JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.174

Neutral Activity

Abuse Confidence Score

0% Low Risk

91 reports

68 reporters · latest 7 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.174 has been reported 91 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

91 from 68 distinct reporters

First reported

March 18th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 sh97	2026-03-31 20:25:32 UTC · (7 months ago)	tr01: SSH Brute Force from 49.228.84.174 at 2026-04-01 01:55:32 IST	Brute-Force SSH
🇹🇷 sh97	2026-03-30 10:41:37 UTC · (7 months ago)	tr01: SSH Brute Force from 49.228.84.174 at 2026-03-30 16:11:36 IST	Brute-Force SSH
🇹🇷 sh97	2026-03-30 03:57:05 UTC · (7 months ago)	tr01: SSH Brute Force from 49.228.84.174 at 2026-03-30 09:27:05 IST	Brute-Force SSH
🇹🇷 sh97	2026-03-28 13:28:11 UTC · (7 months ago)	tr01: SSH Brute Force from 49.228.84.174 at 2026-03-28 18:58:11 IST	Brute-Force SSH
Anonymous	2026-03-26 15:47:12 UTC · (7 months ago)	Invalid user universal from 49.228.84.174 port 33086	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-26 15:08:53 UTC · (7 months ago)	49.228.84.174 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [canon] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 26 10:08:45 15032 sshd[26424]: Invalid user canon ... show more 49.228.84.174 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [canon] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 26 10:08:45 15032 sshd[26424]: Invalid user canon from 49.228.84.174 port 48668 Mar 26 10:08:23 15032 sshd[26407]: Invalid user canon from 103.59.94.117 port 42198 Mar 26 10:08:25 15032 sshd[26407]: Failed password for invalid user canon from 103.59.94.117 port 42198 ssh2 Mar 26 10:07:21 15032 sshd[26247]: Invalid user canon from 154.198.162.75 port 40524 Mar 26 10:07:23 15032 sshd[26247]: Failed password for invalid user canon from 154.198.162.75 port 40524 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇨🇭 barateza	2026-03-26 15:00:06 UTC · (7 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-21 20:12:11 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 shantanoo	2026-03-21 19:13:13 UTC · (7 months ago)	The dark side is strong with this IP, but our firewall is stronger. You are going down, young one. ...	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-03-20 01:36:30 UTC · (7 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-03-19 23:16:04 UTC · (7 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.84.174	SSH
🇹🇷 rtbh.com.tr	2026-03-19 20:12:09 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 anon333	2026-03-19 13:34:13 UTC · (7 months ago)	Hacker syslog review 1773927252	Hacking
🇬🇧 Silly Development	2026-03-19 10:51:17 UTC · (7 months ago)	Mar 19 10:49:09 vps sshd[1470144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.174 Mar 19 10:49:10 vps sshd[1470144]: Failed password for invalid user hadoop from 49.228.84.174 port 41936 ssh2 Ma ... show more Mar 19 10:49:09 vps sshd[1470144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.174 Mar 19 10:49:10 vps sshd[1470144]: Failed password for invalid user hadoop from 49.228.84.174 port 41936 ssh2 Mar 19 10:51:16 vps sshd[1470152]: Invalid user modify from 49.228.84.174 port 38756 ... show less	Brute-Force SSH
🇫🇷 Max la Menace	2026-03-19 10:42:37 UTC · (7 months ago)	2026-03-19T11:42:23.045658+01:00 ns3124905 sshd-session[4151426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.174 2026-03-19T11:42:24.357788+01:00 ns3124905 sshd-session[4151426]: Failed password ... show more 2026-03-19T11:42:23.045658+01:00 ns3124905 sshd-session[4151426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.174 2026-03-19T11:42:24.357788+01:00 ns3124905 sshd-session[4151426]: Failed password for invalid user perforce from 49.228.84.174 port 52608 ssh2 2026-03-19T11:42:36.805421+01:00 ns3124905 sshd-session[4151443]: Invalid user robot from 49.228.84.174 port 54236 ... show less	Brute-Force SSH

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 91.231.89.197

🇧🇷 2804:10f8:452b:8c40:7d7f:fceb:e96e:d103

🇹🇼 221.120.77.34

🇵🇦 190.140.20.11

🇺🇸 184.186.73.72

🇨🇴 181.142.90.116

🇵🇱 162.158.103.219

🇵🇱 162.158.102.56

🇩🇪 151.243.11.110

🇯🇵 139.162.70.53

🇮🇪 108.132.249.171

🇺🇸 104.255.169.44

🇺🇸 83.142.52.175

🇻🇳 36.50.176.247

🇺🇸 32.192.75.123

🇩🇪 2003:c0:9713:f400:e0af:b245:5453:d8f5

🇳🇱 213.209.159.175

🇩🇪 209.166.0.207

🇧🇪 198.235.24.204

🇭🇰 165.154.62.158