JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.104.192

Neutral Activity

Abuse confidence score ?

0% Low Risk

97 reports

68 reporters · latest 3 months ago

ISP	AIS Fibre
Usage Type	Fixed Line ISP
ASN	AS133481
Hostname(s)	49-228-104-0.24.nat.cwdc-cgn02.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.104.192 has been reported 97 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 49.228.104.192

This IP address has been reported a total of 97 times from 68 distinct sources. 49.228.104.192 was first reported on February 2nd 2023, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-05-28 23:25:09 (3 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇹🇷 rtbh.com.tr	2025-10-02 20:09:07 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-10-01 20:09:07 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-10-01 12:34:32 (11 months ago)	This IP address carried out 8 SSH credential attack (attempts) on 30-09-2025. For more information o ... show more This IP address carried out 8 SSH credential attack (attempts) on 30-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇦🇲 amungo-navigation.com	2025-10-01 08:18:20 (11 months ago)	Oct 1 11:18:18 web-wififoryou-com sshd[3424155]: pam_unix(sshd:auth): authentication failure; logna ... show more Oct 1 11:18:18 web-wififoryou-com sshd[3424155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.104.192 Oct 1 11:18:18 web-wififoryou-com sshd[3424155]: Invalid user jianglh from 49.228.104.192 port 50424 Oct 1 11:18:20 web-wififoryou-com sshd[3424155]: Failed password for invalid user jianglh from 49.228.104.192 port 50424 ssh2 ... show less	Brute-Force SSH
🇩🇪 ps-center	2025-10-01 07:43:41 (11 months ago)	CAS-W: Brutforce ssh Login	Brute-Force
🇺🇸 Rocky Mountain Bioengineering Symposium	2025-10-01 07:26:24 (11 months ago)	Oct 1 01:26:23 KLAS-A sshd[76218]: Connection closed by 49.228.104.192 port 51996 [preauth] ...	Brute-Force SSH
🇸🇬 orangenmaul	2025-10-01 07:06:32 (11 months ago)	2025-10-01T07:06:29.141607+00:00 orangenmaul sshd[25927]: User root from 49.228.104.192 not allowed ... show more 2025-10-01T07:06:29.141607+00:00 orangenmaul sshd[25927]: User root from 49.228.104.192 not allowed because not listed in AllowUsers 2025-10-01T07:06:29.746807+00:00 orangenmaul sshd[25927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.104.192 user=root 2025-10-01T07:06:31.234585+00:00 orangenmaul sshd[25927]: Failed password for invalid user root from 49.228.104.192 port 36754 ssh2 ... show less	Brute-Force SSH
🇬🇧 mhzawadi	2025-10-01 06:55:29 (11 months ago)	2025-10-01T07:55:05.986718+01:00 web01.home.wilt.uk.horwood.biz sshd[149265]: pam_unix(sshd:auth): a ... show more 2025-10-01T07:55:05.986718+01:00 web01.home.wilt.uk.horwood.biz sshd[149265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.104.192 2025-10-01T07:55:08.568031+01:00 web01.home.wilt.uk.horwood.biz sshd[149265]: Failed password for invalid user dyqh from 49.228.104.192 port 52308 ssh2 2025-10-01T07:55:26.570026+01:00 web01.home.wilt.uk.horwood.biz sshd[149309]: Invalid user sn from 49.228.104.192 port 44868 2025-10-01T07:55:26.765753+01:00 web01.home.wilt.uk.horwood.biz sshd[149309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.104.192 2025-10-01T07:55:28.564022+01:00 web01.home.wilt.uk.horwood.biz sshd[149309]: Failed password for invalid user sn from 49.228.104.192 port 44868 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-10-01 06:54:53 (11 months ago)	49.228.104.192 detected and blocked by sshd after 2 try	Hacking Brute-Force SSH
🇫🇷 CA Net, Europe	2025-10-01 05:29:34 (11 months ago)	Oct 1 07:29:12 spado sshd[9277]: Failed password for root from 49.228.104.192 port 55048 ssh2 Oct ... show more Oct 1 07:29:12 spado sshd[9277]: Failed password for root from 49.228.104.192 port 55048 ssh2 Oct 1 07:29:32 spado sshd[9290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.104.192 Oct 1 07:29:34 spado sshd[9290]: Failed password for invalid user ftptest from 49.228.104.192 port 54418 ssh2 show less	Brute-Force SSH
🇨🇿 plzenskypruvodce.cz	2025-10-01 03:54:23 (11 months ago)	2025-10-01T05:54:00.754527+02:00 web sshd[2646466]: Invalid user tl from 49.228.104.192 port 57442 2 ... show more 2025-10-01T05:54:00.754527+02:00 web sshd[2646466]: Invalid user tl from 49.228.104.192 port 57442 2025-10-01T05:54:22.305413+02:00 web sshd[2646478]: Invalid user yqlai from 49.228.104.192 port 39704 ... show less	Web App Attack
🇨🇳 ThreatBook.io	2025-09-30 23:16:59 (11 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.104.192	SSH
🇺🇦 venko	2025-09-30 21:51:29 (11 months ago)	F2B/SSH	Brute-Force SSH
🇩🇪 DerDoktor	2025-09-30 18:26:13 (11 months ago)	Sep 30 20:26:03 Fail2ban action triggered	Brute-Force SSH

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.183.21.53

🇦🇺 209.38.82.85

🇳🇱 193.176.31.148

🇷🇺 95.165.130.8

🇺🇦 81.162.254.163

🇺🇸 74.125.227.140

🇫🇷 207.180.205.192

🇧🇷 189.63.161.187

🇮🇹 185.15.171.10

🇧🇷 104.28.230.106

🇺🇸 104.23.245.133

🇩🇪 102.220.163.123

🇺🇸 102.129.152.55

🇸🇬 85.203.23.91

🇫🇷 82.67.175.124

🇧🇬 79.124.56.142

🇺🇸 45.79.150.186

🇺🇸 45.79.115.59

🇧🇷 16.5.0.236

🇮🇳 210.89.45.20