This IP address has been reported a total of
90
times from
76 distinct
sources.
166.1.249.253 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 24
reports;
United States of America
with 20
reports;
France
with 6
reports.
The most common categories in these recent reports were:
Brute-Force
82
times;
SSH
81
times;
Port Scan
3
times;
Hacking
2
times;
Phishing
1
time;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
TSEC Honeypot Network report. Threat score: 81/100. Categories: Port Scan, Hacking, Brute-Force, Web ...
show moreTSEC Honeypot Network report. Threat score: 81/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: beelzebub. Context: Attacker IP 166.1.249.253 observed using SSH client fingerprint 'Unknown SSH Client (f555226df196)' 3 times when connecting to a healthcare sector honeypot between 2026-10-26 05:55 and 2026-10-26 0....
show less
2026-10-26T06:25:15.211176+00:00 edge-obe-sto01.int.pdx.net.uk sshd[383489]: Invalid user dmdba from ...
show more2026-10-26T06:25:15.211176+00:00 edge-obe-sto01.int.pdx.net.uk sshd[383489]: Invalid user dmdba from 166.1.249.253 port 38880
2026-10-26T06:26:50.200094+00:00 edge-obe-sto01.int.pdx.net.uk sshd[383658]: Invalid user yang from 166.1.249.253 port 45708
2026-10-26T06:28:28.175610+00:00 edge-obe-sto01.int.pdx.net.uk sshd[383871]: Invalid user builder from 166.1.249.253 port 53168
...
show less
2026-10-26T06:24:56.299179+00:00 abhweb sshd-session[1675176]: Failed password for invalid user dmdb ...
show more2026-10-26T06:24:56.299179+00:00 abhweb sshd-session[1675176]: Failed password for invalid user dmdba from 166.1.249.253 port 45596 ssh2
2026-10-26T06:26:30.763466+00:00 abhweb sshd-session[1675362]: Invalid user yang from 166.1.249.253 port 39332
2026-10-26T06:26:30.775996+00:00 abhweb sshd-session[1675362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.1.249.253
2026-10-26T06:26:32.462057+00:00 abhweb sshd-session[1675362]: Failed password for invalid user yang from 166.1.249.253 port 39332 ssh2
2026-10-26T06:28:09.069983+00:00 abhweb sshd-session[1675529]: Invalid user builder from 166.1.249.253 port 50140
...
show less
2026-10-26T06:21:43.678172+00:00 my-vps sshd-session[2874]: User root from 166.1.249.253 not allowed ...
show more2026-10-26T06:21:43.678172+00:00 my-vps sshd-session[2874]: User root from 166.1.249.253 not allowed because not listed in AllowUsers
2026-10-26T06:25:56.447052+00:00 my-vps sshd-session[2890]: Invalid user dmdba from 166.1.249.253 port 48060
...
show less
2026-10-26T07:58:03.669106 chaos.ohost.bg sshd[3810193]: Invalid user temp from 166.1.249.253 port 4 ...
show more2026-10-26T07:58:03.669106 chaos.ohost.bg sshd[3810193]: Invalid user temp from 166.1.249.253 port 43958
2026-10-26T07:59:44.026748 chaos.ohost.bg sshd[3873993]: Invalid user gg from 166.1.249.253 port 57438
2026-10-26T08:06:10.588499 chaos.ohost.bg sshd[4137982]: Invalid user pakchoi from 166.1.249.253 port 49814
2026-10-26T08:07:42.027875 chaos.ohost.bg sshd[4194019]: Invalid user opc from 166.1.249.253 port 51718
2026-10-26T08:09:10.244554 chaos.ohost.bg sshd[57211]: Invalid user newuser from 166.1.249.253 port 48454
...
show less
2026-10-25T23:59:06.428902-06:00 setebos sshd[141540]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-25T23:59:06.428902-06:00 setebos sshd[141540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.1.249.253
2026-10-25T23:59:06.431681-06:00 setebos sshd[141540]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.1.249.253 user=temp
2026-10-25T23:59:09.143710-06:00 setebos sshd[141540]: Failed password for invalid user temp from 166.1.249.253 port 40592 ssh2
...
show less
Brute-Force
SSH
Anonymous
Oct 26 05:39:52 flow-dus sshd[3065356]: Invalid user pakchoi from 166.1.249.253 port 44150
Oct 26 05 ...
show moreOct 26 05:39:52 flow-dus sshd[3065356]: Invalid user pakchoi from 166.1.249.253 port 44150
Oct 26 05:42:57 flow-dus sshd[3065403]: Invalid user curl from 166.1.249.253 port 51062
Oct 26 05:46:04 flow-dus sshd[3065447]: Invalid user temp from 166.1.249.253 port 59464
...
show less
2026-10-26T06:39:08.788676+01:00 lw-dedi-hdz-10g2480-ams sshd-session[612522]: Invalid user pakchoi ...
show more2026-10-26T06:39:08.788676+01:00 lw-dedi-hdz-10g2480-ams sshd-session[612522]: Invalid user pakchoi from 166.1.249.253 port 48174
2026-10-26T06:42:19.906299+01:00 lw-dedi-hdz-10g2480-ams sshd-session[613073]: Invalid user curl from 166.1.249.253 port 42070
2026-10-26T06:45:23.917580+01:00 lw-dedi-hdz-10g2480-ams sshd-session[613596]: Invalid user temp from 166.1.249.253 port 46932
...
show less
2026-10-26T14:39:45.072151+09:00 iesaba sshd[1969780]: Invalid user pakchoi from 166.1.249.253 port ...
show more2026-10-26T14:39:45.072151+09:00 iesaba sshd[1969780]: Invalid user pakchoi from 166.1.249.253 port 39508
2026-10-26T14:42:50.762801+09:00 iesaba sshd[1969846]: Invalid user curl from 166.1.249.253 port 36814
...
show less
