JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.225

Neutral Activity

Abuse Confidence Score

0% Low Risk

42 reports

31 reporters · latest 5 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.225 has been reported 42 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

42 from 31 distinct reporters

First reported

October 18th 2025

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-09 10:00:07 UTC · (5 months ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Killer parameter blocked \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 \| (Magento Site)	Hacking Bad Web Bot
🇬🇧 thetomtaylor.co.uk	2026-05-05 13:09:25 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-12-27 20:10:41 UTC · (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-12-27 07:57:47 UTC · (10 months ago)	49.228.84.225 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 27 01:54:12 14418 sshd[28934]: pam_unix(sshd:auth) ... show more 49.228.84.225 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 27 01:54:12 14418 sshd[28934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.225 user=root Dec 27 01:54:15 14418 sshd[28934]: Failed password for root from 49.228.84.225 port 56244 ssh2 Dec 27 01:57:29 14418 sshd[29535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.69 user=root Dec 27 01:57:31 14418 sshd[29535]: Failed password for root from 49.228.88.69 port 27546 ssh2 Dec 27 01:37:58 14418 sshd[24362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.186.208.20 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 Babu Chang	2025-12-27 07:54:07 UTC · (10 months ago)	sshguard	SSH
🇨🇦 zXero	2025-12-27 07:52:00 UTC · (10 months ago)	Fail2Ban automatic report - jail: geoip-ssh	DDoS Attack Brute-Force SSH
🇩🇪 ghostwarriors	2025-12-27 07:50:23 UTC · (10 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 binguscity	2025-12-27 07:44:51 UTC · (10 months ago)	Dec 27 07:43:59 thenormalpeople sshd[472931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.225 user=root Dec 27 07:44:01 thenormalpeople sshd[472931]: Failed password for root from 49.228.84.225 p ... show more Dec 27 07:43:59 thenormalpeople sshd[472931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.225 user=root Dec 27 07:44:01 thenormalpeople sshd[472931]: Failed password for root from 49.228.84.225 port 43144 ssh2 Dec 27 07:44:50 thenormalpeople sshd[472947]: Invalid user test from 49.228.84.225 port 38864 ... show less	Brute-Force SSH
🇺🇸 kosada.com	2025-12-27 07:43:38 UTC · (10 months ago)	SSH password guessing: Invalid user ubuntu from 49.228.84.225 port 46312	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-27 07:38:07 UTC · (10 months ago)	49.228.84.225 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 27 01:24:11 15145 sshd[20764]: pam_unix(sshd:auth) ... show more 49.228.84.225 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 27 01:24:11 15145 sshd[20764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.89.53 user=root Dec 27 01:24:13 15145 sshd[20764]: Failed password for root from 161.132.89.53 port 46528 ssh2 Dec 27 01:26:19 15145 sshd[21037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.89.53 user=root Dec 27 01:37:49 15145 sshd[22592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.225 user=root Dec 27 01:37:51 15145 sshd[22592]: Failed password for root from 49.228.84.225 port 58862 ssh2 IP Addresses Blocked: 161.132.89.53 (PE/Peru/-) show less	Brute-Force SSH
🇸🇪 paradoxnetworks	2025-12-27 07:35:20 UTC · (10 months ago)	2025-12-27T07:32:15.950315+00:00 edge-obe-sto01.int.pdx.net.uk sshd[1098579]: Invalid user testmail from 49.228.84.225 port 59858 2025-12-27T07:33:07.415895+00:00 edge-obe-sto01.int.pdx.net.uk sshd[1098639]: Invalid user ubuntu from 49.228.84.225 por ... show more 2025-12-27T07:32:15.950315+00:00 edge-obe-sto01.int.pdx.net.uk sshd[1098579]: Invalid user testmail from 49.228.84.225 port 59858 2025-12-27T07:33:07.415895+00:00 edge-obe-sto01.int.pdx.net.uk sshd[1098639]: Invalid user ubuntu from 49.228.84.225 port 55438 2025-12-27T07:35:20.446519+00:00 edge-obe-sto01.int.pdx.net.uk sshd[1098811]: Invalid user git from 49.228.84.225 port 45820 ... show less	Brute-Force SSH
🇳🇱 kipfel★	2025-12-27 07:23:19 UTC · (10 months ago)	2025-12-27T08:21:10.796882+01:00 lw-dedi-hdz-10g2480-ams sshd[1568118]: Invalid user admin from 49.228.84.225 port 46436 2025-12-27T08:21:48.747860+01:00 lw-dedi-hdz-10g2480-ams sshd[1568185]: Invalid user mika from 49.228.84.225 port 33032 2025-12-2 ... show more 2025-12-27T08:21:10.796882+01:00 lw-dedi-hdz-10g2480-ams sshd[1568118]: Invalid user admin from 49.228.84.225 port 46436 2025-12-27T08:21:48.747860+01:00 lw-dedi-hdz-10g2480-ams sshd[1568185]: Invalid user mika from 49.228.84.225 port 33032 2025-12-27T08:23:18.818544+01:00 lw-dedi-hdz-10g2480-ams sshd[1568331]: Invalid user ftp_user from 49.228.84.225 port 43686 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-27 07:07:46 UTC · (10 months ago)	(sshd) Failed SSH login from 49.228.84.225 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 27 01:00:40 13540 sshd[9323]: Invalid user mc from 49.228.84.225 port ... show more (sshd) Failed SSH login from 49.228.84.225 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 27 01:00:40 13540 sshd[9323]: Invalid user mc from 49.228.84.225 port 54712 Dec 27 01:00:42 13540 sshd[9323]: Failed password for invalid user mc from 49.228.84.225 port 54712 ssh2 Dec 27 01:07:05 13540 sshd[9848]: Invalid user dennis from 49.228.84.225 port 40432 Dec 27 01:07:07 13540 sshd[9848]: Failed password for invalid user dennis from 49.228.84.225 port 40432 ssh2 Dec 27 01:07:28 13540 sshd[9866]: Invalid user vserver from 49.228.84.225 port 47496 show less	Brute-Force SSH
🇬🇧 blik2108	2025-12-27 07:06:37 UTC · (10 months ago)	2025-12-27T07:02:11.173818+00:00 wightpi sshd[2120930]: Invalid user mc from 49.228.84.225 port 54422 2025-12-27T07:06:36.004992+00:00 wightpi sshd[2121073]: Invalid user minecraft1 from 49.228.84.225 port 48066 ...	Brute-Force SSH
🇫🇷 Asthriona	2025-12-27 06:52:00 UTC · (10 months ago)	Dec 27 07:51:21 Ina sshd[2410394]: Invalid user prince from 49.228.84.225 port 30498 Dec 27 07:51:21 Ina sshd[2410394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.225 Dec 27 07:51:23 Ina sshd[24 ... show more Dec 27 07:51:21 Ina sshd[2410394]: Invalid user prince from 49.228.84.225 port 30498 Dec 27 07:51:21 Ina sshd[2410394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.225 Dec 27 07:51:23 Ina sshd[2410394]: Failed password for invalid user prince from 49.228.84.225 port 30498 ssh2 Dec 27 07:51:57 Ina sshd[2410461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.225 user=root Dec 27 07:51:59 Ina sshd[2410461]: Failed password for root from 49.228.84.225 port 55634 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 155.212.17.174

🇳🇱 35.214.143.236

🇳🇱 172.71.102.30

🇳🇱 172.71.98.69

🇺🇸 162.216.149.13

🇳🇱 86.38.187.63

🇳🇱 86.38.187.41

🇳🇱 64.205.72.125

🇺🇸 47.254.69.53

🇺🇸 45.156.129.137

🇭🇷 31.217.62.118

🇺🇸 206.189.188.203

🇧🇪 198.235.24.198

🇮🇳 139.59.86.13

🇧🇩 115.127.98.18

🇫🇷 103.110.163.219

🇺🇸 66.132.195.91

🇺🇸 54.90.125.232

🇪🇬 41.129.55.234

🇨🇴 185.244.235.133