JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.221

Neutral Activity

Abuse Confidence Score

0% Low Risk

101 reports

71 reporters · latest 6 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.221 has been reported 101 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

101 from 71 distinct reporters

First reported

November 17th 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 13:09:25 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-15 20:11:35 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 anon333	2026-02-15 05:34:06 UTC · (8 months ago)	Hacker syslog review 1771133646	Hacking
🇩🇪 ghostwarriors	2026-02-15 05:20:25 UTC · (8 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-15 05:01:08 UTC · (8 months ago)	49.228.84.221 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 14 23:00:46 18418 sshd[9680]: pam_unix(sshd:auth): ... show more 49.228.84.221 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 14 23:00:46 18418 sshd[9680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.221 user=root Feb 14 23:00:47 18418 sshd[9680]: Failed password for root from 49.228.84.221 port 50010 ssh2 Feb 14 22:24:00 18418 sshd[6817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.116.129.55 user=root Feb 14 22:22:32 18418 sshd[6732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.221.112 user=root Feb 14 22:22:34 18418 sshd[6732]: Failed password for root from 182.43.221.112 port 43808 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-11-19 20:10:00 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 ivotonev	2025-11-19 05:01:38 UTC · (11 months ago)	SSH login bruteforce	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-11-18 22:59:16 UTC · (11 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.84.221	SSH
🇹🇷 rtbh.com.tr	2025-11-18 20:09:59 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 shimizu	2025-11-18 15:01:01 UTC · (11 months ago)	3 times SMTP brute-force	Hacking Brute-Force
🇵🇱 Wepted	2025-11-18 07:40:07 UTC · (11 months ago)	2025-11-18T08:37:06.460695+01:00 axisverse sshd-session[3135935]: Invalid user ubuntu from 49.228.84.221 port 57786 2025-11-18T08:38:31.328788+01:00 axisverse sshd-session[3139030]: Invalid user lucas from 49.228.84.221 port 57542 2025-11-18T08:40:06 ... show more 2025-11-18T08:37:06.460695+01:00 axisverse sshd-session[3135935]: Invalid user ubuntu from 49.228.84.221 port 57786 2025-11-18T08:38:31.328788+01:00 axisverse sshd-session[3139030]: Invalid user lucas from 49.228.84.221 port 57542 2025-11-18T08:40:06.001997+01:00 axisverse sshd-session[3142572]: Invalid user peertube from 49.228.84.221 port 35422 ... show less	Brute-Force SSH
🇺🇸 shaunc	2025-11-18 07:37:44 UTC · (11 months ago)	Nov 18 01:37:40 [redacted] sshd[27591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.221 Nov 18 01:37:43 [redacted] sshd[27591]: Failed password for invalid user ubuntu from 49.228.84.221 port 5940 ... show more Nov 18 01:37:40 [redacted] sshd[27591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.221 Nov 18 01:37:43 [redacted] sshd[27591]: Failed password for invalid user ubuntu from 49.228.84.221 port 59408 ssh2 Nov 18 01:37:43 [redacted] sshd[27591]: Disconnected from 49.228.84.221 port 59408 [preauth] show less	Brute-Force SSH
🇫🇷 TuxCLOUD	2025-11-18 07:26:27 UTC · (11 months ago)	Nov 18 08:24:35 s1-4-gra7 sshd[3300380]: Invalid user rocky from 49.228.84.221 port 48574 Nov 18 08:26:27 s1-4-gra7 sshd[3300554]: Invalid user ossadm from 49.228.84.221 port 39374	Brute-Force SSH
🇧🇷 modscleo4	2025-11-18 07:10:42 UTC · (11 months ago)	2025-11-18T04:10:42.435889-03:00 salada-de-fruta sshd[381101]: Invalid user management from 49.228.84.221 port 44076 ...	Port Scan Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-18 06:56:31 UTC · (11 months ago)	49.228.84.221 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 18 00:56:06 3728 sshd[27374]: pam_unix(sshd:auth): ... show more 49.228.84.221 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 18 00:56:06 3728 sshd[27374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.85.250.44 user=root Nov 18 00:55:29 3728 sshd[27302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.167.168.9 user=root Nov 18 00:55:31 3728 sshd[27302]: Failed password for root from 43.167.168.9 port 53420 ssh2 Nov 18 00:55:47 3728 sshd[27306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.221 user=root Nov 18 00:55:50 3728 sshd[27306]: Failed password for root from 49.228.84.221 port 52024 ssh2 IP Addresses Blocked: 45.85.250.44 (GB/United Kingdom/vmi2895275.contaboserver.net) 43.167.168.9 (JP/Japan/-) show less	Brute-Force SSH

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇭 125.27.250.30

🇧🇩 103.77.253.150

🇺🇸 40.67.177.166

🇯🇵 210.189.65.5

🇺🇦 195.191.24.60

🇳🇱 195.178.110.30

🇨🇭 173.239.216.42

🇺🇸 172.234.199.93

🇺🇸 165.154.255.63

🇺🇸 162.216.149.62

🇳🇱 138.226.239.233

🇭🇰 118.26.37.105

🇮🇳 116.75.15.249

🇬🇧 87.236.176.133

🇷🇴 80.94.95.116

🇳🇱 77.239.124.35

🇩🇪 69.5.169.154

🇺🇸 46.110.2.84

🇺🇸 216.158.95.195

🇳🇱 185.182.194.245