This IP address has been reported a total of
558
times from
272 distinct
sources.
202.29.224.166 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-06-25T04:33:30.405553+02:00 host.nilsbossaller.de sshd[2151640]: pam_unix(sshd:auth): authentic ...
show more2026-06-25T04:33:30.405553+02:00 host.nilsbossaller.de sshd[2151640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.224.166 user=root
2026-06-25T04:33:32.465518+02:00 host.nilsbossaller.de sshd[2151640]: Failed password for root from 202.29.224.166 port 56384 ssh2
...
show less
{"event":{"DateTime":"2026-06-22T23:18:36Z","RemoteAddr":"202.29.224.166:51738","Protocol":"SSH","Co ...
show more{"event":{"DateTime":"2026-06-22T23:18:36Z","RemoteAddr":"202.29.224.166:51738","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"dac04ecb-11d8-490d-a14b-9bc267bcea5e","Environ":"","User":"root","Password":"deam0nhome911@#","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"202.29.224.166","SourcePort":"51738","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-06-23T00:13:37Z","RemoteAddr":"202.29.224.166:50760","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"3e64bec6-8a6d-4947-b9ad-94caaa1155f5","Environ":"","User":"root","Password":"deam0nhome3","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Descriptio
show less
2026-06-24T20:16:05.418402+00:00 boron sshd[55390]: Connection closed by authenticating user root 20 ...
show more2026-06-24T20:16:05.418402+00:00 boron sshd[55390]: Connection closed by authenticating user root 202.29.224.166 port 45354 [preauth]
2026-06-24T20:17:32.626673+00:00 boron sshd[55404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.224.166 user=root
2026-06-24T20:17:34.197846+00:00 boron sshd[55404]: Failed password for root from 202.29.224.166 port 54226 ssh2
...
show less
(sshd) Failed SSH login from 202.29.224.166 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Dire ...
show more(sshd) Failed SSH login from 202.29.224.166 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 24 19:43:03 webhosting2 sshd[10867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.224.166 user=root
Jun 24 19:43:05 webhosting2 sshd[10867]: Failed password for root from 202.29.224.166 port 36284 ssh2
Jun 24 20:07:34 webhosting2 sshd[16740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.224.166 user=root
Jun 24 20:07:36 webhosting2 sshd[16740]: Failed password for root from 202.29.224.166 port 40874 ssh2
Jun 24 20:20:39 webhosting2 sshd[19829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.224.166 user=root
show less
2026-06-24T17:51:23.675181+02:00 lufischer04 sshd[2004011]: Invalid user 442hz from 202.29.224.166 p ...
show more2026-06-24T17:51:23.675181+02:00 lufischer04 sshd[2004011]: Invalid user 442hz from 202.29.224.166 port 45252
2026-06-24T19:16:22.292654+02:00 lufischer04 sshd[2101748]: Invalid user 442hz from 202.29.224.166 port 42658
2026-06-24T19:53:21.983312+02:00 lufischer04 sshd[2133976]: Invalid user 442hz from 202.29.224.166 port 39710
2026-06-24T19:57:54.002446+02:00 lufischer04 sshd[2138485]: Invalid user 442hz from 202.29.224.166 port 36130
2026-06-24T20:21:24.700785+02:00 lufischer04 sshd[2163776]: Invalid user 442hz from 202.29.224.166 port 35802
...
show less
2026-06-24T19:57:00.915727+02:00 zrh02-ch-pop.as202427.net sshd[4764]: User root from 202.29.224.166 ...
show more2026-06-24T19:57:00.915727+02:00 zrh02-ch-pop.as202427.net sshd[4764]: User root from 202.29.224.166 not allowed because not listed in AllowUsers
2026-06-24T19:59:33.747928+02:00 zrh02-ch-pop.as202427.net sshd[4906]: User root from 202.29.224.166 not allowed because not listed in AllowUsers
2026-06-24T20:09:34.534463+02:00 zrh02-ch-pop.as202427.net sshd[5490]: User root from 202.29.224.166 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Anonymous
2026-06-24T17:45:30.314039744Z User root from 202.29.224.166 not allowed because not listed in Allow ...
show more2026-06-24T17:45:30.314039744Z User root from 202.29.224.166 not allowed because not listed in AllowUsers
2026-06-24T17:45:30.519785370Z Connection closed by invalid user root 202.29.224.166 port 47766 [preauth]
2026-06-24T17:47:04.559917453Z User root from 202.29.224.166 not allowed because not listed in AllowUsers
...
show less