JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.227.148.159

192.227.148.159 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 100%: ?

100%

ISP	RackNerd LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	192-227-148-159-host.colocrossing.com
Domain Name	racknerd.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.227.148.159

Whois 192.227.148.159

IP Abuse Reports for 192.227.148.159:

This IP address has been reported a total of 139 times from 92 distinct sources. 192.227.148.159 was first reported on March 13th 2023, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-07-27 09:54:05 (4 hours ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇳🇱 VMHeaven.io	2026-07-27 01:52:28 (12 hours ago)	Jul 27 01:51:05 proxy-ryzen sshd[3929388]: Failed password for root from 192.227.148.159 port 46132 ... show more Jul 27 01:51:05 proxy-ryzen sshd[3929388]: Failed password for root from 192.227.148.159 port 46132 ssh2 Jul 27 01:51:48 proxy-ryzen sshd[3929474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.148.159 user=root Jul 27 01:51:49 proxy-ryzen sshd[3929474]: Failed password for root from 192.227.148.159 port 45386 ssh2 Jul 27 01:52:26 proxy-ryzen sshd[3929562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.148.159 user=root Jul 27 01:52:28 proxy-ryzen sshd[3929562]: Failed password for root from 192.227.148.159 port 33396 ssh2 ... show less	Brute-Force SSH
🇧🇬 MazenHost	2026-07-27 00:27:06 (13 hours ago)	2026-07-27T03:27:03.072343+03:00 betelgeuse.mazen.host sshd[1473069]: pam_unix(sshd:auth): authentic ... show more 2026-07-27T03:27:03.072343+03:00 betelgeuse.mazen.host sshd[1473069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.148.159 user=root 2026-07-27T03:27:05.455199+03:00 betelgeuse.mazen.host sshd[1473069]: Failed password for root from 192.227.148.159 port 48444 ssh2 ... show less	Brute-Force SSH
🇳🇱 majo-it.nl	2026-07-26 22:52:36 (15 hours ago)	Jul 26 22:52:33 fail2ban sshd[3937557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jul 26 22:52:33 fail2ban sshd[3937557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.148.159 user=root Jul 26 22:52:35 fail2ban sshd[3937557]: Failed password for root from 192.227.148.159 port 60912 ssh2 ... show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 20:46:22 (17 hours ago)	[20:46] Attempted SSH login with credentials root:Cl******25	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 20:31:02 (17 hours ago)	[20:31] Attempted SSH login with credentials root:ro*****22	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 20:15:34 (17 hours ago)	[20:15] Attempted SSH login with credentials root:B******3	Brute-Force SSH
🇩🇪 www.mammazone.it	2026-07-26 20:05:57 (17 hours ago)	Jul 26 22:04:59 vps2 sshd[2636039]: Failed password for root from 192.227.148.159 port 47484 ssh2 Ju ... show more Jul 26 22:04:59 vps2 sshd[2636039]: Failed password for root from 192.227.148.159 port 47484 ssh2 Jul 26 22:05:53 vps2 sshd[2636230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.148.159 user=root Jul 26 22:05:56 vps2 sshd[2636230]: Failed password for root from 192.227.148.159 port 46184 ssh2 ... show less	Hacking
🇺🇸 drewf.ink	2026-07-26 20:00:23 (17 hours ago)	[20:00] Attempted SSH login with credentials root:re********ot	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 19:45:00 (18 hours ago)	[19:45] Attempted SSH login with credentials root:A******!	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 19:29:54 (18 hours ago)	[19:29] Attempted SSH login with credentials root:P@*****d!	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 19:14:20 (18 hours ago)	[19:14] Attempted SSH login with credentials root:Aa*****1.	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 18:58:59 (18 hours ago)	[18:58] Attempted SSH login with credentials root:1q******5t	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 18:43:44 (19 hours ago)	[18:43] Attempted SSH login with credentials root:@A*****23	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-26 18:28:24 (19 hours ago)	[18:28] Attempted SSH login with credentials root:Pa************rd	Brute-Force SSH

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.199.189.128

🇸🇬 103.187.146.107

🇧🇷 45.164.39.253

🇮🇳 216.10.245.205

🇪🇨 186.219.49.213

🇵🇱 176.53.159.197

🇨🇳 58.19.140.245

🇮🇳 38.137.11.14

🇬🇷 2.86.126.58

🇺🇸 2607:f8b0:4004:c25::120

🇷🇴 92.118.39.171

🇺🇸 91.230.168.4

🇫🇷 91.196.152.109

🇪🇬 41.239.157.97

🇩🇪 216.26.248.38

🇺🇬 196.0.119.250

🇦🇴 193.163.125.184

🇺🇸 190.92.179.233

🇳🇱 185.242.226.61

🇮🇸 185.40.122.250