This IP address has been reported a total of
71
times from
68 distinct
sources.
159.223.228.49 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 6, successful: ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 6, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (us1) over 2026-09-14..2026-09-14. Reported by an SSH honeypot network; no production service involved.
show less
Sep 14 16:22:23 transform-schauspielschule sshd[4167564]: Invalid user banana from 159.223.228.49 po ...
show moreSep 14 16:22:23 transform-schauspielschule sshd[4167564]: Invalid user banana from 159.223.228.49 port 42862
Sep 14 16:24:54 transform-schauspielschule sshd[4167568]: Invalid user apple from 159.223.228.49 port 55124
Sep 14 16:27:35 transform-schauspielschule sshd[4167572]: Invalid user swordfish from 159.223.228.49 port 43868
Sep 14 16:30:09 transform-schauspielschule sshd[4167576]: Invalid user lhvalidator from 159.223.228.49 port 44090
Sep 14 16:32:39 transform-schauspielschule sshd[4167587]: Invalid user shardeum from 159.223.228.49 port 55482
...
show less
2026-09-14T19:22:19.612806 chaos.ohost.bg sshd[1668839]: Invalid user banana from 159.223.228.49 por ...
show more2026-09-14T19:22:19.612806 chaos.ohost.bg sshd[1668839]: Invalid user banana from 159.223.228.49 port 53876
2026-09-14T19:24:49.403154 chaos.ohost.bg sshd[1747657]: Invalid user apple from 159.223.228.49 port 52938
2026-09-14T19:27:31.130719 chaos.ohost.bg sshd[1834536]: Invalid user swordfish from 159.223.228.49 port 55416
2026-09-14T19:30:05.814874 chaos.ohost.bg sshd[1916926]: Invalid user lhvalidator from 159.223.228.49 port 55174
2026-09-14T19:32:35.188770 chaos.ohost.bg sshd[1995948]: Invalid user shardeum from 159.223.228.49 port 53650
...
show less
Brute-Force
SSH
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
2026-09-14T16:21:03.937978+00:00 az100-jp sshd[701633]: Invalid user banana from 159.223.228.49 port ...
show more2026-09-14T16:21:03.937978+00:00 az100-jp sshd[701633]: Invalid user banana from 159.223.228.49 port 59680
2026-09-14T16:23:31.848287+00:00 az100-jp sshd[701645]: Invalid user apple from 159.223.228.49 port 34780
2026-09-14T16:26:08.239846+00:00 az100-jp sshd[701655]: Invalid user swordfish from 159.223.228.49 port 57844
2026-09-14T16:28:49.080169+00:00 az100-jp sshd[701666]: Invalid user lhvalidator from 159.223.228.49 port 58062
2026-09-14T16:31:18.936099+00:00 az100-jp sshd[701674]: Invalid user shardeum from 159.223.228.49 port 36600
...
show less
Brute-Force
SSH
Anonymous
Sep 14 19:20:54 dev sshd[156919]: Invalid user banana from 159.223.228.49 port 40186
Sep 14 19:23:21 ...
show moreSep 14 19:20:54 dev sshd[156919]: Invalid user banana from 159.223.228.49 port 40186
Sep 14 19:23:21 dev sshd[156956]: Invalid user apple from 159.223.228.49 port 59200
Sep 14 19:25:57 dev sshd[157329]: Invalid user swordfish from 159.223.228.49 port 59586
Sep 14 19:28:39 dev sshd[157415]: Invalid user lhvalidator from 159.223.228.49 port 36028
Sep 14 19:31:08 dev sshd[157870]: Invalid user shardeum from 159.223.228.49 port 46882
...
show less
2026-09-14T16:20:44.691038+00:00 uman sshd[397269]: Invalid user banana from 159.223.228.49 port 549 ...
show more2026-09-14T16:20:44.691038+00:00 uman sshd[397269]: Invalid user banana from 159.223.228.49 port 54990
2026-09-14T16:23:12.130415+00:00 uman sshd[397846]: Invalid user apple from 159.223.228.49 port 46886
2026-09-14T16:25:47.240940+00:00 uman sshd[398448]: Invalid user swordfish from 159.223.228.49 port 59346
2026-09-14T16:28:29.130855+00:00 uman sshd[399090]: Invalid user lhvalidator from 159.223.228.49 port 32780
2026-09-14T16:30:59.639360+00:00 uman sshd[399701]: Invalid user shardeum from 159.223.228.49 port 42238
...
show less