Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
49.228.84.49 has been reported 14
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
2026-01-15T15:13:38.078166Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.228.84.49:54982 (158.69.22.11:2222) [session: 0194b3ab8427]
2026-01-15T15:16:23.561072Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.228.84.49:53700 (158 ...
show more2026-01-15T15:13:38.078166Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.228.84.49:54982 (158.69.22.11:2222) [session: 0194b3ab8427]
2026-01-15T15:16:23.561072Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.228.84.49:53700 (158.69.22.11:2222) [session: e0501cf8ab04]
...
show less
2026-01-15T15:57:06.463223+01:00 jabber-host01.talk.srvfarm.net sshd[121411]: Invalid user jboss from 49.228.84.49 port 58862
2026-01-15T15:57:06.794100+01:00 jabber-host01.talk.srvfarm.net sshd[121411]: Disconnected from invalid user jboss 49.228.84 ...
show more2026-01-15T15:57:06.463223+01:00 jabber-host01.talk.srvfarm.net sshd[121411]: Invalid user jboss from 49.228.84.49 port 58862
2026-01-15T15:57:06.794100+01:00 jabber-host01.talk.srvfarm.net sshd[121411]: Disconnected from invalid user jboss 49.228.84.49 port 58862 [preauth]
2026-01-15T16:00:44.390981+01:00 jabber-host01.talk.srvfarm.net sshd[121622]: Invalid user airflow from 49.228.84.49 port 34728
2026-01-15T16:00:44.711745+01:00 jabber-host01.talk.srvfarm.net sshd[121622]: Disconnected from invalid user airflow 49.228.84.49 port 34728 [preauth]
2026-01-15T16:02:12.640153+01:00 jabber-host01.talk.srvfarm.net sshd[121742]: Invalid user service from 49.228.84.49 port 52208
show less
(sshd) Failed SSH login from 49.228.84.49 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 15 08:58:10 17242 sshd[22519]: Invalid user jboss from 49.228.84.49 por ...
show more(sshd) Failed SSH login from 49.228.84.49 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 15 08:58:10 17242 sshd[22519]: Invalid user jboss from 49.228.84.49 port 55352
Jan 15 08:58:11 17242 sshd[22519]: Failed password for invalid user jboss from 49.228.84.49 port 55352 ssh2
Jan 15 09:00:52 17242 sshd[22906]: Invalid user airflow from 49.228.84.49 port 38172
Jan 15 09:00:53 17242 sshd[22906]: Failed password for invalid user airflow from 49.228.84.49 port 38172 ssh2
Jan 15 09:01:52 17242 sshd[23093]: Invalid user maint from 49.228.84.49 port 36206
show less
(sshd) Failed SSH login from 49.228.84.49 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Oct 18 01:44:14 10925 sshd[6111]: Invalid user user06 from 49.228.84.49 por ...
show more(sshd) Failed SSH login from 49.228.84.49 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Oct 18 01:44:14 10925 sshd[6111]: Invalid user user06 from 49.228.84.49 port 52568
Oct 18 01:44:16 10925 sshd[6111]: Failed password for invalid user user06 from 49.228.84.49 port 52568 ssh2
Oct 18 01:45:26 10925 sshd[6344]: Invalid user test1 from 49.228.84.49 port 36188
Oct 18 01:45:28 10925 sshd[6344]: Failed password for invalid user test1 from 49.228.84.49 port 36188 ssh2
Oct 18 01:46:43 10925 sshd[6590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.49 user=root
show less
2025-10-18T14:29:46.500095+08:00 *hostname* sshd-session[1775761]: Invalid user minecraft from 49.228.84.49 port 46654
2025-10-18T14:30:13.723358+08:00 *hostname* sshd-session[1779132]: Connection from 49.228.84.49 port 49576 on 115.231.27.164 port 2 ...
show more2025-10-18T14:29:46.500095+08:00 *hostname* sshd-session[1775761]: Invalid user minecraft from 49.228.84.49 port 46654
2025-10-18T14:30:13.723358+08:00 *hostname* sshd-session[1779132]: Connection from 49.228.84.49 port 49576 on 115.231.27.164 port 22 rdomain ""
2025-10-18T14:30:15.791102+08:00 *hostname* sshd-session[1779132]: Invalid user web from 49.228.84.49 port 49576
2025-10-18T14:30:35.795748+08:00 *hostname* sshd-session[1779158]: Connection from 49.228.84.49 port 39550 on 115.231.27.164 port 22 rdomain ""
2025-10-18T14:30:38.605128+08:00 *hostname* sshd-session[1779158]: Invalid user steam from 49.228.84.49 port 39550
show less
Brute-Force
SSH
Anonymous
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown