JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.94

Neutral Activity

Abuse Confidence Score

0% Low Risk

26 reports

21 reporters · latest 6 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.84.94 has been reported 26 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

26 from 21 distinct reporters

First reported

August 15th 2023

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 helix	2026-04-24 03:21:01 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇧🇷 helix	2026-04-22 03:58:50 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇧🇷 helix	2026-04-10 03:28:38 UTC · (7 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-04-05 22:41:58 UTC · (7 months ago)		Brute-Force Web App Attack
🇫🇷 kipfel★	2026-04-04 05:26:19 UTC · (7 months ago)	2026-04-04T07:23:46.407062+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[2431138]: Invalid user test_user from 49.228.84.94 port 37214 2026-04-04T07:24:05.192747+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[2431142]: Invalid user steam from 49.228.84.94 p ... show more 2026-04-04T07:23:46.407062+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[2431138]: Invalid user test_user from 49.228.84.94 port 37214 2026-04-04T07:24:05.192747+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[2431142]: Invalid user steam from 49.228.84.94 port 51486 2026-04-04T07:26:19.595910+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[2431157]: Invalid user vpn from 49.228.84.94 port 33368 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-04 05:09:29 UTC · (7 months ago)	2026-04-04T06:06:37.314592+01:00 mail.srvfarm.net sshd-session[796167]: Disconnected from authenticating user root 49.228.84.94 port 41872 [preauth] 2026-04-04T06:09:08.470334+01:00 mail.srvfarm.net sshd-session[798267]: Invalid user oracle from 49.2 ... show more 2026-04-04T06:06:37.314592+01:00 mail.srvfarm.net sshd-session[796167]: Disconnected from authenticating user root 49.228.84.94 port 41872 [preauth] 2026-04-04T06:09:08.470334+01:00 mail.srvfarm.net sshd-session[798267]: Invalid user oracle from 49.228.84.94 port 57474 2026-04-04T06:09:08.877278+01:00 mail.srvfarm.net sshd-session[798267]: Disconnected from invalid user oracle 49.228.84.94 port 57474 [preauth] 2026-04-04T06:09:28.839956+01:00 mail.srvfarm.net sshd-session[798390]: Invalid user user from 49.228.84.94 port 55310 2026-04-04T06:09:29.058395+01:00 mail.srvfarm.net sshd-session[798390]: Disconnected from invalid user user 49.228.84.94 port 55310 [preauth] show less	Brute-Force
🇧🇷 helix	2026-04-04 05:08:16 UTC · (7 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇩🇪 NetWatch	2026-04-04 04:53:59 UTC · (7 months ago)	The IP 49.228.84.94 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇺🇸 MU-star.net	2026-04-04 04:51:51 UTC · (7 months ago)	Invalid user useruser from 49.228.84.94 port 40594	Port Scan Brute-Force SSH
🇬🇧 Xiaohack	2026-04-04 04:21:53 UTC · (7 months ago)	Apr 4 06:16:14 xiaohack sshd[156417]: User root from 49.228.84.94 not allowed because not listed in AllowUsers Apr 4 06:20:14 xiaohack sshd[156780]: Invalid user steam from 49.228.84.94 port 32964 Apr 4 06:21:52 xiaohack sshd[156881]: User root fr ... show more Apr 4 06:16:14 xiaohack sshd[156417]: User root from 49.228.84.94 not allowed because not listed in AllowUsers Apr 4 06:20:14 xiaohack sshd[156780]: Invalid user steam from 49.228.84.94 port 32964 Apr 4 06:21:52 xiaohack sshd[156881]: User root from 49.228.84.94 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 MU-star.net	2026-04-04 04:20:17 UTC · (7 months ago)	2026-04-04T13:19:51.112118 mustar-kr-miso sshd[546773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.94 2026-04-04T13:19:53.192134 mustar-kr-miso sshd[546773]: Failed password for invalid user user ... show more 2026-04-04T13:19:51.112118 mustar-kr-miso sshd[546773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.94 2026-04-04T13:19:53.192134 mustar-kr-miso sshd[546773]: Failed password for invalid user useruser from 49.228.84.94 port 40594 ssh2 2026-04-04T13:20:14.887974 mustar-kr-miso sshd[546775]: Invalid user steam from 49.228.84.94 port 57964 2026-04-04T13:20:14.897998 mustar-kr-miso sshd[546775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.94 2026-04-04T13:20:16.802721 mustar-kr-miso sshd[546775]: Failed password for invalid user steam from 49.228.84.94 port 57964 ssh2 ... show less	Hacking Brute-Force SSH
🇩🇪 AnonDrop	2026-04-04 04:16:56 UTC · (7 months ago)	Credential/password theft attempt - Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73f ... show more Credential/password theft attempt - Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ show less	Brute-Force
🇫🇷 Sayrix	2026-04-04 04:08:25 UTC · (7 months ago)	2026-04-04T04:04:29.769029+00:00 LYN-HMS-1 sshd-session[472773]: Failed password for invalid user qiuhan from 49.228.84.94 port 41300 ssh2 2026-04-04T04:07:07.731482+00:00 LYN-HMS-1 sshd-session[472857]: Invalid user bot from 49.228.84.94 port 48920 ... show more 2026-04-04T04:04:29.769029+00:00 LYN-HMS-1 sshd-session[472773]: Failed password for invalid user qiuhan from 49.228.84.94 port 41300 ssh2 2026-04-04T04:07:07.731482+00:00 LYN-HMS-1 sshd-session[472857]: Invalid user bot from 49.228.84.94 port 48920 2026-04-04T04:07:07.736165+00:00 LYN-HMS-1 sshd-session[472857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.94 2026-04-04T04:07:09.358196+00:00 LYN-HMS-1 sshd-session[472857]: Failed password for invalid user bot from 49.228.84.94 port 48920 ssh2 2026-04-04T04:08:24.854765+00:00 LYN-HMS-1 sshd-session[472885]: Invalid user sammy from 49.228.84.94 port 27532 ... show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2026-04-04 04:05:19 UTC · (7 months ago)	ID: 1994943018 \| PORT: 36501 \| https://49-228-84-94.scanthe.net	Port Scan
🇺🇸 ezscale	2026-04-04 03:54:46 UTC · (7 months ago)	SSH brute force on support.ezscale.cloud (3 failures). Detected by fail2ban.	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇴 182.93.7.194

🇨🇳 118.26.130.18

🇧🇷 45.176.252.251

🇧🇷 45.164.39.253

🇨🇳 157.156.218.187

🇺🇸 65.52.192.69

🇸🇪 2400:cb00:1031:1000:675:6700:297:fb8d

🇺🇸 216.25.89.113

🇵🇱 162.158.103.116

🇭🇰 101.36.127.85

🇺🇸 45.132.115.147

🇷🇺 213.234.5.66

🇵🇱 162.158.102.251

🇺🇦 91.200.10.141

🇺🇸 65.49.1.66

🇺🇸 20.115.56.149

🇺🇸 104.234.53.45

🇺🇸 40.119.45.252

🇬🇧 35.203.211.77

🇨🇳 1.15.52.154