JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.92.80

Neutral Activity

Abuse Confidence Score

0% Low Risk

135 reports

88 reporters · latest 6 months ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.228.92.80 has been reported 135 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

135 from 88 distinct reporters

First reported

November 15th 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 13:09:25 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇰🇷 MU-star.net	2026-04-04 14:59:41 UTC · (7 months ago)	Invalid user pivpn from 49.228.92.80 port 58172	Port Scan Brute-Force SSH
🇫🇷 tkhaldi	2026-04-04 14:47:58 UTC · (7 months ago)	2026-04-04T14:44:26.806475+00:00 scw-zen-shannon sshd-session[3137995]: Invalid user user22 from 49.228.92.80 port 50374 2026-04-04T14:46:57.675125+00:00 scw-zen-shannon sshd-session[3138089]: Invalid user online from 49.228.92.80 port 33424 2026-04- ... show more 2026-04-04T14:44:26.806475+00:00 scw-zen-shannon sshd-session[3137995]: Invalid user user22 from 49.228.92.80 port 50374 2026-04-04T14:46:57.675125+00:00 scw-zen-shannon sshd-session[3138089]: Invalid user online from 49.228.92.80 port 33424 2026-04-04T14:47:57.837122+00:00 scw-zen-shannon sshd-session[3138128]: Invalid user tuser from 49.228.92.80 port 36068 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-04 14:41:21 UTC · (7 months ago)	(sshd) Failed SSH login from 49.228.92.80 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 4 14:37:39 24015 sshd[24067]: pam_unix(sshd:auth): authentication fail ... show more (sshd) Failed SSH login from 49.228.92.80 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 4 14:37:39 24015 sshd[24067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.80 user=root Apr 4 14:37:41 24015 sshd[24067]: Failed password for root from 49.228.92.80 port 41844 ssh2 Apr 4 14:39:17 24015 sshd[24341]: Invalid user testftp1 from 49.228.92.80 port 45328 Apr 4 14:39:20 24015 sshd[24341]: Failed password for invalid user testftp1 from 49.228.92.80 port 45328 ssh2 Apr 4 14:41:14 24015 sshd[24639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.92.80 user=root show less	Brute-Force SSH
Anonymous	2026-04-04 14:28:07 UTC · (7 months ago)	ssh bruteforce	Brute-Force SSH
🇩🇪 rev-crew.info	2026-04-04 14:21:32 UTC · (7 months ago)	2026-04-04T16:20:56.732410+02:00 rev-crew.info sshd-session[3154604]: Connection from 49.228.92.80 port 42982 on 5.9.102.165 port 2244 rdomain "" 2026-04-04T16:20:57.749789+02:00 rev-crew.info sshd-session[3154604]: Invalid user bot from 49.228.92.80 ... show more 2026-04-04T16:20:56.732410+02:00 rev-crew.info sshd-session[3154604]: Connection from 49.228.92.80 port 42982 on 5.9.102.165 port 2244 rdomain "" 2026-04-04T16:20:57.749789+02:00 rev-crew.info sshd-session[3154604]: Invalid user bot from 49.228.92.80 port 42982 2026-04-04T16:20:57.936931+02:00 rev-crew.info sshd-session[3154604]: Disconnected from invalid user bot 49.228.92.80 port 42982 [preauth] 2026-04-04T16:21:32.278758+02:00 rev-crew.info sshd-session[3155466]: Disconnected from authenticating user root 49.228.92.80 port 51482 [preauth] ... show less	Brute-Force SSH
🇬🇧 AdrianT	2025-12-05 00:37:46 UTC · (11 months ago)	SSH brute force	Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-11-17 23:37:35 UTC · (11 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-17 20:09:58 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-11-17 08:31:09 UTC · (11 months ago)	This IP address carried out 5 SSH credential attack (attempts) on 16-11-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
Anonymous	2025-11-17 03:00:29 UTC · (11 months ago)	Fail2Ban detection - brute-force attempt (jail: sshd)	Brute-Force
🇫🇷 SpaceHost-Server	2025-11-16 23:36:04 UTC · (11 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-11-16 22:11:14 UTC · (11 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/49.228.92.80	SSH
🇹🇷 rtbh.com.tr	2025-11-16 20:09:57 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-11-16 17:44:16 UTC · (11 months ago)	(sshd) Failed SSH login from 49.228.92.80 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 16 11:42:31 13217 sshd[8662]: Invalid user sajid from 49.228.92.80 port ... show more (sshd) Failed SSH login from 49.228.92.80 (TH/Thailand/49-228-92-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 16 11:42:31 13217 sshd[8662]: Invalid user sajid from 49.228.92.80 port 36518 Nov 16 11:42:34 13217 sshd[8662]: Failed password for invalid user sajid from 49.228.92.80 port 36518 ssh2 Nov 16 11:43:11 13217 sshd[8747]: Invalid user admin from 49.228.92.80 port 39316 Nov 16 11:43:13 13217 sshd[8747]: Failed password for invalid user admin from 49.228.92.80 port 39316 ssh2 Nov 16 11:43:56 13217 sshd[8758]: Invalid user builder from 49.228.92.80 port 40684 show less	Brute-Force SSH

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 204.76.203.214

🇹🇭 183.89.78.116

🇯🇴 172.69.173.144

🇺🇸 146.148.184.148

🇧🇩 103.159.2.113

🇺🇸 57.154.184.70

🇧🇪 35.210.0.211

🇺🇸 9.233.110.240

🇷🇴 213.157.186.82

🇧🇪 198.235.24.155

🇧🇪 198.235.24.134

🇨🇳 180.76.146.235

🇺🇸 173.249.253.223

🇺🇸 172.58.124.65

🇯🇵 154.197.27.54

🇨🇮 102.67.221.71

🇺🇸 100.63.173.66

🇮🇹 91.254.4.57

🇵🇭 49.146.221.81

🇹🇷 45.198.85.204