This IP address has been reported a total of
245
times from
176 distinct
sources.
192.227.138.254 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 8 12:45:09 zurich-2 sshd[3020110]: Invalid user ftpuser from 192.227.138.254 port 49328
Jul 8 ...
show moreJul 8 12:45:09 zurich-2 sshd[3020110]: Invalid user ftpuser from 192.227.138.254 port 49328
Jul 8 12:45:09 zurich-2 sshd[3020110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.138.254
Jul 8 12:45:11 zurich-2 sshd[3020110]: Failed password for invalid user ftpuser from 192.227.138.254 port 49328 ssh2
...
show less
Jul 8 04:35:50 b146-37 sshd[262499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJul 8 04:35:50 b146-37 sshd[262499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.138.254
Jul 8 04:35:52 b146-37 sshd[262499]: Failed password for invalid user ubuntu from 192.227.138.254 port 48510 ssh2
Jul 8 04:44:53 b146-37 sshd[262617]: Invalid user ftpuser from 192.227.138.254 port 55440
...
show less
Brute-Force
SSH
Anonymous
2026-07-08T13:52:35.222419+03:30 digitalogic sshd-session[2448088]: Disconnected from authenticating ...
show more2026-07-08T13:52:35.222419+03:30 digitalogic sshd-session[2448088]: Disconnected from authenticating user root 192.227.138.254 port 59332 [preauth]
2026-07-08T13:54:01.665841+03:30 digitalogic sshd-session[2448545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.138.254 user=root
2026-07-08T13:54:03.278232+03:30 digitalogic sshd-session[2448545]: Failed password for root from 192.227.138.254 port 49442 ssh2
...
show less
192.227.138.254 (US/United States/192-227-138-254-host.colocrossing.com), 5 distributed sshd attacks ...
show more192.227.138.254 (US/United States/192-227-138-254-host.colocrossing.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 8 04:57:49 14352 sshd[9443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.180.57.212 user=root
Jul 8 04:57:50 14352 sshd[9443]: Failed password for root from 182.180.57.212 port 39312 ssh2
Jul 8 04:59:29 14352 sshd[10426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.101.33 user=root
Jul 8 04:59:32 14352 sshd[10426]: Failed password for root from 94.23.101.33 port 59566 ssh2
Jul 8 04:59:50 14352 sshd[10518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.138.254 user=root
IP Addresses Blocked:
182.180.57.212 (PK/Pakistan/-)
94.23.101.33 (FR/France/-)
show less
Brute-Force
SSH
Anonymous
2026-07-08T13:22:03.629666+03:30 digitalogic sshd-session[2439668]: pam_unix(sshd:auth): authenticat ...
show more2026-07-08T13:22:03.629666+03:30 digitalogic sshd-session[2439668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.138.254
2026-07-08T13:22:05.682040+03:30 digitalogic sshd-session[2439668]: Failed password for invalid user test from 192.227.138.254 port 40800 ssh2
2026-07-08T13:22:06.033325+03:30 digitalogic sshd-session[2439668]: Disconnected from invalid user test 192.227.138.254 port 40800 [preauth]
...
show less
2026-07-08T10:29:07.896570+02:00 nc-vm-rs4kg95-vie sshd-session[2594769]: Invalid user userftp from ...
show more2026-07-08T10:29:07.896570+02:00 nc-vm-rs4kg95-vie sshd-session[2594769]: Invalid user userftp from 192.227.138.254 port 50634
2026-07-08T10:30:52.424954+02:00 nc-vm-rs4kg95-vie sshd-session[2595368]: Invalid user ftpuser from 192.227.138.254 port 57628
2026-07-08T10:34:18.760182+02:00 nc-vm-rs4kg95-vie sshd-session[2596549]: Invalid user admin from 192.227.138.254 port 45544
...
show less
Brute-Force
SSH
Showing 1 to
15
of 245 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩