This IP address has been reported a total of
40
times from
33 distinct
sources.
101.200.147.166 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-04-11T00:24:24.940742+00:00 bravo sshd[1448938]: Failed password for root from 101.200.147.166 ...
show more2026-04-11T00:24:24.940742+00:00 bravo sshd[1448938]: Failed password for root from 101.200.147.166 port 64883 ssh2
2026-04-11T00:25:01.237449+00:00 bravo sshd[1448938]: Failed password for root from 101.200.147.166 port 64883 ssh2
2026-04-11T00:25:06.429169+00:00 bravo sshd[1448938]: Failed password for root from 101.200.147.166 port 64883 ssh2
2026-04-11T00:25:32.283157+00:00 bravo sshd[1448938]: Failed password for root from 101.200.147.166 port 64883 ssh2
2026-04-11T00:25:53.453084+00:00 bravo sshd[1448938]: Failed password for root from 101.200.147.166 port 64883 ssh2
...
show less
Active SSH brute-force detected. Logs: Apr 10 20:23:45 AVM-605798 sshd[1635735]: Failed password for ...
show moreActive SSH brute-force detected. Logs: Apr 10 20:23:45 AVM-605798 sshd[1635735]: Failed password for root from 101.200.147.166 port 64476 ssh2 Apr 10 20:24:24 AVM-605798 sshd[1635735]: Failed password for root from 101.200.147.166 port 64476 ssh2 Apr 1...
show less
Apr 3 16:59:23 jira sshd[9059]: Failed password for root from 101.200.147.166 port 56435 ssh2
Apr ...
show moreApr 3 16:59:23 jira sshd[9059]: Failed password for root from 101.200.147.166 port 56435 ssh2
Apr 3 16:59:24 jira sshd[9059]: error: maximum authentication attempts exceeded for root from 101.200.147.166 port 56435 ssh2 [preauth]
Apr 3 16:59:36 jira sshd[9080]: Connection from 101.200.147.166 port 56863 on 138.201.123.138 port 22 rdomain ""
Apr 3 16:59:45 jira sshd[9080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.200.147.166 user=root
Apr 3 16:59:47 jira sshd[9080]: Failed password for root from 101.200.147.166 port 56863 ssh2
...
show less
Mar 31 08:24:07 sanyalnet-oracle-vps2 sshd[2885473]: Failed password for invalid user root from 101. ...
show moreMar 31 08:24:07 sanyalnet-oracle-vps2 sshd[2885473]: Failed password for invalid user root from 101.200.147.166 port 57237 ssh2
Mar 31 08:25:07 sanyalnet-oracle-vps2 sshd[2885521]: Connection from 101.200.147.166 port 57486 on 10.0.0.93 port 22 rdomain ""
Mar 31 08:25:08 sanyalnet-oracle-vps2 sshd[2885521]: User root from 101.200.147.166 not allowed because not listed in AllowUsers
...
show less
2025-12-21T10:39:04.819134+08:00 lw-vm-v1-sgp sshd[3542520]: Failed password for root from 101.200.1 ...
show more2025-12-21T10:39:04.819134+08:00 lw-vm-v1-sgp sshd[3542520]: Failed password for root from 101.200.147.166 port 65318 ssh2
2025-12-21T10:39:09.772240+08:00 lw-vm-v1-sgp sshd[3542520]: Failed password for root from 101.200.147.166 port 65318 ssh2
2025-12-21T10:39:15.853084+08:00 lw-vm-v1-sgp sshd[3542520]: Failed password for root from 101.200.147.166 port 65318 ssh2
...
show less
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/101.200.147.166
2025-12-08 18:5 ...
show moreThreatBook Intelligence: IDC more details on http://threatbook.io/ip/101.200.147.166
2025-12-08 18:55:26 ["echo 1 && cat /bin/echo"]
show less
2025-11-20T04:58:41.502539+00:00 de-ffm-lim02-mt01 sshd[3480942]: Failed password for root from 101. ...
show more2025-11-20T04:58:41.502539+00:00 de-ffm-lim02-mt01 sshd[3480942]: Failed password for root from 101.200.147.166 port 57817 ssh2
2025-11-20T04:59:42.736712+00:00 de-ffm-lim02-mt01 sshd[3481067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.200.147.166 user=root
2025-11-20T04:59:44.673496+00:00 de-ffm-lim02-mt01 sshd[3481067]: Failed password for root from 101.200.147.166 port 58342 ssh2
...
show less
2025-11-18T23:47:29.407762+03:00 zlydnev sshd[234865]: Failed password for root from 101.200.147.166 ...
show more2025-11-18T23:47:29.407762+03:00 zlydnev sshd[234865]: Failed password for root from 101.200.147.166 port 63424 ssh2
2025-11-18T23:47:33.016242+03:00 zlydnev sshd[234865]: Failed password for root from 101.200.147.166 port 63424 ssh2
2025-11-18T23:48:00.213525+03:00 zlydnev sshd[234865]: Failed password for root from 101.200.147.166 port 63424 ssh2
2025-11-18T23:48:03.929176+03:00 zlydnev sshd[234865]: Failed password for root from 101.200.147.166 port 63424 ssh2
2025-11-18T23:48:24.100773+03:00 zlydnev sshd[234865]: Disconnecting authenticating user root 101.200.147.166 port 63424: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 40 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩