JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.65

Neutral Activity

Abuse Confidence Score

0% Low Risk

12 reports

10 reporters · latest 9 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.65 has been reported 12 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

12 from 10 distinct reporters

First reported

November 13th 2025

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-02-12 19:07:15 UTC · (9 months ago)	(sshd) Failed SSH login from 49.228.84.65 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 12 13:02:42 15335 sshd[15912]: Invalid user tx from 49.228.84.65 port 6 ... show more (sshd) Failed SSH login from 49.228.84.65 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 12 13:02:42 15335 sshd[15912]: Invalid user tx from 49.228.84.65 port 60674 Feb 12 13:02:45 15335 sshd[15912]: Failed password for invalid user tx from 49.228.84.65 port 60674 ssh2 Feb 12 13:06:58 15335 sshd[16210]: Invalid user bd from 49.228.84.65 port 56914 Feb 12 13:07:00 15335 sshd[16210]: Failed password for invalid user bd from 49.228.84.65 port 56914 ssh2 Feb 12 13:07:12 15335 sshd[16268]: Invalid user user from 49.228.84.65 port 47728 show less	Brute-Force SSH
🇮🇹 opso.it	2026-02-12 19:04:48 UTC · (9 months ago)	Feb 12 20:03:27 OPSO sshd\[2213\]: Invalid user tx from 49.228.84.65 port 41960 Feb 12 20:03:27 OPSO sshd\[2213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 Feb 12 20:03:29 OPSO sshd\[2213 ... show more Feb 12 20:03:27 OPSO sshd\[2213\]: Invalid user tx from 49.228.84.65 port 41960 Feb 12 20:03:27 OPSO sshd\[2213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 Feb 12 20:03:29 OPSO sshd\[2213\]: Failed password for invalid user tx from 49.228.84.65 port 41960 ssh2 Feb 12 20:04:46 OPSO sshd\[2522\]: Invalid user test from 49.228.84.65 port 44892 Feb 12 20:04:46 OPSO sshd\[2522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 show less	SSH
🇺🇸 Saber1	2026-02-12 19:04:40 UTC · (9 months ago)	Fail2Ban sshd ban: Feb 12 19:04:40 N8N-Server sshd[158253]: Invalid user test from 49.228.84.65 port 55196	Brute-Force SSH
Anonymous	2026-02-12 19:03:22 UTC · (9 months ago)	Fail2Ban SSH login block from 49.228.84.65	SSH
🇩🇪 pianoman911	2026-02-12 18:54:05 UTC · (9 months ago)	Feb 12 19:51:28 Debian-1202-bookworm-amd64-base sshd[2572774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 Feb 12 19:51:30 Debian-1202-bookworm-amd64-base sshd[2572774]: Failed password for in ... show more Feb 12 19:51:28 Debian-1202-bookworm-amd64-base sshd[2572774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 Feb 12 19:51:30 Debian-1202-bookworm-amd64-base sshd[2572774]: Failed password for invalid user console from 49.228.84.65 port 49254 ssh2 Feb 12 19:54:03 Debian-1202-bookworm-amd64-base sshd[2646035]: Invalid user oracle from 49.228.84.65 port 60432 Feb 12 19:54:03 Debian-1202-bookworm-amd64-base sshd[2646035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 Feb 12 19:54:04 Debian-1202-bookworm-amd64-base sshd[2646035]: Failed password for invalid user oracle from 49.228.84.65 port 60432 ssh2 ... show less	Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-11-13 23:42:28 UTC · (1 year ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-13 20:09:55 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-11-13 07:05:13 UTC · (1 year ago)	49.228.84.65 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 13 01:04:53 16668 sshd[19726]: pam_unix(sshd:auth): ... show more 49.228.84.65 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 13 01:04:53 16668 sshd[19726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.229.227 user=root Nov 13 01:04:55 16668 sshd[19726]: Failed password for root from 45.78.229.227 port 39300 ssh2 Nov 13 01:05:06 16668 sshd[19793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 user=root Nov 13 01:04:38 16668 sshd[19717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.229.173 user=root Nov 13 01:04:40 16668 sshd[19717]: Failed password for root from 45.78.229.173 port 40998 ssh2 IP Addresses Blocked: 45.78.229.227 (SG/Singapore/-) show less	Brute-Force SSH
🇺🇸 yzfdude1	2025-11-13 06:52:13 UTC · (1 year ago)	Nov 12 23:52:10 ssg-imac1 sshd[493411]: Invalid user testuser2 from 49.228.84.65 port 42400 Nov 12 23:52:10 ssg-imac1 sshd[493411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 Nov 12 23:52:12 ... show more Nov 12 23:52:10 ssg-imac1 sshd[493411]: Invalid user testuser2 from 49.228.84.65 port 42400 Nov 12 23:52:10 ssg-imac1 sshd[493411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 Nov 12 23:52:12 ssg-imac1 sshd[493411]: Failed password for invalid user testuser2 from 49.228.84.65 port 42400 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2025-11-13 06:50:37 UTC · (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-13 06:39:09 UTC · (1 year ago)	49.228.84.65 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 13 06:35:13 24350 sshd[10752]: pam_unix(sshd:auth): ... show more 49.228.84.65 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 13 06:35:13 24350 sshd[10752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.45.148.210 user=root Nov 13 06:35:15 24350 sshd[10752]: Failed password for root from 147.45.148.210 port 58436 ssh2 Nov 13 06:39:00 24350 sshd[11435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.65 user=root Nov 13 06:37:47 24350 sshd[11207]: Failed password for root from 147.45.148.210 port 34794 ssh2 Nov 13 06:37:44 24350 sshd[11207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.45.148.210 user=root IP Addresses Blocked: 147.45.148.210 (RU/Russia/5927699-wo63708.twc1.net) show less	Brute-Force SSH
🇩🇪 ipcop.net	2025-11-13 06:37:28 UTC · (1 year ago)	2025-11-13T07:33:34.805302+01:00 gw-de19-01.guestgw.net sshd[532979]: Invalid user halo from 49.228.84.65 port 39446 2025-11-13T07:33:35.057349+01:00 gw-de19-01.guestgw.net sshd[532979]: Disconnected from invalid user halo 49.228.84.65 port 39446 [pr ... show more 2025-11-13T07:33:34.805302+01:00 gw-de19-01.guestgw.net sshd[532979]: Invalid user halo from 49.228.84.65 port 39446 2025-11-13T07:33:35.057349+01:00 gw-de19-01.guestgw.net sshd[532979]: Disconnected from invalid user halo 49.228.84.65 port 39446 [preauth] 2025-11-13T07:35:19.651159+01:00 gw-de19-01.guestgw.net sshd[533362]: Invalid user user21 from 49.228.84.65 port 48156 2025-11-13T07:35:19.884518+01:00 gw-de19-01.guestgw.net sshd[533362]: Disconnected from invalid user user21 49.228.84.65 port 48156 [preauth] 2025-11-13T07:37:17.752371+01:00 gw-de19-01.guestgw.net sshd[533722]: Disconnected from authenticating user root 49.228.84.65 port 42400 [preauth] show less	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 204.76.203.221

🇺🇸 192.101.67.182

🇺🇸 189.104.233.54

🇨🇳 182.40.195.233

🇩🇪 104.249.45.209

🇺🇸 104.248.77.188

🇨🇦 85.217.149.56

🇳🇵 27.34.67.103

🇦🇷 190.175.56.203

🇮🇱 176.230.0.56

🇰🇷 175.209.156.146

🇩🇪 167.94.145.21

🇮🇩 157.85.210.91

🇺🇸 104.248.75.219

🇺🇸 104.248.69.77

🇺🇸 104.248.66.99

🇺🇸 104.248.53.91

🇺🇸 104.248.52.220

🇺🇸 104.248.5.8

🇮🇳 103.187.78.189