This IP address has been reported a total of
377
times from
144 distinct
sources.
159.89.166.99 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Mar 3 00:35:42 global2 sshd[23921]: Failed password for root from 159.89.166.99 port 45436 ssh2
Mar ...
show moreMar 3 00:35:42 global2 sshd[23921]: Failed password for root from 159.89.166.99 port 45436 ssh2
Mar 3 00:36:14 global2 sshd[23923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.166.99 user=root
Mar 3 00:36:17 global2 sshd[23923]: Failed password for root from 159.89.166.99 port 34932 ssh2
Mar 3 00:36:48 global2 sshd[23930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.166.99 user=root
Mar 3 00:36:49 global2 sshd[23930]: Failed password for root from 159.89.166.99 port 34508 ssh2
...
show less
2026-03-03T06:33:01.484211+01:00 websrv1.aknwsrv.net sshd[2417581]: Connection closed by 159.89.166. ...
show more2026-03-03T06:33:01.484211+01:00 websrv1.aknwsrv.net sshd[2417581]: Connection closed by 159.89.166.99 port 54806
2026-03-03T06:34:14.267809+01:00 websrv1.aknwsrv.net sshd[2418301]: Connection closed by authenticating user root 159.89.166.99 port 60126 [preauth]
2026-03-03T06:34:50.583777+01:00 websrv1.aknwsrv.net sshd[2418326]: Connection closed by authenticating user root 159.89.166.99 port 38166 [preauth]
2026-03-03T06:35:26.899055+01:00 websrv1.aknwsrv.net sshd[2418941]: Connection closed by authenticating user root 159.89.166.99 port 43214 [preauth]
2026-03-03T06:36:02.460530+01:00 websrv1.aknwsrv.net sshd[2418970]: Connection closed by authenticating user root 159.89.166.99 port 38698 [preauth]
show less
Mar 3 06:34:24 racetecweb sshd[3397200]: User root from 159.89.166.99 not allowed because not liste ...
show moreMar 3 06:34:24 racetecweb sshd[3397200]: User root from 159.89.166.99 not allowed because not listed in AllowUsers
Mar 3 06:35:00 racetecweb sshd[3397203]: User root from 159.89.166.99 not allowed because not listed in AllowUsers
Mar 3 06:35:36 racetecweb sshd[3397205]: User root from 159.89.166.99 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 377 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩