JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.223

Activity Trending Down

Abuse Confidence Score

3% Caution

11 reports

10 reporters · latest 1 week ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

11 from 10 distinct reporters

First reported

September 1st 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1

Most common categories Hacking 1 Web App Attack 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-03 00:15:03 UTC · (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/1160/form_key/GbCFv0q6OpJ5VrFc/ \| UA: Mozilla/5.0 (Windows; U; Windows NT 5.0) AppleWebKit/534.19.4 (KHTML, like Gecko) Version/5.0 Safari/534.19.4 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-13 01:37:55 UTC · (4 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 bigscoots.com	2026-03-17 18:49:42 UTC · (7 months ago)	(sshd) Failed SSH login from 49.228.84.223 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 17 18:48:02 22054 sshd[7593]: Invalid user smb from 49.228.84.223 port ... show more (sshd) Failed SSH login from 49.228.84.223 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 17 18:48:02 22054 sshd[7593]: Invalid user smb from 49.228.84.223 port 21672 Mar 17 18:48:04 22054 sshd[7593]: Failed password for invalid user smb from 49.228.84.223 port 21672 ssh2 Mar 17 18:48:47 22054 sshd[7717]: Invalid user dolphinscheduler from 49.228.84.223 port 42560 Mar 17 18:48:50 22054 sshd[7717]: Failed password for invalid user dolphinscheduler from 49.228.84.223 port 42560 ssh2 Mar 17 18:49:20 22054 sshd[7817]: Invalid user wes from 49.228.84.223 port 45766 show less	Brute-Force SSH
🇫🇷 LRob	2026-03-17 18:30:04 UTC · (7 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇸🇪 sverre26	2026-03-17 18:26:06 UTC · (7 months ago)	Bruteforce detected by fail2ban	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-07 06:50:08 UTC · (9 months ago)	49.228.84.223 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 7 00:49:57 14072 sshd[25658]: pam_unix(sshd:auth) ... show more 49.228.84.223 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 7 00:49:57 14072 sshd[25658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.239.111 user=root Feb 7 00:49:58 14072 sshd[25660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.223 user=root Feb 7 00:50:00 14072 sshd[25660]: Failed password for root from 49.228.84.223 port 43396 ssh2 Feb 7 00:48:35 14072 sshd[25582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.191.144.246 user=root Feb 7 00:48:37 14072 sshd[25582]: Failed password for root from 172.191.144.246 port 41614 ssh2 IP Addresses Blocked: 159.138.239.111 (TH/Thailand/ecs-159-138-239-111.compute.hwclouds-dns.com) show less	Brute-Force SSH
🇫🇷 Selckie	2026-02-07 06:42:09 UTC · (9 months ago)	fail2ban: SSH Brute-Force	Brute-Force SSH
🇪🇸 [email protected]	2026-02-07 06:37:00 UTC · (9 months ago)	Feb 7 06:36:58 webtest sshd[3299994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.223 user=root Feb 7 06:36:59 webtest sshd[3299994]: Failed password for root from 49.228.84.223 port 57642 ssh2 ... show more Feb 7 06:36:58 webtest sshd[3299994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.223 user=root Feb 7 06:36:59 webtest sshd[3299994]: Failed password for root from 49.228.84.223 port 57642 ssh2 ... show less	DDoS Attack Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
🇳🇱 Study Bitcoin 🤗	2025-09-03 02:00:18 UTC · (1 year ago)	Port probe to tcp/445 (smb) [srv127]	Port Scan Hacking
🇩🇪 Maike	2025-09-01 19:42:45 UTC · (1 year ago)	ports, 445/24H:1/7D:1	Port Scan
🇳🇱 b4shnhawx	2025-09-01 04:04:54 UTC · (1 year ago)	1756699493 - 09/01/2025 04:04:53 Host: 49.228.84.223/49.228.84.223 Port: 445 TCP Blocked ...	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 167.71.19.139

🇬🇧 145.224.90.131

🇰🇷 125.182.93.18

🇺🇸 45.66.211.187

🇸🇬 4.193.104.104

🇵🇭 202.69.169.162

🇺🇸 195.210.126.191

🇸🇬 194.5.82.47

🇭🇰 168.76.131.178

🇩🇪 144.31.25.88

🇧🇷 172.71.234.242

🇺🇸 134.209.208.112

🇷🇺 109.168.220.122

🇷🇺 46.44.0.185

🇩🇿 41.111.144.42

🇺🇸 24.199.81.47

🇦🇷 207.191.167.53

🇺🇸 162.216.150.178

🇫🇮 147.185.133.163

🇳🇱 77.67.26.22