JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.228.192.218

49.228.192.218 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 0%: ?

ISP	AIS Fibre
Usage Type	Mobile ISP
ASN	AS133481
Hostname(s)	49-228-192-0.24.nat.tls1b-cgn01.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Khlong Luang, Pathum Thani

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.228.192.218

Whois 49.228.192.218

IP Abuse Reports for 49.228.192.218:

This IP address has been reported a total of 41 times from 31 distinct sources. 49.228.192.218 was first reported on July 13th 2021, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Parth Maniar	2025-09-08 18:13:01 (9 months ago)	This IP address carried out 10 SSH credential attack (attempts) on 06-09-2025. For more information ... show more This IP address carried out 10 SSH credential attack (attempts) on 06-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-07 20:08:40 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇺 DumaNet	2025-09-07 01:53:00 (9 months ago)	SSH login attempts, brute-force attack. Date: Fri Sep 5. 15:50:05 2025 +0200 Source IP: 49.228.192 ... show more SSH login attempts, brute-force attack. Date: Fri Sep 5. 15:50:05 2025 +0200 Source IP: 49.228.192.218 (TH/Thailand/49-228-192-0.24.nat.tls1b-cgn01.myaisfibre.com) Log entries: Sep 5 15:49:50 beta sshd[2329656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.192.218 user=root Sep 5 15:49:51 beta sshd[2329656]: Failed password for root from 49.228.192.218 port 47510 ssh2 Sep 5 15:50:01 beta sshd[2329674]: Invalid user sun from 49.228.192.218 port 46498 Sep 5 15:50:01 beta sshd[2329674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.192.218 Sep 5 15:50:03 beta sshd[2329674]: Failed password for invalid user sun from 49.228.192.218 port 46498 ssh2 show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-06 23:34:35 (9 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.192.218	SSH
🇹🇷 rtbh.com.tr	2025-09-06 20:08:39 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇩 RasyiidWho	2025-09-06 01:04:41 (9 months ago)	ip112.20 . Sep 6 08:04:38 routeknis sshd[344695]: Connection from 49.228.192.218 port 33680 on 203. ... show more ip112.20 . Sep 6 08:04:38 routeknis sshd[344695]: Connection from 49.228.192.218 port 33680 on 203.190.112.20 port 7345 rdomain "" Sep 6 08:04:38 routeknis sshd[344695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.192.218 user=root Sep 6 08:04:40 routeknis sshd[344695]: Failed password for root from 49.228.192.218 port 33680 ssh2 ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇧🇷 hostseries	2025-09-05 23:50:35 (9 months ago)	Trigger: LF_SSHD	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-05 20:08:37 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇩 digitalsekuriti.id	2025-09-05 18:49:05 (9 months ago)	2025-09-06T01:48:28.809224 valhalla-stg.digitalsekuriti.id sshd[2170360]: Invalid user uucp from 49. ... show more 2025-09-06T01:48:28.809224 valhalla-stg.digitalsekuriti.id sshd[2170360]: Invalid user uucp from 49.228.192.218 port 52252 2025-09-06T01:48:48.411871 valhalla-stg.digitalsekuriti.id sshd[2170422]: Invalid user mysql from 49.228.192.218 port 56646 2025-09-06T01:49:03.967479 valhalla-stg.digitalsekuriti.id sshd[2170456]: Invalid user gpadmin from 49.228.192.218 port 37344 ... show less	Brute-Force SSH
🇭🇰 bluecloudwork	2025-09-05 18:07:35 (9 months ago)	Fail2Ban - \[SSHD\]Brute-force SSH server ...	Brute-Force SSH
🇩🇪 ps-center	2025-09-05 17:56:42 (9 months ago)	SS5-W: Brutforce ssh Login	Brute-Force
🇺🇸 Wonderland	2025-09-05 17:15:57 (9 months ago)	Sep 5 10:15:56 jabberwocky sshd[89687]: User root from 49.228.192.218 not allowed because not liste ... show more Sep 5 10:15:56 jabberwocky sshd[89687]: User root from 49.228.192.218 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇯🇵 Kinsei Engineering Inc.	2025-09-05 16:33:26 (9 months ago)	2025-09-06T01:33:08.692353+09:00 KinseiVPS sshd[359083]: pam_unix(sshd:auth): authentication failure ... show more 2025-09-06T01:33:08.692353+09:00 KinseiVPS sshd[359083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.192.218 2025-09-06T01:33:10.716575+09:00 KinseiVPS sshd[359083]: Failed password for invalid user dbuser from 49.228.192.218 port 36728 ssh2 2025-09-06T01:33:23.029738+09:00 KinseiVPS sshd[359120]: Invalid user amsftp from 49.228.192.218 port 36832 2025-09-06T01:33:23.145738+09:00 KinseiVPS sshd[359120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.192.218 2025-09-06T01:33:24.898521+09:00 KinseiVPS sshd[359120]: Failed password for invalid user amsftp from 49.228.192.218 port 36832 ssh2 show less	Brute-Force SSH
🇩🇪 ps-center	2025-09-05 12:55:36 (9 months ago)	C1: Brutforce ssh Login	Brute-Force
🇩🇪 5 mark	2025-09-05 09:04:26 (9 months ago)	2025-09-05T11:02:55.520619+02:00 1337 sshd-session[3026796]: Connection closed by 49.228.192.218 por ... show more 2025-09-05T11:02:55.520619+02:00 1337 sshd-session[3026796]: Connection closed by 49.228.192.218 port 35672 [preauth] 2025-09-05T11:04:11.254860+02:00 1337 sshd-session[3031978]: Connection closed by authenticating user root 49.228.192.218 port 56438 [preauth] 2025-09-05T11:04:25.446678+02:00 1337 sshd-session[3032914]: Invalid user t7inst from 49.228.192.218 port 55818 ... show less	Brute-Force SSH

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 217.168.240.63

🇩🇪 216.26.246.55

🇮🇳 122.183.41.80

🇩🇪 46.101.201.146

🇺🇸 3.216.13.10

🇨🇳 222.129.37.92

🇧🇷 205.210.31.216

🇳🇱 89.125.146.217

🇨🇳 8.136.180.139

🇮🇩 2406:da19:776:6e02:d86f:26f8:2b5d:5e05

🇨🇳 203.83.238.175

🇺🇸 157.230.129.112

🇫🇮 62.238.42.97

🇨🇳 60.27.226.219

🇫🇷 51.83.10.237

🇩🇪 45.139.104.160

🇮🇩 8.215.85.137

🇻🇳 103.186.101.237

🇰🇿 93.95.241.150

🇨🇦 85.217.149.44