JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.224

Neutral Activity

Abuse Confidence Score

0% Low Risk

220 reports

140 reporters · latest 10 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.224 has been reported 220 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

220 from 140 distinct reporters

First reported

October 21st 2025

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-01-14 23:39:50 UTC · (10 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.84.224	SSH
🇷🇸 Smel	2026-01-14 11:03:02 UTC · (10 months ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-14 10:42:29 UTC · (10 months ago)	(sshd) Failed SSH login from 49.228.84.224 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 14 04:35:43 14969 sshd[26058]: Invalid user rancher from 49.228.84.224 ... show more (sshd) Failed SSH login from 49.228.84.224 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 14 04:35:43 14969 sshd[26058]: Invalid user rancher from 49.228.84.224 port 18700 Jan 14 04:35:45 14969 sshd[26058]: Failed password for invalid user rancher from 49.228.84.224 port 18700 ssh2 Jan 14 04:40:47 14969 sshd[26449]: Invalid user sybase from 49.228.84.224 port 45802 Jan 14 04:40:48 14969 sshd[26449]: Failed password for invalid user sybase from 49.228.84.224 port 45802 ssh2 Jan 14 04:42:11 14969 sshd[26620]: Invalid user mariadb from 49.228.84.224 port 44630 show less	Brute-Force SSH
🇯🇵 bing	2026-01-14 10:34:25 UTC · (10 months ago)	2026-01-14T18:34:22.149176 vm20251001720 sshd[489602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.224 2026-01-14T18:34:24.219176 vm20251001720 sshd[489602]: Failed password for invalid user ranch ... show more 2026-01-14T18:34:22.149176 vm20251001720 sshd[489602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.224 2026-01-14T18:34:24.219176 vm20251001720 sshd[489602]: Failed password for invalid user rancher from 49.228.84.224 port 42430 ssh2 ... show less	Brute-Force SSH
🇺🇸 paradoxnetworks	2026-01-14 10:15:06 UTC · (10 months ago)	2026-01-14T10:08:28.429918+00:00 edge-con-mia01.int.pdx.net.uk sshd[4026931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.224 2026-01-14T10:08:30.163186+00:00 edge-con-mia01.int.pdx.net.uk sshd[40 ... show more 2026-01-14T10:08:28.429918+00:00 edge-con-mia01.int.pdx.net.uk sshd[4026931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.224 2026-01-14T10:08:30.163186+00:00 edge-con-mia01.int.pdx.net.uk sshd[4026931]: Failed password for invalid user cassandra from 49.228.84.224 port 33570 ssh2 2026-01-14T10:15:05.106238+00:00 edge-con-mia01.int.pdx.net.uk sshd[4027507]: Invalid user localadmin from 49.228.84.224 port 43930 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-14 10:12:56 UTC · (10 months ago)	(sshd) Failed SSH login from 49.228.84.224 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 14 04:10:16 15376 sshd[18008]: Invalid user cassandra from 49.228.84.2 ... show more (sshd) Failed SSH login from 49.228.84.224 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 14 04:10:16 15376 sshd[18008]: Invalid user cassandra from 49.228.84.224 port 55162 Jan 14 04:10:17 15376 sshd[18008]: Failed password for invalid user cassandra from 49.228.84.224 port 55162 ssh2 Jan 14 04:12:22 15376 sshd[18235]: Invalid user dell from 49.228.84.224 port 48594 Jan 14 04:12:24 15376 sshd[18235]: Failed password for invalid user dell from 49.228.84.224 port 48594 ssh2 Jan 14 04:12:44 15376 sshd[18290]: Invalid user dba from 49.228.84.224 port 53416 show less	Brute-Force SSH
🇳🇱 majo-it.nl	2026-01-14 09:44:17 UTC · (10 months ago)	Jan 14 09:42:18 fail2ban sshd[2811958]: Failed password for root from 49.228.84.224 port 56396 ssh2 Jan 14 09:44:16 fail2ban sshd[2811962]: Invalid user admin from 49.228.84.224 port 40324 ...	Brute-Force SSH
🇸🇬 aple345	2026-01-14 09:44:17 UTC · (10 months ago)	2026-01-14T09:44:14.948223+00:00 vps-72398c2c sshd-session[22322]: Invalid user admin from 49.228.84.224 port 36194 2026-01-14T09:44:14.951763+00:00 vps-72398c2c sshd-session[22322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 2026-01-14T09:44:14.948223+00:00 vps-72398c2c sshd-session[22322]: Invalid user admin from 49.228.84.224 port 36194 2026-01-14T09:44:14.951763+00:00 vps-72398c2c sshd-session[22322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.224 2026-01-14T09:44:17.076590+00:00 vps-72398c2c sshd-session[22322]: Failed password for invalid user admin from 49.228.84.224 port 36194 ssh2 ... show less	Brute-Force SSH
🇺🇸 psh-ack	2026-01-14 09:39:24 UTC · (10 months ago)	Honeypot detection: SSH attack on port 22. Details: SSH banner exchange Recent activity: SSH on port 22 - SSH banner exchange	Brute-Force
🇺🇸 bigscoots.com	2026-01-14 09:36:19 UTC · (10 months ago)	(sshd) Failed SSH login from 49.228.84.224 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 14 03:28:06 15140 sshd[3444]: Invalid user httpd from 49.228.84.224 po ... show more (sshd) Failed SSH login from 49.228.84.224 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 14 03:28:06 15140 sshd[3444]: Invalid user httpd from 49.228.84.224 port 35634 Jan 14 03:28:07 15140 sshd[3444]: Failed password for invalid user httpd from 49.228.84.224 port 35634 ssh2 Jan 14 03:32:36 15140 sshd[3819]: Invalid user fedora from 49.228.84.224 port 44436 Jan 14 03:32:38 15140 sshd[3819]: Failed password for invalid user fedora from 49.228.84.224 port 44436 ssh2 Jan 14 03:36:04 15140 sshd[4142]: Invalid user jdedwards from 49.228.84.224 port 38768 show less	Brute-Force SSH
Anonymous	2026-01-14 09:30:39 UTC · (10 months ago)	Jan 14 10:27:23 arm-am sshd[392067]: Invalid user httpd from 49.228.84.224 port 35806 Jan 14 10:30:17 arm-am sshd[392099]: Invalid user hikvision from 49.228.84.224 port 52252 Jan 14 10:30:39 arm-am sshd[392110]: Invalid user wlsadmin from 49.228.84. ... show more Jan 14 10:27:23 arm-am sshd[392067]: Invalid user httpd from 49.228.84.224 port 35806 Jan 14 10:30:17 arm-am sshd[392099]: Invalid user hikvision from 49.228.84.224 port 52252 Jan 14 10:30:39 arm-am sshd[392110]: Invalid user wlsadmin from 49.228.84.224 port 45644 ... show less	Brute-Force SSH
🇨🇦 kipfel★	2026-01-14 09:05:08 UTC · (10 months ago)	2026-01-14T03:58:15.874548-05:00 lw-dedi-hdz-48t-mtl sshd-session[3518022]: Invalid user untangle from 49.228.84.224 port 57500 2026-01-14T04:02:52.951688-05:00 lw-dedi-hdz-48t-mtl sshd-session[3519498]: Invalid user bal from 49.228.84.224 port 32958 ... show more 2026-01-14T03:58:15.874548-05:00 lw-dedi-hdz-48t-mtl sshd-session[3518022]: Invalid user untangle from 49.228.84.224 port 57500 2026-01-14T04:02:52.951688-05:00 lw-dedi-hdz-48t-mtl sshd-session[3519498]: Invalid user bal from 49.228.84.224 port 32958 2026-01-14T04:05:08.089844-05:00 lw-dedi-hdz-48t-mtl sshd-session[3520298]: Invalid user procurve from 49.228.84.224 port 35676 ... show less	Brute-Force SSH
🇩🇪 WebDig	2026-01-14 09:04:22 UTC · (10 months ago)	2026-01-14T09:02:22.455839+00:00 mxbackup sshd[261204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.224 2026-01-14T09:02:23.727942+00:00 mxbackup sshd[261204]: Failed password for invalid user un ... show more 2026-01-14T09:02:22.455839+00:00 mxbackup sshd[261204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.224 2026-01-14T09:02:23.727942+00:00 mxbackup sshd[261204]: Failed password for invalid user untangle from 49.228.84.224 port 35624 ssh2 2026-01-14T09:04:21.907041+00:00 mxbackup sshd[261247]: Invalid user centos from 49.228.84.224 port 38868 ... show less	Port Scan Brute-Force SSH
🇩🇪 formality	2026-01-14 08:58:38 UTC · (10 months ago)	Invalid user untangle from 49.228.84.224 port 35006	Brute-Force SSH
🇨🇦 hpg	2026-01-14 08:44:32 UTC · (10 months ago)	Jan 14 21:44:26 jnb sshd-session[1253461]: Invalid user wireguard from 49.228.84.224 port 55222	Brute-Force SSH

Showing 1 to 15 of 220 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 207.90.244.12

🇸🇬 178.128.93.146

🇳🇱 77.67.26.239

🇺🇸 174.67.181.107

🇸🇬 114.119.136.148

🇺🇸 104.28.166.187

🇺🇸 104.22.56.109

🇨🇳 14.103.114.85

🇷🇴 2.57.121.112

🇺🇸 216.25.90.1

🇧🇷 205.210.31.234

🇳🇱 193.47.62.97

🇻🇺 138.226.239.233

🇲🇦 105.156.94.195

🇺🇸 104.28.164.157

🇱🇰 103.2.149.141

🇸🇮 102.220.160.47

🇰🇿 95.57.112.54

🇧🇬 79.124.40.158

🇸🇬 43.163.80.168