49.0.85.146

High 10/15/30d lists

Suspicious SSH authentication attempts against monitored systems.

Request review Check AbuseIPDB JSON

Risk score54/100

Detection volume+16Sensor corroboration+20Signal class+12Recency+6

Address intelligence

cached

CountryThailandTH

City / regionThailand

NetworkAIS Fibre

ASN—

Reverse DNS—

Detections4total observations

Reporting sensors5distinct collectors

First seen2026-05-18 20:24 GMT+83 months ago

Last seen2026-08-13 15:54 GMT+89 days ago

Blocklist window10/15/30d lists

Reporting sensors

which collectors observed this address

SSH Sensor 042 observation(s) · last 2026-08-13 15:54 GMT+8SSH
SSH Sensor 021 observation(s) · last 2026-06-27 11:37 GMT+8SSH
Retired sensor1 observation(s) · last 2026-05-18 20:24 GMT+8Abuse
Retired sensor1 observation(s) · last 2026-05-18 20:24 GMT+8Abuse
Retired sensor1 observation(s) · last 2026-05-01 23:56 GMT+8Abuse

Sensor names are anonymised. Collector hostnames and log contents are never published.

Observation history

1 signal record(s)

Suspicious SSH authentication attemptsHighSSH abuse
4 detection(s) from 5 sensor(s) · first seen 2026-05-18 20:24 GMT+8 · last seen 2026-08-13 15:54 GMT+8 (9 days ago) · active
Suspicious SSH authentication attempts against monitored systems.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.