JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 1.4.169.222

1.4.169.222 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 4%: ?

ISP	TOT Public Company Limited
Usage Type	Fixed Line ISP
ASN	AS23969
Hostname(s)	node-89q.pool-1-4.dynamic.nt-isp.net
Domain Name	totidc.net
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 1.4.169.222

Whois 1.4.169.222

IP Abuse Reports for 1.4.169.222:

This IP address has been reported a total of 33 times from 20 distinct sources. 1.4.169.222 was first reported on March 26th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 avgsmoe	2026-07-30 13:00:52 (2 hours ago)	REPEAT offender. Observed 7316 times.	Port Scan Brute-Force
🇺🇸 avgsmoe	2026-07-26 19:00:57 (3 days ago)	REPEAT offender. Observed 7054 times.	Port Scan Brute-Force
🇺🇸 avgsmoe	2026-07-24 13:00:54 (6 days ago)	PERMA offender. Observed 6836 times.	Port Scan Brute-Force
🇺🇸 avgsmoe	2026-07-14 13:00:42 (2 weeks ago)	PERMA offender. Observed 5874 times.	Port Scan Brute-Force
🇺🇸 avgsmoe	2026-06-05 13:01:01 (1 month ago)	PERMA offender. Observed 2291 times.	Port Scan Brute-Force
🇺🇸 avgsmoe	2026-05-17 01:01:22 (2 months ago)	PERMA offender. Observed 856 times.	Port Scan Brute-Force
🇺🇸 sh97	2026-05-16 16:22:00 (2 months ago)	US910-RN-LAX-RYZ7950.vps.992969.xyz: SSH Brute Force from 1.4.169.222 at 2026-05-16 21:51:59 IST	Brute-Force SSH
🇧🇪 madeit	2026-05-08 07:52:13 (2 months ago)		Brute-Force SSH
🇩🇪 Panter	2026-05-08 07:16:38 (2 months ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-08 07:04:48 (2 months ago)	1.4.169.222 (TH/Thailand/node-89q.pool-1-4.dynamic.nt-isp.net), 5 distributed sshd attacks on accoun ... show more 1.4.169.222 (TH/Thailand/node-89q.pool-1-4.dynamic.nt-isp.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 8 02:03:31 15887 sshd[4967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.30.254 user=root May 8 02:03:33 15887 sshd[4967]: Failed password for root from 124.121.30.254 port 39606 ssh2 May 8 01:55:10 15887 sshd[3918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.30.254 user=root May 8 01:55:12 15887 sshd[3918]: Failed password for root from 124.121.30.254 port 59176 ssh2 May 8 02:04:41 15887 sshd[5097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.4.169.222 user=root IP Addresses Blocked: 124.121.30.254 (TH/Thailand/ppp-124-121-30-254.revip2.asianet.co.th) show less	Brute-Force SSH
🇩🇪 Ariazonaa	2026-05-08 05:45:38 (2 months ago)	Fail2Ban host=kvm518290 jail=sshd failures=6. Login abuse observed. sample=2026-05-08T07:37:43.03857 ... show more Fail2Ban host=kvm518290 jail=sshd failures=6. Login abuse observed. sample=2026-05-08T07:37:43.038571+02:00 kvm518290 sshd-session[149006]: Invalid user steam from 1.4.169.222 port 40540 2026-05-08T07:37:43.240970+02:00 kvm518290 sshd-session[149006]: Disconnected from invalid user steam 1.4.169.222 port 40540 [preauth] 2026-05-08T07:38:51.484275+02:00 kvm518290 sshd-session[149039]: Disconnected from authenticating user root 1.4.169.222 port 39086 [preauth] 2026-05-08T07:39:59.814494+02:00 kvm518290 sshd-session[149071]: Disconnected from authenticating user root 1.4. show less	Brute-Force SSH
🇵🇱 Wepted	2026-05-08 05:41:39 (2 months ago)	2026-05-08T07:38:09.389639+02:00 axisverse sshd-session[849034]: Invalid user steam from 1.4.169.222 ... show more 2026-05-08T07:38:09.389639+02:00 axisverse sshd-session[849034]: Invalid user steam from 1.4.169.222 port 58792 2026-05-08T07:38:48.607305+02:00 axisverse sshd-session[850754]: Invalid user testsftp from 1.4.169.222 port 46488 2026-05-08T07:41:38.904494+02:00 axisverse sshd-session[858046]: Invalid user testwww from 1.4.169.222 port 51872 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-08 05:40:26 (2 months ago)	1.4.169.222 (TH/Thailand/node-89q.pool-1-4.dynamic.nt-isp.net), 5 distributed sshd attacks on accoun ... show more 1.4.169.222 (TH/Thailand/node-89q.pool-1-4.dynamic.nt-isp.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 8 00:33:24 14994 sshd[16357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.4.169.222 user=root May 8 00:33:27 14994 sshd[16357]: Failed password for root from 1.4.169.222 port 40694 ssh2 May 8 00:40:21 14994 sshd[16895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.121.30.254 user=root May 8 00:39:12 14994 sshd[16802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.4.169.222 user=root May 8 00:39:14 14994 sshd[16802]: Failed password for root from 1.4.169.222 port 33328 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇬🇧 djboddington	2026-05-08 05:27:44 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-slow-bf	SSH Brute-Force
Anonymous	2026-05-08 05:08:37 (2 months ago)	May 8 00:33:24 v sshd\[30628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid ... show more May 8 00:33:24 v sshd\[30628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.4.169.222 user=root May 8 00:33:26 v sshd\[30628\]: Failed password for root from 1.4.169.222 port 58600 ssh2 May 8 01:08:34 v sshd\[664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.4.169.222 user=root ... show less	Brute-Force SSH

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 123.13.65.209

🇺🇸 45.56.174.76

🇺🇸 20.168.121.238

🇭🇰 8.217.212.249

🇮🇳 210.212.136.3

🇨🇴 190.60.43.27

🇲🇽 148.243.170.66

🇺🇸 147.185.132.202

🇩🇪 134.209.228.213

🇧🇪 109.68.161.68

🇧🇩 103.135.135.189

🇸🇬 101.32.240.31

🇮🇩 70.153.145.230

🇸🇬 45.78.206.111

🇨🇳 218.56.160.82

🇨🇳 182.119.227.72

🇩🇪 167.94.145.27

🇮🇩 163.227.52.50

🇩🇪 139.59.208.49

🇻🇳 116.110.146.153