106 sshd[22427]: pam_unix(sshd:auth): authentication fai ... show more (sshd) Failed SSH login from 49.228.84.173 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 6 22:36:12 14106 sshd[22427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.173 user=root Feb 6 22:36:14 14106 sshd[22427]: Failed password for root from 49.228.84.173 port 50344 ssh2 Feb 6 22:37:08 14106 sshd[22497]: Invalid user alireza from 49.228.84.173 port 54450 Feb 6 22:37:10 14106 sshd[22497]: Failed password for invalid user alireza from 49.228.84.173 port 54450 ssh2 Feb 6 22:38:07 14106 sshd[22575]: Invalid user admin from 49.228.84.173 port 1034 show less	Brute-Force SSH
🇬🇧 D3monite	2025-11-02 19:47:08 UTC · (1 year ago)	Attempted Brute Force (cpaneld)	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 109.160.32.165

🇺🇸 208.109.38.143

🇦🇷 200.123.52.84

🇨🇴 190.90.234.21

🇦🇷 186.22.253.240

🇮🇳 182.79.218.101

🇨🇴 181.62.2.57

🇩🇪 172.71.148.21

🇧🇴 166.114.163.49

🇿🇦 165.16.166.250

🇮🇳 103.241.55.148

🇺🇸 98.46.107.172

🇿🇦 40.123.240.128

🇳🇱 185.223.235.62

🇧🇷 157.228.156.197

🇵🇰 153.117.68.236

🇸🇬 150.109.16.200

🇱🇾 102.38.3.104

🇵🇹 95.136.120.201

🇸🇬 43.163.80.168