This IP address has been reported a total of
40
times from
22 distinct
sources.
163.227.238.148 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-30T12:57:37.692229+02:00 gw-de12-01.guestgw.net sshd[274701]: Invalid user sam from 163.227. ...
show more2026-07-30T12:57:37.692229+02:00 gw-de12-01.guestgw.net sshd[274701]: Invalid user sam from 163.227.238.148 port 57860
2026-07-30T12:57:37.912592+02:00 gw-de12-01.guestgw.net sshd[274701]: Disconnected from invalid user sam 163.227.238.148 port 57860 [preauth]
2026-07-30T13:04:00.582558+02:00 gw-de12-01.guestgw.net sshd[276550]: Invalid user 1 from 163.227.238.148 port 59518
2026-07-30T13:04:00.806449+02:00 gw-de12-01.guestgw.net sshd[276550]: Disconnected from invalid user 1 163.227.238.148 port 59518 [preauth]
2026-07-30T13:06:48.072150+02:00 gw-de12-01.guestgw.net sshd[277405]: Disconnected from authenticating user root 163.227.238.148 port 34800 [preauth]
show less
2026-07-30T19:00:31.416823+08:00 VM-0-3-ubuntu sshd[3129419]: pam_unix(sshd:auth): authentication fa ...
show more2026-07-30T19:00:31.416823+08:00 VM-0-3-ubuntu sshd[3129419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.227.238.148
2026-07-30T19:00:33.277289+08:00 VM-0-3-ubuntu sshd[3129419]: Failed password for invalid user sam from 163.227.238.148 port 34372 ssh2
...
show less
2026-07-30T13:59:09.248397+03:00 Debian-1303-trixie-amd64-base sshd-session[4045048]: Invalid user s ...
show more2026-07-30T13:59:09.248397+03:00 Debian-1303-trixie-amd64-base sshd-session[4045048]: Invalid user sam from 163.227.238.148 port 56820
...
show less
2026-07-30T09:48:13.700632+00:00 hostname sshd[1759019]: Failed password for root from 163.227.238.1 ...
show more2026-07-30T09:48:13.700632+00:00 hostname sshd[1759019]: Failed password for root from 163.227.238.148 port 41018 ssh2
2026-07-30T09:50:53.062245+00:00 hostname sshd[1759036]: Invalid user santer from 163.227.238.148 port 41686
2026-07-30T09:50:53.072186+00:00 hostname sshd[1759036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.227.238.148
2026-07-30T09:50:55.369432+00:00 hostname sshd[1759036]: Failed password for invalid user santer from 163.227.238.148 port 41686 ssh2
2026-07-30T09:53:38.738352+00:00 hostname sshd[1759044]: Invalid user retag from 163.227.238.148 port 42994
...
show less
2026-07-30T08:50:59.511896+00:00 hostname sshd[1758437]: Failed password for invalid user utente fro ...
show more2026-07-30T08:50:59.511896+00:00 hostname sshd[1758437]: Failed password for invalid user utente from 163.227.238.148 port 44058 ssh2
2026-07-30T08:53:37.569162+00:00 hostname sshd[1758457]: Invalid user luis from 163.227.238.148 port 40258
2026-07-30T08:53:37.583046+00:00 hostname sshd[1758457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.227.238.148
2026-07-30T08:53:40.176937+00:00 hostname sshd[1758457]: Failed password for invalid user luis from 163.227.238.148 port 40258 ssh2
2026-07-30T08:56:19.907921+00:00 hostname sshd[1758477]: Invalid user ai from 163.227.238.148 port 36518
...
show less
2026-07-30T10:37:27.412204+02:00 ka02 sshd-session[327191]: Connection from 163.227.238.148 port 384 ...
show more2026-07-30T10:37:27.412204+02:00 ka02 sshd-session[327191]: Connection from 163.227.238.148 port 38458 on 46.38.234.197 port 22 rdomain ""
2026-07-30T10:37:28.388501+02:00 ka02 sshd-session[327191]: User root from 163.227.238.148 not allowed because not listed in AllowUsers
2026-07-30T10:37:28.571647+02:00 ka02 sshd-session[327191]: Disconnected from invalid user root 163.227.238.148 port 38458 [preauth]
2026-07-30T10:40:13.818322+02:00 ka02 sshd-session[327260]: Connection from 163.227.238.148 port 59198 on 46.38.234.197 port 22 rdomain ""
2026-07-30T10:40:14.793640+02:00 ka02 sshd-session[327260]: User root from 163.227.238.148 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 40 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ