JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.228.88.166

49.228.88.166 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 0%: ?

ISP	AIS Fibre
Usage Type	Mobile ISP
ASN	AS133481
Hostname(s)	49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com
Domain Name	ais.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.228.88.166

Whois 49.228.88.166

IP Abuse Reports for 49.228.88.166:

This IP address has been reported a total of 83 times from 57 distinct sources. 49.228.88.166 was first reported on November 17th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-01-01 23:41:24 (5 months ago)		Brute-Force Web App Attack
🇰🇷 ericshim.me	2026-01-01 05:29:33 (5 months ago)	Reported from fail2ban historical logs. (Detected at 2026-01-01 05:29:33)	Brute-Force SSH
🇬🇧 yvoictra	2026-01-01 01:07:36 (5 months ago)	Jan 1 02:07:35 apollo sshd[411006]: Invalid user patrick from 49.228.88.166 port 34600 ...	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-01 01:01:45 (5 months ago)	(sshd) Failed SSH login from 49.228.88.166 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com ... show more (sshd) Failed SSH login from 49.228.88.166 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 31 18:54:54 14995 sshd[28252]: Invalid user peter from 49.228.88.166 port 32990 Dec 31 18:54:56 14995 sshd[28252]: Failed password for invalid user peter from 49.228.88.166 port 32990 ssh2 Dec 31 18:58:29 14995 sshd[28608]: Invalid user admin from 49.228.88.166 port 51084 Dec 31 18:58:31 14995 sshd[28608]: Failed password for invalid user admin from 49.228.88.166 port 51084 ssh2 Dec 31 19:01:34 14995 sshd[28917]: Invalid user sftpuser from 49.228.88.166 port 32814 show less	Brute-Force SSH
🇬🇧 [email protected]	2026-01-01 00:51:47 (5 months ago)	...	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-01 00:33:33 (5 months ago)	(sshd) Failed SSH login from 49.228.88.166 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com ... show more (sshd) Failed SSH login from 49.228.88.166 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 31 18:26:56 15341 sshd[5952]: Invalid user cynthia from 49.228.88.166 port 59602 Dec 31 18:26:58 15341 sshd[5952]: Failed password for invalid user cynthia from 49.228.88.166 port 59602 ssh2 Dec 31 18:31:12 15341 sshd[6307]: Invalid user programacion from 49.228.88.166 port 55712 Dec 31 18:31:14 15341 sshd[6307]: Failed password for invalid user programacion from 49.228.88.166 port 55712 ssh2 Dec 31 18:33:21 15341 sshd[6508]: Invalid user vagrant from 49.228.88.166 port 42616 show less	Brute-Force SSH
🇵🇹 rnl	2025-12-31 23:55:44 (5 months ago)	ssh abuse	Brute-Force SSH
🇩🇪 Selckie	2025-12-31 23:54:57 (5 months ago)	fail2ban: SSH Brute-Force	Brute-Force SSH
🇺🇸 aboschke	2025-12-31 23:43:07 (5 months ago)	2025-12-31T15:41:02.871773 poinsettia.boschke.org sshd[3673540]: pam_unix(sshd:auth): authentication ... show more 2025-12-31T15:41:02.871773 poinsettia.boschke.org sshd[3673540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.166 2025-12-31T15:41:05.005694 poinsettia.boschke.org sshd[3673540]: Failed password for invalid user ftptest from 49.228.88.166 port 44686 ssh2 2025-12-31T15:43:07.218256 poinsettia.boschke.org sshd[3673649]: User root from 49.228.88.166 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-31 23:31:10 (5 months ago)	49.228.88.166 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks ... show more 49.228.88.166 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 31 17:30:44 14157 sshd[30985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.143.125.172 user=root Dec 31 17:30:45 14157 sshd[30987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.166 user=root Dec 31 17:30:47 14157 sshd[30987]: Failed password for root from 49.228.88.166 port 49688 ssh2 Dec 31 17:24:47 14157 sshd[30402]: Failed password for root from 157.143.125.172 port 63413 ssh2 Dec 31 17:24:46 14157 sshd[30402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.143.125.172 user=root IP Addresses Blocked: 157.143.125.172 (CH/Switzerland/172.125.143.157.bbcs.as8758.net) show less	Brute-Force SSH
🇪🇸 tg_de	2025-12-31 23:22:33 (5 months ago)	5 attempts since 31.12.2025 23:13:16 UTC - last one: 2026-01-01T00:22:33.042792+01:00 beta sshd-sess ... show more 5 attempts since 31.12.2025 23:13:16 UTC - last one: 2026-01-01T00:22:33.042792+01:00 beta sshd-session[763333]: Disconnected from invalid user ansible 49.228.88.166 port 48200 [preauth] show less	Brute-Force SSH
🇨🇦 zXero	2025-12-31 23:15:41 (5 months ago)	Fail2Ban automatic report - jail: geoip-ssh	DDoS Attack Brute-Force SSH
🇹🇷 Threat.live	2025-12-31 23:15:12 (5 months ago)	Brute Force, tcp/22	Brute-Force
🇺🇸 bigscoots.com	2025-12-31 23:05:41 (5 months ago)	49.228.88.166 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks ... show more 49.228.88.166 (TH/Thailand/49-228-88-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 31 17:05:13 17421 sshd[1353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.166 user=root Dec 31 17:05:14 17421 sshd[1353]: Failed password for root from 49.228.88.166 port 44924 ssh2 Dec 31 17:05:35 17421 sshd[1368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.73.108.13 user=root Dec 31 17:01:29 17421 sshd[1028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.88.166 user=root Dec 31 17:01:31 17421 sshd[1028]: Failed password for root from 49.228.88.166 port 35924 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇭🇺 HoneyPotEu	2025-12-31 23:04:19 (5 months ago)	Dec 31 23:59:39 [redacted] sshd[926503]: Failed password for root from 49.228.88.166 port 47530 ssh2 ... show more Dec 31 23:59:39 [redacted] sshd[926503]: Failed password for root from 49.228.88.166 port 47530 ssh2 Jan 1 00:04:18 [redacted] sshd[926579]: Invalid user ubuntu from 49.228.88.166 port 35750 ... show less	Brute-Force SSH

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.225

🇸🇬 143.198.201.179

🇺🇸 34.174.250.161

🇺🇸 23.94.133.71

🇺🇸 18.217.84.200

🇸🇬 8.222.229.192

🇺🇸 209.126.107.84

🇨🇦 198.50.202.93

🇵🇰 192.140.149.1

🇬🇧 185.216.145.172

🇧🇷 168.196.206.14

🇲🇲 116.206.193.61

🇰🇷 116.125.120.27

🇨🇭 104.244.74.84

🇺🇸 100.29.192.7

🇨🇦 85.217.149.26

🇫🇷 84.17.43.213

🇰🇷 34.64.105.110

🇺🇸 20.46.251.132

🇮🇪 20.13.164.162