This IP address has been reported a total of
569
times from
250 distinct
sources.
66.116.242.235 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
SSH brute force attempt. User: user, Pass: [REDACTED]
2026-07-26T20:43:28.525889+01:00 server1 sshd-session[1122566]: Failed password for invalid user fro ...
show more2026-07-26T20:43:28.525889+01:00 server1 sshd-session[1122566]: Failed password for invalid user front from 66.116.242.235 port 32890 ssh2
2026-07-26T20:45:56.313410+01:00 server1 sshd-session[1122597]: Invalid user ubuntu from 66.116.242.235 port 37910
2026-07-26T20:45:56.321490+01:00 server1 sshd-session[1122597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.116.242.235
2026-07-26T20:45:58.112736+01:00 server1 sshd-session[1122597]: Failed password for invalid user ubuntu from 66.116.242.235 port 37910 ssh2
2026-07-26T20:48:33.414901+01:00 server1 sshd-session[1122657]: Invalid user speedtest from 66.116.242.235 port 56112
...
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-07-26T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-07-26T21:07:01+0200. Last: 2026-07-26T21:07:01+0200.
Samples:
- 2026-07-26 00:37:06,559 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 66.116.242.235
show less
Web App Attack
Anonymous
SSH brute force attempt. User: lyt, Pass: [REDACTED]
2026-07-26T18:29:48.477652cowgrassland sshd[3375141]: Disconnected from authenticating user root 66. ...
show more2026-07-26T18:29:48.477652cowgrassland sshd[3375141]: Disconnected from authenticating user root 66.116.242.235 port 41270 [preauth]
2026-07-26T18:35:48.272449cowgrassland sshd[3382272]: Disconnected from authenticating user root 66.116.242.235 port 59742 [preauth]
2026-07-26T18:38:27.218524cowgrassland sshd[3383766]: Disconnected from authenticating user root 66.116.242.235 port 33016 [preauth]
2026-07-26T18:40:58.530990cowgrassland sshd[3385726]: Invalid user mysql2 from 66.116.242.235 port 42312
show less
2026-07-26T19:28:40.444400+02:00 helmgartner sshd[1185122]: Invalid user mike from 66.116.242.235 po ...
show more2026-07-26T19:28:40.444400+02:00 helmgartner sshd[1185122]: Invalid user mike from 66.116.242.235 port 45576
2026-07-26T19:31:03.277469+02:00 helmgartner sshd[1185398]: User root from 66.116.242.235 not allowed because not listed in AllowUsers
2026-07-26T19:33:27.576685+02:00 helmgartner sshd[1185654]: User root from 66.116.242.235 not allowed because not listed in AllowUsers
...
show less
2026-07-26T16:20:35.910885+00:00 storage.andrewa.co.uk sshd-session[1047749]: Invalid user botuser f ...
show more2026-07-26T16:20:35.910885+00:00 storage.andrewa.co.uk sshd-session[1047749]: Invalid user botuser from 66.116.242.235 port 33126
2026-07-26T16:25:16.837364+00:00 storage.andrewa.co.uk sshd-session[1053951]: Invalid user pal from 66.116.242.235 port 33414
2026-07-26T16:30:27.645708+00:00 storage.andrewa.co.uk sshd-session[1060693]: Invalid user develop from 66.116.242.235 port 55958
...
show less
Brute-Force
SSH
Showing 1 to
15
of 569 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩