Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-27T00:16:16.119739-03:00 vmi2819241 sshd-session[135861]: Failed password for invalid user deploy from 166.0.106.56 port 34504 ssh2
2026-10-27T00:17:44.777528-03:00 vmi2819241 sshd-session[136430]: Invalid user user01 from 166.0.106.56 port 5 ...
show more2026-10-27T00:16:16.119739-03:00 vmi2819241 sshd-session[135861]: Failed password for invalid user deploy from 166.0.106.56 port 34504 ssh2
2026-10-27T00:17:44.777528-03:00 vmi2819241 sshd-session[136430]: Invalid user user01 from 166.0.106.56 port 54482
2026-10-27T00:17:44.802226-03:00 vmi2819241 sshd-session[136430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.0.106.56
2026-10-27T00:17:46.194112-03:00 vmi2819241 sshd-session[136430]: Failed password for invalid user user01 from 166.0.106.56 port 54482 ssh2
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-26T14:28:50Z and 2026-10-26T14:28:52Z
Brute-Force
SSH
Anonymous
Automated block on a production VoIP/web server: SSH authentication attempts on port 22/tcp after 5 detected failures. Blocked automatically at the host.
2026-10-26T16:06:38.980311+02:00 rahona.network sshd-session[17134]: Failed password for root from 166.0.106.56 port 38294 ssh2
2026-10-26T16:08:05.259174+02:00 rahona.network sshd-session[17506]: Connection from 166.0.106.56 port 58824 on 178.63.185 ...
show more2026-10-26T16:06:38.980311+02:00 rahona.network sshd-session[17134]: Failed password for root from 166.0.106.56 port 38294 ssh2
2026-10-26T16:08:05.259174+02:00 rahona.network sshd-session[17506]: Connection from 166.0.106.56 port 58824 on 178.63.185.182 port 22 rdomain ""
2026-10-26T16:08:05.822746+02:00 rahona.network sshd-session[17506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.0.106.56 user=root
2026-10-26T16:08:07.528429+02:00 rahona.network sshd-session[17506]: Failed password for root from 166.0.106.56 port 58824 ssh2
show less
2026-10-26T06:57:26.839853-07:00 localhost sshd[3123573]: Disconnected from authenticating user root 166.0.106.56 port 37308 [preauth]
2026-10-26T07:04:35.645937-07:00 localhost sshd[3123810]: pam_unix(sshd:auth): authentication failure; logname= uid ...
show more2026-10-26T06:57:26.839853-07:00 localhost sshd[3123573]: Disconnected from authenticating user root 166.0.106.56 port 37308 [preauth]
2026-10-26T07:04:35.645937-07:00 localhost sshd[3123810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.0.106.56 user=root
2026-10-26T07:04:37.928291-07:00 localhost sshd[3123810]: Failed password for root from 166.0.106.56 port 50452 ssh2
2026-10-26T07:04:40.331976-07:00 localhost sshd[3123810]: Disconnected from authenticating user root 166.0.106.56 port 50452 [preauth]
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown