JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.230

Neutral Activity

Abuse Confidence Score

0% Low Risk

657 reports

304 reporters · latest 4 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.230 has been reported 657 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

657 from 304 distinct reporters

First reported

December 18th 2024

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-11 20:31:09 UTC · (4 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-28 20:51:34 UTC · (4 months ago)	[Mon Jun 29 03:51:31.780106 2026] [security2:error] [pid 744070:tid 140331740718784] [client 49.228.84.230:45243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity ... show more [Mon Jun 29 03:51:31.780106 2026] [security2:error] [pid 744070:tid 140331740718784] [client 49.228.84.230:45243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "akGJU16P2LfAi6M3RRzFAAAARBg"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[744095] [avWsgdbxnLE] [akGJU16P2LfAi6M3RRzFAAAARBg] keep_alive=[1] [2026-06-29 03:51:31.780111] [R:akGJU16P2LfAi6M3RRzFAAAARBg] UA:'Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, li ... show less	Email Spam Hacking
🇬🇧 thetomtaylor.co.uk	2026-05-05 13:09:25 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇺🇸 Matthew Barnes	2026-03-18 17:46:57 UTC · (7 months ago)	2026-03-18T10:46:06.809245-07:00 jump sshd[134756]: Invalid user ubuntuuser from 49.228.84.230 port 41210 2026-03-18T10:46:54.891399-07:00 jump sshd[134760]: Invalid user ljd from 49.228.84.230 port 38740 ...	Brute-Force
🇬🇧 Bytemark	2026-03-18 17:31:47 UTC · (7 months ago)	Mar 18 17:29:01 dlcentre3 sshd[19117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.230 Mar 18 17:29:02 dlcentre3 sshd[19117]: Failed password for invalid user github from 49.228.84.230 port 55850 ... show more Mar 18 17:29:01 dlcentre3 sshd[19117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.230 Mar 18 17:29:02 dlcentre3 sshd[19117]: Failed password for invalid user github from 49.228.84.230 port 55850 ssh2 show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-02 20:11:21 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-01 20:11:20 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2026-02-01 18:09:59 UTC · (9 months ago)	(sshd) Failed SSH login from 49.228.84.230 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 1 12:03:00 9398 sshd[28416]: Invalid user server from 49.228.84.230 p ... show more (sshd) Failed SSH login from 49.228.84.230 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 1 12:03:00 9398 sshd[28416]: Invalid user server from 49.228.84.230 port 58786 Feb 1 12:03:02 9398 sshd[28416]: Failed password for invalid user server from 49.228.84.230 port 58786 ssh2 Feb 1 12:06:11 9398 sshd[28857]: Invalid user family from 49.228.84.230 port 54944 Feb 1 12:06:13 9398 sshd[28857]: Failed password for invalid user family from 49.228.84.230 port 54944 ssh2 Feb 1 12:09:40 9398 sshd[29211]: Invalid user dev from 49.228.84.230 port 33058 show less	Brute-Force SSH
🇵🇹 Information Security	2026-02-01 18:07:29 UTC · (9 months ago)	Brute-force SSH server	Brute-Force SSH
Anonymous	2026-02-01 18:07:16 UTC · (9 months ago)	B: f2b ssh aggressive 3x	Brute-Force SSH
🇸🇬 sh97	2026-02-01 17:53:20 UTC · (9 months ago)	SG05-ON: SSH Brute Force from 49.228.84.230 at 2026-02-01 23:23:19 IST	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-01 17:51:38 UTC · (9 months ago)	(sshd) Failed SSH login from 49.228.84.230 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 1 11:49:26 17931 sshd[24559]: Invalid user compta from 49.228.84.230 ... show more (sshd) Failed SSH login from 49.228.84.230 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 1 11:49:26 17931 sshd[24559]: Invalid user compta from 49.228.84.230 port 60822 Feb 1 11:49:27 17931 sshd[24559]: Failed password for invalid user compta from 49.228.84.230 port 60822 ssh2 Feb 1 11:51:19 17931 sshd[24811]: Invalid user web1 from 49.228.84.230 port 60950 Feb 1 11:51:21 17931 sshd[24811]: Failed password for invalid user web1 from 49.228.84.230 port 60950 ssh2 Feb 1 11:51:36 17931 sshd[24830]: Invalid user rails from 49.228.84.230 port 38894 show less	Brute-Force SSH
🇵🇱 Ferron	2026-02-01 17:42:01 UTC · (9 months ago)	2026-02-01T17:35:19.701728+00:00 web-pl.ferronweb.org sshd-session[3995719]: Invalid user musikbot from 49.228.84.230 port 47438 2026-02-01T17:36:14.671893+00:00 web-pl.ferronweb.org sshd-session[3995870]: Invalid user pedro from 49.228.84.230 port 5 ... show more 2026-02-01T17:35:19.701728+00:00 web-pl.ferronweb.org sshd-session[3995719]: Invalid user musikbot from 49.228.84.230 port 47438 2026-02-01T17:36:14.671893+00:00 web-pl.ferronweb.org sshd-session[3995870]: Invalid user pedro from 49.228.84.230 port 52184 2026-02-01T17:39:45.897793+00:00 web-pl.ferronweb.org sshd-session[3996492]: Invalid user box from 49.228.84.230 port 51212 2026-02-01T17:41:13.670203+00:00 web-pl.ferronweb.org sshd-session[3996717]: Invalid user mine from 49.228.84.230 port 33656 2026-02-01T17:42:01.104098+00:00 web-pl.ferronweb.org sshd-session[3996850]: Invalid user huawei from 49.228.84.230 port 45640 ... show less	Brute-Force SSH
🇸🇬 LilaS	2026-02-01 17:38:05 UTC · (9 months ago)	2026-02-02T01:35:38.220680 oswald-lab sshd[798151]: Failed password for invalid user musikbot from 49.228.84.230 port 40384 ssh2 2026-02-02T01:36:31.668901 oswald-lab sshd[798186]: Invalid user pedro from 49.228.84.230 port 58176 2026-02-02T01:36:31. ... show more 2026-02-02T01:35:38.220680 oswald-lab sshd[798151]: Failed password for invalid user musikbot from 49.228.84.230 port 40384 ssh2 2026-02-02T01:36:31.668901 oswald-lab sshd[798186]: Invalid user pedro from 49.228.84.230 port 58176 2026-02-02T01:36:31.674666 oswald-lab sshd[798186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.230 2026-02-02T01:36:33.851668 oswald-lab sshd[798186]: Failed password for invalid user pedro from 49.228.84.230 port 58176 ssh2 2026-02-02T01:38:04.494454 oswald-lab sshd[798250]: Invalid user roy from 49.228.84.230 port 36138 ... show less	Brute-Force SSH
🇷🇺 it.inpglobal.com	2026-02-01 17:35:38 UTC · (9 months ago)	$f2bV_matches	Brute-Force SSH

Showing 1 to 15 of 657 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 180.182.228.199

🇳🇱 178.224.251.55

🇩🇪 164.30.7.153

🇨🇳 120.234.232.184

🇨🇳 120.224.15.67

🇬🇧 35.203.211.221

🇧🇪 35.187.189.70

🇨🇭 209.99.190.186

🇧🇷 187.51.84.86

🇨🇳 180.120.225.250

🇺🇸 162.216.150.212

🇩🇰 154.14.31.10

🇨🇳 120.198.138.185

🇵🇭 119.92.76.210

🇧🇩 103.150.254.122

🇮🇹 94.177.98.97

🇨🇦 85.217.149.59

🇺🇿 62.164.155.105

🇳🇱 45.148.10.157

🇧🇷 45.65.180.246