This IP address has been reported a total of
39
times from
37 distinct
sources.
183.166.94.212 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
United States of America
with 9
reports;
France
with 6
reports.
The most common categories in these recent reports were:
Brute-Force
36
times;
SSH
35
times;
Port Scan
4
times;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-14T18:08:33.664125+02:00 serengeti sshd-session[1837688]: Failed password for root from 183. ...
show more2026-10-14T18:08:33.664125+02:00 serengeti sshd-session[1837688]: Failed password for root from 183.166.94.212 port 47458 ssh2
2026-10-14T18:08:37.141604+02:00 serengeti sshd-session[1837690]: Failed password for root from 183.166.94.212 port 56772 ssh2
2026-10-14T18:08:40.072438+02:00 serengeti sshd-session[1837694]: Failed password for root from 183.166.94.212 port 38078 ssh2
2026-10-14T18:08:43.245016+02:00 serengeti sshd-session[1837696]: Failed password for root from 183.166.94.212 port 40516 ssh2
2026-10-14T18:08:45.889922+02:00 serengeti sshd-session[1837705]: Failed password for root from 183.166.94.212 port 53882 ssh2
...
show less
2026-10-14T12:03:28.327179+00:00 relay-atl sshd-session[438266]: Connection closed by authenticating ...
show more2026-10-14T12:03:28.327179+00:00 relay-atl sshd-session[438266]: Connection closed by authenticating user root 183.166.94.212 port 40802 [preauth]
2026-10-14T12:03:31.890288+00:00 relay-atl sshd-session[438659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.166.94.212 user=root
2026-10-14T12:03:33.139581+00:00 relay-atl sshd-session[438659]: Failed password for root from 183.166.94.212 port 4003 ssh2
...
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-10-13. Risk score: 30/100.
show less
This IP address carried out 4 SSH credential attack (attempts) on 12-10-2026. For more information o ...
show moreThis IP address carried out 4 SSH credential attack (attempts) on 12-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-13T14:05:44.764891+08:00 us21.cdn.420422709.xyz sshd-session[54862]: Failed password for roo ...
show more2026-10-13T14:05:44.764891+08:00 us21.cdn.420422709.xyz sshd-session[54862]: Failed password for root from 183.166.94.212 port 57280 ssh2
2026-10-13T14:05:46.624725+08:00 us21.cdn.420422709.xyz sshd-session[54869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.166.94.212 user=root
2026-10-13T14:05:48.156528+08:00 us21.cdn.420422709.xyz sshd-session[54869]: Failed password for root from 183.166.94.212 port 38322 ssh2
...
show less
2026-10-13T07:49:50.160455+02:00 ns3006402 sshd[139020]: Failed password for root from 183.166.94.21 ...
show more2026-10-13T07:49:50.160455+02:00 ns3006402 sshd[139020]: Failed password for root from 183.166.94.212 port 26937 ssh2
2026-10-13T07:49:58.462256+02:00 ns3006402 sshd[139051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.166.94.212 user=root
2026-10-13T07:50:00.813157+02:00 ns3006402 sshd[139051]: Failed password for root from 183.166.94.212 port 10459 ssh2
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 16/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 16/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 13 (13 bad password, 0 invalid user) | 0 success | 27 total SSH log events | seen on 1 sensor(s)
Origin: China (CN) | AS4134 Chinanet | 183.166.94.0/24
First seen: 2026-10-12 16:06:30 UTC | Last seen: 2026-10-12 16:07:47 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
