AbuseIPDB » 167.148.166.101

167.148.166.101 was found in our database!

This IP was reported 201 times. Confidence of Abuse is 100%: ?

100%

ISP	Arisk Communications inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	nuukcommunications.com
Country	United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 167.148.166.101

Whois 167.148.166.101

IP Abuse Reports for 167.148.166.101:

This IP address has been reported a total of 201 times from 110 distinct sources. 167.148.166.101 was first reported on June 12th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-07-08 16:11:57 (5 hours ago)	...	Brute-Force SSH
Interceptor_HQ	2025-07-06 05:12:08 (2 days ago)	Interceptor Intrusion Detection: pam_unix(sshd:auth): authentication failure;; logname= uid=0 ... show moreInterceptor Intrusion Detection: pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.148.166.101 user=root - Failed password for root from 167.148.166.101 port 51376 ssh2 show less	Brute-Force SSH
zwh	2025-07-04 17:54:23 (4 days ago)	SSH Brute-Force	Brute-Force SSH
senkodigital	2025-07-04 07:45:47 (4 days ago)	2025-07-04T07:45:46.752417Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 167.148.166.101:45 ... show more2025-07-04T07:45:46.752417Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 167.148.166.101:45586 (158.69.22.11:2222) [session: 95505c630bbb] 2025-07-04T07:45:47.444143Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 167.148.166.101:46180 (158.69.22.11:2222) [session: 5b44d6051f54] ... show less	Brute-Force SSH
sa0azs	2025-07-04 00:30:30 (4 days ago)	2025-07-04T02:30:20.360353+02:00 T440s sshd[23263]: Failed password for root from 167.148.166.101 po ... show more2025-07-04T02:30:20.360353+02:00 T440s sshd[23263]: Failed password for root from 167.148.166.101 port 49236 ssh2 2025-07-04T02:30:28.278448+02:00 T440s sshd[23265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.148.166.101 user=root 2025-07-04T02:30:29.972971+02:00 T440s sshd[23265]: Failed password for root from 167.148.166.101 port 51900 ssh2 ... show less	Brute-Force SSH
amit177	2025-07-03 16:50:18 (5 days ago)		Brute-Force SSH
NXO WAN	2025-07-01 23:05:06 (6 days ago)	SSH login attempts with invalid user	Brute-Force SSH
billy549	2025-07-01 17:37:57 (1 week ago)	2025-07-01T17:37:43.166185+00:00 vps.billy.wales sshd[121915]: Failed password for root from 167.148 ... show more2025-07-01T17:37:43.166185+00:00 vps.billy.wales sshd[121915]: Failed password for root from 167.148.166.101 port 45986 ssh2 2025-07-01T17:37:48.119139+00:00 vps.billy.wales sshd[121917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.148.166.101 user=root 2025-07-01T17:37:49.933871+00:00 vps.billy.wales sshd[121917]: Failed password for root from 167.148.166.101 port 47970 ssh2 2025-07-01T17:37:54.417396+00:00 vps.billy.wales sshd[121919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.148.166.101 user=root 2025-07-01T17:37:56.056003+00:00 vps.billy.wales sshd[121919]: Failed password for root from 167.148.166.101 port 50002 ssh2 ... show less	Brute-Force SSH
digitalsekuriti.id	2025-06-30 21:41:35 (1 week ago)	2025-07-01T04:40:25.855586 mail.atmatech.id sshd[3594397]: pam_unix(sshd:auth): authentication failu ... show more2025-07-01T04:40:25.855586 mail.atmatech.id sshd[3594397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.148.166.101 user=root 2025-07-01T04:40:28.210075 mail.atmatech.id sshd[3594397]: Failed password for root from 167.148.166.101 port 36400 ssh2 2025-07-01T04:40:30.560522 mail.atmatech.id sshd[3594613]: Invalid user pi from 167.148.166.101 port 38878 ... show less	Brute-Force SSH
rtbh.com.tr	2025-06-30 20:07:26 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Boxis.net NOC	2025-06-30 08:04:22 (1 week ago)	(sshd) Failed SSH login from 167.148.166.101 (US/United States/-): 5 in the last 3600 secs; Ports: * ... show more(sshd) Failed SSH login from 167.148.166.101 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 30 10:04:14 da057 sshd[2023413]: Invalid user from 167.148.166.101 port 39028 Jun 30 10:04:14 da057 sshd[2023414]: Invalid user from 167.148.166.101 port 48574 Jun 30 10:04:14 da057 sshd[2023412]: Invalid user from 167.148.166.101 port 45058 Jun 30 10:04:14 da057 sshd[2023411]: Invalid user from 167.148.166.101 port 58628 Jun 30 10:04:14 da057 sshd[2023420]: Invalid user from 167.148.166.101 port 37482 show less	Port Scan
guldkage	2025-06-30 07:56:42 (1 week ago)	Unauthorized connection attempt detected from IP address 167.148.166.101 to port 22 (ger-03) [Z]	Brute-Force Exploited Host
Anonymous	2025-06-30 06:21:29 (1 week ago)	$f2bV_matches	Brute-Force SSH
NetWatch	2025-06-30 06:07:04 (1 week ago)	The IP 167.148.166.101 tried multiple SSH logins	Brute-Force SSH
whynothacked	2025-06-29 23:17:52 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-slow-bf	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩