JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.39

Neutral Activity

Abuse Confidence Score

0% Low Risk

8 reports

7 reporters · latest 10 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.39 has been reported 8 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

8 from 7 distinct reporters

First reported

January 9th 2026

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-01-09 03:50:27 UTC · (10 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇫🇮 MindSolve	2026-01-09 03:43:39 UTC · (10 months ago)	Jan 9 04:42:24 admin sshd[884184]: Invalid user deploy from 49.228.84.39 port 39626 Jan 9 04:42:24 admin sshd[884184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 Jan 9 04:42:26 admin sshd[ ... show more Jan 9 04:42:24 admin sshd[884184]: Invalid user deploy from 49.228.84.39 port 39626 Jan 9 04:42:24 admin sshd[884184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 Jan 9 04:42:26 admin sshd[884184]: Failed password for invalid user deploy from 49.228.84.39 port 39626 ssh2 Jan 9 04:43:35 admin sshd[884765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 user=root Jan 9 04:43:38 admin sshd[884765]: Failed password for root from 49.228.84.39 port 56104 ssh2 ... show less	Brute-Force SSH
🇧🇷 chronos	2026-01-09 03:40:34 UTC · (10 months ago)	Generic malicious activity detected: [HONEYPOT] Attempted SSH access... \| Proto: TCP \| Port: 2222 \| Location: Thailand, Bangkok	Port Scan Hacking
🇺🇸 bigscoots.com	2026-01-09 03:39:30 UTC · (10 months ago)	49.228.84.39 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [deploy] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 8 21:16:38 14179 sshd[3871]: Invalid user deploy ... show more 49.228.84.39 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [deploy] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 8 21:16:38 14179 sshd[3871]: Invalid user deploy from 140.238.186.185 port 41542 Jan 8 21:16:39 14179 sshd[3871]: Failed password for invalid user deploy from 140.238.186.185 port 41542 ssh2 Jan 8 21:39:08 14179 sshd[5654]: Invalid user deploy from 107.150.106.178 port 45490 Jan 8 21:36:35 14179 sshd[5443]: Invalid user deploy from 49.228.84.39 port 40818 Jan 8 21:36:37 14179 sshd[5443]: Failed password for invalid user deploy from 49.228.84.39 port 40818 ssh2 IP Addresses Blocked: 140.238.186.185 (BR/Brazil/-) 107.150.106.178 (US/United States/-) show less	Brute-Force SSH
🇧🇷 ItsClairton	2026-01-09 03:34:37 UTC · (10 months ago)	Jan 9 00:30:01 GMNH10459 sshd[1793679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 user=ubuntu Jan 9 00:30:03 GMNH10459 sshd[1793679]: Failed password for ubuntu from 49.228.84.39 port 3286 ... show more Jan 9 00:30:01 GMNH10459 sshd[1793679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 user=ubuntu Jan 9 00:30:03 GMNH10459 sshd[1793679]: Failed password for ubuntu from 49.228.84.39 port 32864 ssh2 Jan 9 00:34:34 GMNH10459 sshd[1797022]: Invalid user test from 49.228.84.39 port 48318 Jan 9 00:34:34 GMNH10459 sshd[1797022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 Jan 9 00:34:36 GMNH10459 sshd[1797022]: Failed password for invalid user test from 49.228.84.39 port 48318 ssh2 ... show less	Brute-Force SSH
🇩🇪 Panter	2026-01-09 03:28:43 UTC · (10 months ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH
🇺🇸 z3rg	2026-01-09 03:26:37 UTC · (10 months ago)	2026-01-09T03:26:34.099958+00:00 vps-331c9132 sshd[437927]: Invalid user test from 49.228.84.39 port 57100 2026-01-09T03:26:34.104710+00:00 vps-331c9132 sshd[437927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r ... show more 2026-01-09T03:26:34.099958+00:00 vps-331c9132 sshd[437927]: Invalid user test from 49.228.84.39 port 57100 2026-01-09T03:26:34.104710+00:00 vps-331c9132 sshd[437927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 2026-01-09T03:26:36.330882+00:00 vps-331c9132 sshd[437927]: Failed password for invalid user test from 49.228.84.39 port 57100 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-09 03:11:13 UTC · (10 months ago)	(sshd) Failed SSH login from 49.228.84.39 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 8 21:07:49 15256 sshd[29321]: Invalid user test from 49.228.84.39 port ... show more (sshd) Failed SSH login from 49.228.84.39 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 8 21:07:49 15256 sshd[29321]: Invalid user test from 49.228.84.39 port 33464 Jan 8 21:07:52 15256 sshd[29321]: Failed password for invalid user test from 49.228.84.39 port 33464 ssh2 Jan 8 21:10:36 15256 sshd[29733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 user=root Jan 8 21:10:37 15256 sshd[29733]: Failed password for root from 49.228.84.39 port 60104 ssh2 Jan 8 21:11:09 15256 sshd[29836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.39 user=root show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 193.148.48.136

🇺🇸 172.233.183.40

🇳🇱 89.21.67.159

🇧🇴 200.87.90.173

🇫🇮 178.20.210.151

🇹🇳 165.50.79.224

🇩🇪 91.67.73.207

🇩🇪 91.37.145.241

🇳🇱 86.38.187.102

🇩🇪 80.141.103.154

🇩🇪 77.189.53.65

🇩🇪 77.8.245.46

🇮🇳 59.97.21.114

🇩🇪 50.7.88.242

🇨🇳 47.95.201.66

🇮🇩 36.95.221.140

🇦🇪 20.74.254.174

🇩🇪 217.89.5.227

🇧🇷 201.86.42.211

🇲🇽 189.183.245.20