JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.202

Neutral Activity

Abuse Confidence Score

0% Low Risk

7 reports

7 reporters · latest 7 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.202 has been reported 7 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

7 from 7 distinct reporters

First reported

October 31st 2025

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-03-26 19:19:20 UTC · (7 months ago)	SSH Brute force: 1 attempts were recorded from 49.228.84.202 2026-03-26T19:09:53+01:00 Invalid user ubuntu22 from 49.228.84.202 port 39810	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-26 18:21:58 UTC · (7 months ago)	49.228.84.202 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 26 13:18:57 13577 sshd[27767]: pam_unix(sshd:auth) ... show more 49.228.84.202 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 26 13:18:57 13577 sshd[27767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.202 user=root Mar 26 13:18:59 13577 sshd[27767]: Failed password for root from 49.228.84.202 port 59870 ssh2 Mar 26 13:21:36 13577 sshd[28010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.202 user=root Mar 26 13:20:59 13577 sshd[27936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.213.128 user=root Mar 26 13:21:01 13577 sshd[27936]: Failed password for root from 123.58.213.128 port 58666 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇧🇾 lns.bz	2026-03-26 18:21:57 UTC · (7 months ago)	SSH bruteforce [BY]	SSH
🇨🇭 ScanThe.Net	2026-03-26 18:20:17 UTC · (7 months ago)	ID: 1736882648 \| PORT: 51367 \| https://49-228-84-202.scanthe.net	Port Scan
🇩🇪 NetWatch	2026-03-26 18:14:46 UTC · (7 months ago)	The IP 49.228.84.202 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇳🇱 majo-it.nl	2026-03-26 18:10:07 UTC · (7 months ago)	Mar 26 18:10:05 fail2ban sshd[3356124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.202 Mar 26 18:10:06 fail2ban sshd[3356124]: Failed password for invalid user ubuntu22 from 49.228.84.202 port 4 ... show more Mar 26 18:10:05 fail2ban sshd[3356124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.202 Mar 26 18:10:06 fail2ban sshd[3356124]: Failed password for invalid user ubuntu22 from 49.228.84.202 port 44272 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-10-31 19:02:50 UTC · (1 year ago)	Web attack	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.46

🇺🇸 195.184.76.37

🇺🇸 129.121.103.78

🇨🇳 116.231.240.133

🇻🇳 103.69.96.120

🇺🇸 92.50.32.96

🇪🇸 91.116.117.195

🇷🇴 80.94.95.115

🇳🇱 64.205.72.83

🇧🇷 45.183.86.230

🇺🇸 40.74.211.225

🇮🇶 37.236.120.228

🇺🇸 20.65.171.65

🇳🇱 2400:cb00:556:1000:c66b:c436:be7f:e879

🇧🇷 201.17.208.212

🇿🇦 196.220.32.228

🇬🇧 185.247.137.108

🇺🇸 185.61.219.167

🇮🇩 163.7.6.114

🇹🇷 152.233.64.211