JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.228.88.165

49.228.88.165 was found in our database!

This IP was reported 179 times. Confidence of Abuse is 0%: ?

ISP	AIS Fibre
Usage Type	Mobile ISP
ASN	AS133481
Hostname(s)	49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.228.88.165

Whois 49.228.88.165

IP Abuse Reports for 49.228.88.165:

This IP address has been reported a total of 179 times from 126 distinct sources. 49.228.88.165 was first reported on January 17th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:10 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-04-06 22:34:36 (2 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-04 22:43:52 (2 months ago)		Brute-Force Web App Attack
🇮🇳 Parth Maniar	2026-04-04 12:09:48 (2 months ago)	This IP address carried out 16 SSH credential attack (attempts) on 03-04-2026. For more information ... show more This IP address carried out 16 SSH credential attack (attempts) on 03-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇵🇱 Wepted	2026-04-04 03:00:48 (2 months ago)	2026-04-04T04:59:20.082855+02:00 axisverse sshd-session[878150]: Invalid user test from 49.228.88.16 ... show more 2026-04-04T04:59:20.082855+02:00 axisverse sshd-session[878150]: Invalid user test from 49.228.88.165 port 43842 2026-04-04T04:59:35.360003+02:00 axisverse sshd-session[878500]: Invalid user ubuntu from 49.228.88.165 port 35402 2026-04-04T05:00:47.566180+02:00 axisverse sshd-session[880488]: Invalid user steam from 49.228.88.165 port 59980 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-04 02:52:41 (2 months ago)	(sshd) Failed SSH login from 49.228.88.165 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com ... show more (sshd) Failed SSH login from 49.228.88.165 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 3 21:51:07 14405 sshd[24314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 user=root Apr 3 21:51:09 14405 sshd[24314]: Failed password for root from 49.228.88.165 port 37882 ssh2 Apr 3 21:52:06 14405 sshd[24388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 user=root Apr 3 21:52:08 14405 sshd[24388]: Failed password for root from 49.228.88.165 port 59440 ssh2 Apr 3 21:52:34 14405 sshd[24402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 user=root show less	Brute-Force SSH
🇺🇸 FurrIX vIX	2026-04-04 02:26:07 (2 months ago)	[FurrIX NOC, Automated, PHY TWO]: Bonked into empty SSH door. Whatcha looking for in there, eh?!	Brute-Force SSH
🇮🇹 eliosbrocchi	2026-04-04 01:23:17 (2 months ago)	2026-04-04T03:23:16.544843+02:00 thunderchild sshd[171349]: pam_unix(sshd:auth): authentication fail ... show more 2026-04-04T03:23:16.544843+02:00 thunderchild sshd[171349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 user=root ... show less	VPN IP
🇵🇱 webadmin	2026-04-04 01:15:24 (2 months ago)	2026-04-04T02:11:18.922551+01:00 tytan sshd-session[1202813]: Failed password for invalid user tempu ... show more 2026-04-04T02:11:18.922551+01:00 tytan sshd-session[1202813]: Failed password for invalid user tempuser from 49.228.88.165 port 44110 ssh2 2026-04-04T02:11:20.976973+01:00 tytan sshd-session[1202813]: Disconnected from invalid user tempuser 49.228.88.165 port 44110 [preauth] 2026-04-04T02:15:21.150975+01:00 tytan sshd-session[1205049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 user=root 2026-04-04T02:15:23.378596+01:00 tytan sshd-session[1205049]: Failed password for root from 49.228.88.165 port 49702 ssh2 2026-04-04T02:15:23.635355+01:00 tytan sshd-session[1205049]: Disconnected from authenticating user root 49.228.88.165 port 49702 [preauth] ... show less	Brute-Force SSH
🇬🇧 andypiper	2026-04-04 01:01:25 (2 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 bigscoots.com	2026-04-04 01:01:02 (2 months ago)	49.228.88.165 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks ... show more 49.228.88.165 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 3 19:59:33 14240 sshd[23808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 user=root Apr 3 19:59:35 14240 sshd[23808]: Failed password for root from 49.228.88.165 port 60124 ssh2 Apr 3 20:00:43 14240 sshd[23933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 user=root Apr 3 19:58:54 14240 sshd[23731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.172.177 user=root Apr 3 19:58:55 14240 sshd[23731]: Failed password for root from 152.32.172.177 port 49224 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 WestonReed	2026-04-04 00:38:20 (2 months ago)	2026-04-03T17:34:59.780476-07:00 onion sshd-session[1270516]: Invalid user git from 49.228.88.165 po ... show more 2026-04-03T17:34:59.780476-07:00 onion sshd-session[1270516]: Invalid user git from 49.228.88.165 port 57978 2026-04-03T17:36:48.179890-07:00 onion sshd-session[1270524]: Invalid user aurora from 49.228.88.165 port 59888 2026-04-03T17:37:03.411256-07:00 onion sshd-session[1270527]: Invalid user luo from 49.228.88.165 port 45028 2026-04-03T17:38:11.710759-07:00 onion sshd-session[1270535]: Invalid user user from 49.228.88.165 port 56516 2026-04-03T17:38:19.693221-07:00 onion sshd-session[1270537]: Invalid user user1 from 49.228.88.165 port 40456 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-04-04 00:30:33 (2 months ago)	Apr 3 18:29:33 titan sshd[1268983]: Invalid user vpn from 49.228.88.165 port 35372 Apr 3 18:29:33 ... show more Apr 3 18:29:33 titan sshd[1268983]: Invalid user vpn from 49.228.88.165 port 35372 Apr 3 18:29:33 titan sshd[1268983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 Apr 3 18:29:35 titan sshd[1268983]: Failed password for invalid user vpn from 49.228.88.165 port 35372 ssh2 Apr 3 18:30:31 titan sshd[1269043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 user=root Apr 3 18:30:32 titan sshd[1269043]: Failed password for root from 49.228.88.165 port 56898 ssh2 ... show less	Brute-Force SSH
🇰🇷 Woodie	2026-04-04 00:30:09 (2 months ago)	2026-04-03T19:28:05.122133-05:00 debian sshd[510010]: Failed password for invalid user vpn from 49.2 ... show more 2026-04-03T19:28:05.122133-05:00 debian sshd[510010]: Failed password for invalid user vpn from 49.228.88.165 port 36734 ssh2 2026-04-03T19:29:56.251786-05:00 debian sshd[511514]: Invalid user giulia from 49.228.88.165 port 33210 2026-04-03T19:29:56.256649-05:00 debian sshd[511514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.165 2026-04-03T19:29:58.186123-05:00 debian sshd[511514]: Failed password for invalid user giulia from 49.228.88.165 port 33210 ssh2 2026-04-03T19:30:05.981730-05:00 debian sshd[511624]: Invalid user oracle from 49.228.88.165 port 36598 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-04 00:21:16 (2 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.88.165	SSH

Showing 1 to 15 of 179 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.165.244.214

🇹🇭 110.49.6.37

🇺🇸 52.230.163.217

🇳🇱 45.148.10.152

🇺🇸 43.135.135.17

🇰🇿 37.99.122.66

🇭🇰 199.45.154.182

🇫🇮 147.185.133.144

🇺🇸 137.184.153.87

🇧🇬 79.124.40.126

🇺🇸 65.49.1.14

🇳🇱 45.198.224.5

🇮🇳 45.40.57.23

🇹🇿 41.93.28.23

🇨🇳 39.107.136.130

🇫🇮 2a09:bac1:2520:8::48e:4c

🇬🇧 217.146.80.100

🇹🇭 203.154.158.195

🇧🇷 187.5.244.49

🇬🇾 168.232.144.128