49.228.92.209
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- AIS Fibre
- Usage Type
- Fixed Line ISP
- ASN
- AS133481
- Domain Name
- ais.th
- Country
- 🇹🇭 Thailand
- City
- Bangkok, Bangkok
No reports in the last 60 days
49.228.92.209 has been reported 127 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
127 from
98 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 helix |
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
|
Brute-Force SSH | |
| 🇺🇸 helix |
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
|
Brute-Force SSH | |
| 🇧🇷 helix |
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
|
Brute-Force SSH | |
| 🇫🇷 SpaceHost-Server |
|
Brute-Force Web App Attack | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇫🇷 SpaceHost-Server |
|
Brute-Force Web App Attack | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇦🇺 dpack |
SSH Login Attempt at 2026-03-08 13:52:36 UTC with user "temp" and password "temp"
|
Brute-Force SSH | |
| 🇦🇺 dpack |
SSH Login Attempt at 2026-03-08 13:52:04 UTC with user "root" and password "Apple@2025"
|
Brute-Force SSH | |
| 🇳🇱 reporter_anon |
Failed password for root from 49.228.92.209 port 50786 ssh2
|
Brute-Force SSH | |
| 🇺🇸 Wonderland |
Mar 8 06:00:33 jabberwocky sshd[1357984]: Invalid user yuhan from 49.228.92.209 port 37116
...
|
Brute-Force SSH | |
| 🇩🇪 Kirian |
|
Brute-Force SSH | |
| 🇺🇸 binguscity |
|
Brute-Force SSH | |
| 🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL) |
[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 22. DDoS detected
|
SSH Brute-Force DDoS Attack | |
| 🇵🇱 skillhost.pl |
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown