JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.92.167

Neutral Activity

Abuse Confidence Score

0% Low Risk

135 reports

93 reporters · latest 6 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.92.167 has been reported 135 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

135 from 93 distinct reporters

First reported

July 9th 2023

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 13:09:25 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇮🇳 evicky2002	2026-04-30 13:02:46 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 helix	2026-04-28 20:49:07 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇺🇸 helix	2026-04-21 14:59:49 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-04-09 20:12:24 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇷 helix	2026-04-09 06:24:06 UTC · (7 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-04-08 20:12:23 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-06 20:12:22 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-05 20:12:22 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-03 20:12:21 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-01 20:12:24 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2026-04-01 00:32:47 UTC · (7 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.228.92.167	SSH
🇹🇷 rtbh.com.tr	2026-03-31 20:12:20 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2026-03-31 08:27:12 UTC · (7 months ago)	49.228.92.167 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 31 07:57:20 23306 sshd[22827]: pam_unix(sshd:auth) ... show more 49.228.92.167 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 31 07:57:20 23306 sshd[22827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.167 user=root Mar 31 07:57:22 23306 sshd[22827]: Failed password for root from 49.228.92.167 port 46760 ssh2 Mar 31 08:27:02 23306 sshd[29515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.16.101.165 user=root Mar 31 08:18:59 23306 sshd[27671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.16.101.165 user=root Mar 31 08:19:01 23306 sshd[27671]: Failed password for root from 160.16.101.165 port 49042 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-31 08:03:40 UTC · (7 months ago)	49.228.92.167 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 31 08:03:15 23336 sshd[15820]: pam_unix(sshd:auth) ... show more 49.228.92.167 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 31 08:03:15 23336 sshd[15820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.42.132.29 user=root Mar 31 07:11:32 23336 sshd[11416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.167 user=root Mar 31 07:11:34 23336 sshd[11416]: Failed password for root from 49.228.92.167 port 48968 ssh2 Mar 31 07:08:46 23336 sshd[11172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.167 user=root Mar 31 07:08:48 23336 sshd[11172]: Failed password for root from 49.228.92.167 port 55642 ssh2 IP Addresses Blocked: 89.42.132.29 (RO/Romania/89-29.nsrecord.ro) show less	Brute-Force SSH

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a03:2880:f818:5::

🇺🇸 193.203.8.117

🇧🇬 193.24.211.219

🇻🇳 123.31.31.125

🇭🇰 118.193.45.134

🇧🇩 103.174.192.52

🇵🇰 103.18.15.146

🇳🇬 102.88.137.80

🇷🇺 62.213.12.14

🇳🇱 45.148.10.151

🇷🇴 45.95.221.236

🇺🇸 45.42.88.54

🇿🇲 41.72.113.182

🇺🇸 35.86.208.119

🇮🇳 1.39.25.156

🇺🇸 2603:8003:4f0:a5b0:ff5c:90d7:8330:5d36

🇳🇱 195.178.110.30

🇫🇷 194.99.24.48

🇷🇴 193.46.255.86

🇦🇷 190.122.128.246