JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.92.66

Activity Trending Down

Abuse Confidence Score

2% Caution

40 reports

23 reporters · latest 2 weeks ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

40 from 23 distinct reporters

First reported

February 22nd 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1

Most common categories Hacking 1 Web App Attack 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-27 21:00:46 UTC · (2 weeks ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /catalog/product_compare/add/product/13352/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvYnJhbmRzL3Nob3BieS9tYW51ZmFjdHVyZXItZGlzLWJhcmNvLWNsZWFyb25lLmh0bWw_X19fU0lEPTc2ZTI4NmU0NmU3ODRiYzExYjRjM2ZhMDRjMTc0ODg3VQ,,/form_key/aXYBFzXQPvgMhKuw/ \| UA: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_0 rv:3.0; xh-ZA) AppleWebKit/532.24.1 (KHTML, like Gecko) Version/4.0 Safari/532.24.1 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-09 23:50:42 UTC · (4 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇹🇷 rtbh.com.tr	2026-02-24 20:11:44 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-23 20:11:43 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2026-02-23 07:44:05 UTC · (8 months ago)	49.228.92.66 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [zhaojie] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 23 01:30:20 20309 sshd[26575]: Invalid user zhao ... show more 49.228.92.66 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com), 5 distributed sshd attacks on account [zhaojie] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 23 01:30:20 20309 sshd[26575]: Invalid user zhaojie from 49.228.92.66 port 49138 Feb 23 01:30:22 20309 sshd[26575]: Failed password for invalid user zhaojie from 49.228.92.66 port 49138 ssh2 Feb 23 01:40:22 20309 sshd[27974]: Invalid user zhaojie from 188.128.75.50 port 53029 Feb 23 01:43:57 20309 sshd[28236]: Invalid user zhaojie from 14.103.86.183 port 43710 Feb 23 01:40:24 20309 sshd[27974]: Failed password for invalid user zhaojie from 188.128.75.50 port 53029 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2026-02-23 07:34:42 UTC · (8 months ago)	ID: 403117389 \| PORT: 15044 \| https://49-228-92-66.scanthe.net	Port Scan
🇸🇬 Rado C	2026-02-23 07:28:22 UTC · (8 months ago)	Feb 23 07:28:19 ub-singapore-ipsec sshd[520555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.66 Feb 23 07:28:21 ub-singapore-ipsec sshd[520555]: Failed password for invalid user baiyc from 49.228 ... show more Feb 23 07:28:19 ub-singapore-ipsec sshd[520555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.66 Feb 23 07:28:21 ub-singapore-ipsec sshd[520555]: Failed password for invalid user baiyc from 49.228.92.66 port 42136 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-23 07:26:26 UTC · (8 months ago)	(sshd) Failed SSH login from 49.228.92.66 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 23 01:25:03 21438 sshd[23515]: Invalid user wfg from 49.228.92.66 port ... show more (sshd) Failed SSH login from 49.228.92.66 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 23 01:25:03 21438 sshd[23515]: Invalid user wfg from 49.228.92.66 port 52144 Feb 23 01:25:06 21438 sshd[23515]: Failed password for invalid user wfg from 49.228.92.66 port 52144 ssh2 Feb 23 01:25:52 21438 sshd[23542]: Invalid user wkh from 49.228.92.66 port 46218 Feb 23 01:25:53 21438 sshd[23542]: Failed password for invalid user wkh from 49.228.92.66 port 46218 ssh2 Feb 23 01:26:12 21438 sshd[23607]: Invalid user zaq123 from 49.228.92.66 port 57924 show less	Brute-Force SSH
🇺🇸 MooseNet	2026-02-23 07:10:13 UTC · (8 months ago)	Synology auto-block: host was blocked via SSH after repeated unauthorized attempts (observed 1 block event(s) in logs).	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-23 06:58:06 UTC · (8 months ago)	49.228.92.66 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 23 00:58:02 15208 sshd[4181]: pam_unix(sshd:auth): ... show more 49.228.92.66 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 23 00:58:02 15208 sshd[4181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.66 user=root Feb 23 00:49:10 15208 sshd[3436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.205.5 user=root Feb 23 00:38:57 15208 sshd[2553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.205.5 user=root Feb 23 00:38:59 15208 sshd[2553]: Failed password for root from 178.128.205.5 port 36936 ssh2 Feb 23 00:47:52 15208 sshd[3287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.205.5 user=root Feb 23 00:47:54 15208 sshd[3287]: Failed password for root from 178.128.205.5 port 36944 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 groupnet.at	2026-02-23 06:47:22 UTC · (8 months ago)	Feb 23 07:45:37 routing0301 sshd[2176976]: Invalid user zhangwei from 49.228.92.66 port 47540 Feb 23 07:45:39 routing0301 sshd[2176976]: Failed password for invalid user zhangwei from 49.228.92.66 port 47540 ssh2 Feb 23 07:47:21 routing0301 sshd[2176 ... show more Feb 23 07:45:37 routing0301 sshd[2176976]: Invalid user zhangwei from 49.228.92.66 port 47540 Feb 23 07:45:39 routing0301 sshd[2176976]: Failed password for invalid user zhangwei from 49.228.92.66 port 47540 ssh2 Feb 23 07:47:21 routing0301 sshd[2176984]: Invalid user ta from 49.228.92.66 port 55536 ... show less	Brute-Force SSH
🇭🇺 kranem	2026-02-23 06:46:38 UTC · (8 months ago)	Feb 23 07:44:22 NODE-2 sshd[2964683]: Failed password for invalid user zhangwei from 49.228.92.66 port 35714 ssh2 Feb 23 07:44:23 NODE-2 sshd[2964683]: Disconnected from invalid user zhangwei 49.228.92.66 port 35714 [preauth] Feb 23 07:46:35 NODE-2 s ... show more Feb 23 07:44:22 NODE-2 sshd[2964683]: Failed password for invalid user zhangwei from 49.228.92.66 port 35714 ssh2 Feb 23 07:44:23 NODE-2 sshd[2964683]: Disconnected from invalid user zhangwei 49.228.92.66 port 35714 [preauth] Feb 23 07:46:35 NODE-2 sshd[3056098]: Invalid user cchen from 49.228.92.66 port 45080 Feb 23 07:46:35 NODE-2 sshd[3056098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.66 Feb 23 07:46:37 NODE-2 sshd[3056098]: Failed password for invalid user cchen from 49.228.92.66 port 45080 ssh2 ... show less	Brute-Force SSH
🇧🇾 hbars.by	2026-02-23 06:26:20 UTC · (8 months ago)	2026-02-23T09:26:17.695642+03:00 radionet sshd[613230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.66 2026-02-23T09:26:19.925572+03:00 radionet sshd[613230]: Failed password for invalid user zha ... show more 2026-02-23T09:26:17.695642+03:00 radionet sshd[613230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.66 2026-02-23T09:26:19.925572+03:00 radionet sshd[613230]: Failed password for invalid user zhangshuai from 49.228.92.66 port 49438 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-23 06:06:04 UTC · (8 months ago)	(sshd) Failed SSH login from 49.228.92.66 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 23 00:02:39 16048 sshd[17924]: Invalid user hjyoun from 49.228.92.66 po ... show more (sshd) Failed SSH login from 49.228.92.66 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 23 00:02:39 16048 sshd[17924]: Invalid user hjyoun from 49.228.92.66 port 32808 Feb 23 00:02:41 16048 sshd[17924]: Failed password for invalid user hjyoun from 49.228.92.66 port 32808 ssh2 Feb 23 00:04:35 16048 sshd[18079]: Invalid user lyt from 49.228.92.66 port 57110 Feb 23 00:04:37 16048 sshd[18079]: Failed password for invalid user lyt from 49.228.92.66 port 57110 ssh2 Feb 23 00:05:50 16048 sshd[18187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.66 user=root show less	Brute-Force SSH
Anonymous	2026-02-23 05:57:53 UTC · (8 months ago)	2026-02-23T05:55:53.599705+00:00 nyc-worker-01 sshd[1915868]: Invalid user tamara from 49.228.92.66 port 35996 2026-02-23T05:55:53.900168+00:00 nyc-worker-01 sshd[1915868]: Received disconnect from 49.228.92.66 port 35996:11: Bye Bye [preauth] 2026-0 ... show more 2026-02-23T05:55:53.599705+00:00 nyc-worker-01 sshd[1915868]: Invalid user tamara from 49.228.92.66 port 35996 2026-02-23T05:55:53.900168+00:00 nyc-worker-01 sshd[1915868]: Received disconnect from 49.228.92.66 port 35996:11: Bye Bye [preauth] 2026-02-23T05:57:49.940159+00:00 nyc-worker-01 sshd[1919457]: Invalid user zsc from 49.228.92.66 port 59024 ... show less	Brute-Force SSH

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 137.74.114.131

🇺🇸 136.117.63.30

🇩🇪 93.215.239.84

🇺🇸 66.116.237.163

🇺🇸 64.62.197.94

🇺🇸 216.25.89.131

🇧🇷 179.48.18.42

🇫🇷 176.31.139.1

🇵🇱 162.158.103.77

🇳🇱 109.160.32.104

🇳🇱 64.205.72.17

🇰🇷 221.165.119.125

🇮🇩 202.46.28.142

🇦🇷 200.69.39.89

🇺🇦 193.107.107.212

🇻🇪 190.97.237.145

🇧🇩 182.48.70.125

🇹🇼 128.14.239.39

🇹🇼 125.230.0.132

🇨🇳 112.86.225.244