JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.227.159.124

192.227.159.124 was found in our database!

This IP was reported 190 times. Confidence of Abuse is 13%: ?

13%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	192-227-159-124-host.colocrossing.com
Domain Name	colocrossing.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.227.159.124

Whois 192.227.159.124

IP Abuse Reports for 192.227.159.124:

This IP address has been reported a total of 190 times from 109 distinct sources. 192.227.159.124 was first reported on March 18th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-05-21 02:30:05 (3 weeks ago)	5 incidents: malicious activity. First: 2026-05-06 20:30, Last: 2026-05-20 22:30 UTC. Triggers: ufw- ... show more 5 incidents: malicious activity. First: 2026-05-06 20:30, Last: 2026-05-20 22:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-04-30 18:14:16 (1 month ago)	8 incidents: malicious activity. First: 2026-03-25 14:30, Last: 2026-04-30 14:14 UTC. Triggers: ufw- ... show more 8 incidents: malicious activity. First: 2026-03-25 14:30, Last: 2026-04-30 14:14 UTC. Triggers: ufw-repeater. show less	Port Scan
🇮🇳 evicky2002	2026-04-30 13:02:46 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇷🇺 Agrohim	2026-04-24 05:35:32 (1 month ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇷🇺 Agrohim	2026-04-14 06:57:29 (1 month ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇷🇺 Agrohim	2026-04-05 21:55:39 (2 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇯🇵 jay hung	2026-03-20 03:06:44 (2 months ago)	2026-03-19T13:12:07.812294+00:00 quarktech kernel: [ 4189.571301] [UFW BLOCK] IN=eth0 OUT= MAC=22:00 ... show more 2026-03-19T13:12:07.812294+00:00 quarktech kernel: [ 4189.571301] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=192.227.159.124 DST=172.237.29.33 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=10775 PROTO=TCP SPT=42823 DPT=8989 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 StatsMe	2026-03-19 21:29:59 (2 months ago)	2026-03-19T01:34:58.493337+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇬🇧 sonot	2026-03-19 15:46:15 (2 months ago)	Blocked by UFW on tunneluk01 [8999/tcp] Source port: 54549 TTL: 243 Packet length: 40 TOS: 0x00 Thi ... show more Blocked by UFW on tunneluk01 [8999/tcp] Source port: 54549 TTL: 243 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-03-19 15:36:53 (2 months ago)	tcp/8999 (5 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-03-19 15:36:29 (2 months ago)	Blocked by UFW (TCP on 8999) Source port: 54549 TTL: 241 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8999) Source port: 54549 TTL: 241 Packet length: 40 TOS: 0x08 This report (for 192.227.159.124) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Moritz	2026-03-19 15:17:39 (2 months ago)	Honeypot hit: HTTP/1.1 request on 8989 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_ ... show more Honeypot hit: HTTP/1.1 request on 8989 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 Accept: / Accept-Encoding: gzip; 8989 [2] TCP show less	Hacking Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2026-03-19 15:17:37 (2 months ago)	Honeypot hit: HTTP/1.1 request on 8989 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_ ... show more Honeypot hit: HTTP/1.1 request on 8989 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 Accept: / Accept-Encoding: gzip; 8989 [2] TCP show less	Web App Attack
🇩🇪 ValtonTahiri	2026-03-19 15:12:02 (2 months ago)	Honeypot hit: HTTP/1.1 request on 8989 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_ ... show more Honeypot hit: HTTP/1.1 request on 8989 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 Accept: / Accept-Encoding: gzip Full payload: GET / HTTP/1.1 Host: [SOME-IP]:8989 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 Accept: / Accept-Encoding: gzip on 8989/TCP (1 attempt) show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-03-19 15:02:50 (2 months ago)	Honeypot hit: HTTP/1.1 request on 8989 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_ ... show more Honeypot hit: HTTP/1.1 request on 8989 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 Accept: / Accept-Encoding: gzip; 8989 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot

Showing 1 to 15 of 190 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇲 176.32.193.16

🇨🇳 175.178.69.67

🇮🇩 103.77.76.101

🇬🇧 87.236.176.194

🇳🇱 45.148.10.147

🇺🇸 43.130.139.136

🇺🇸 38.147.106.238

🇰🇿 212.154.234.9

🇺🇸 206.206.124.234

🇷🇴 193.46.255.86

🇺🇸 192.3.45.8

🇻🇳 171.234.14.191

🇺🇸 135.237.125.78

🇺🇸 132.145.213.106

🇮🇳 106.192.197.156

🇧🇩 103.171.69.87

🇮🇩 43.230.5.42

🇫🇷 5.189.154.64

🇳🇱 2a0b:8bc0:2:56a8::1

🇺🇸 172.253.219.154