This IP address has been reported a total of
281
times from
222 distinct
sources.
101.46.66.84 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 63
reports;
United States of America
with 56
reports;
France
with 28
reports.
The most common categories in these recent reports were:
Brute-Force
177
times;
SSH
177
times;
Port Scan
77
times;
Hacking
45
times;
Web App Attack
35
times;
Other
32
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-28T03:53:40.807552hytron-8201-hytron-storm-5758 sshd[12303]: Invalid user user from 101.46.6 ...
show more2026-10-28T03:53:40.807552hytron-8201-hytron-storm-5758 sshd[12303]: Invalid user user from 101.46.66.84 port 35342
2026-10-28T03:53:40.809866hytron-8201-hytron-storm-5758 sshd[12303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.46.66.84
2026-10-28T03:53:42.763829hytron-8201-hytron-storm-5758 sshd[12303]: Failed password for invalid user user from 101.46.66.84 port 35342 ssh2
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 15/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 15/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 7 (1 bad password, 6 invalid user) | 0 success | 11 total SSH log events | seen on 1 sensor(s)
Origin: Egypt (EG) | AS136907 HUAWEI INTERNATIONAL PTE. LTD. | 101.46.66.0/24
First seen: 2026-10-28 02:46:46 UTC | Last seen: 2026-10-28 03:29:14 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: admin, Pass: [REDACTED]
Unsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; ...
show moreUnsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; connection dropped. Scanner/bot behavior.
show less
Port Scan
Anonymous
Reported by RattusGuard: Honeypot: ssh emulator (port 2222/tcp)
Port Scan
Hacking
Anonymous
2026-10-28T00:19:44.891231+00:00 mail sshd[98412]: Invalid user admin from 101.46.66.84 port 34080
2 ...
show more2026-10-28T00:19:44.891231+00:00 mail sshd[98412]: Invalid user admin from 101.46.66.84 port 34080
2026-10-28T00:19:44.963137+00:00 mail sshd[98412]: Connection closed by invalid user admin 101.46.66.84 port 34080 [preauth]
...
show less
2026-10-28T00:03:49.249325+00:00 vps3363447 sshd[314011]: Failed password for root from 101.46.66.84 ...
show more2026-10-28T00:03:49.249325+00:00 vps3363447 sshd[314011]: Failed password for root from 101.46.66.84 port 49016 ssh2
show less
Port scan: unsolicited TCP connection (handshake completed) to a decoy port with no production servi ...
show morePort scan: unsolicited TCP connection (handshake completed) to a decoy port with no production service at 2026-10-28 00:01:15 UTC. Destination port probed: tcp/2222 (SSH alternate port). Source blocked. - Lumerux Defense (lumerux.com), automated report. Contact: [email protected]show less
