This IP address has been reported a total of
425
times from
209 distinct
sources.
66.94.124.210 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Feb 4 06:15:14 dadelinux sshd[3566992]: Failed password for invalid user calice from 66.94.124.210 ...
show moreFeb 4 06:15:14 dadelinux sshd[3566992]: Failed password for invalid user calice from 66.94.124.210 port 54046 ssh2
Feb 4 06:23:12 dadelinux sshd[3567331]: Invalid user temp from 66.94.124.210 port 56590
Feb 4 06:23:12 dadelinux sshd[3567331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.94.124.210
Feb 4 06:23:13 dadelinux sshd[3567331]: Failed password for invalid user temp from 66.94.124.210 port 56590 ssh2
Feb 4 06:23:27 dadelinux sshd[3567333]: Invalid user iitkgp from 66.94.124.210 port 59922
show less
Feb 4 05:19:21 h1buntu sshd[261314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreFeb 4 05:19:21 h1buntu sshd[261314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.94.124.210
Feb 4 05:19:23 h1buntu sshd[261314]: Failed password for invalid user server from 66.94.124.210 port 57940 ssh2
Feb 4 05:23:06 h1buntu sshd[261863]: Invalid user ubuntu from 66.94.124.210 port 55176
...
show less
2024-11-15T10:08:21.967784+01:00 hz-vm-web-006 sshd[4059153]: Failed password for invalid user dongc ...
show more2024-11-15T10:08:21.967784+01:00 hz-vm-web-006 sshd[4059153]: Failed password for invalid user dongchenzhi from 66.94.124.210 port 52890 ssh2
2024-11-15T10:08:31.650805+01:00 hz-vm-web-006 sshd[4059159]: Invalid user xueyu from 66.94.124.210 port 54498
2024-11-15T10:08:31.652463+01:00 hz-vm-web-006 sshd[4059159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.94.124.210
2024-11-15T10:08:33.455772+01:00 hz-vm-web-006 sshd[4059159]: Failed password for invalid user xueyu from 66.94.124.210 port 54498 ssh2
2024-11-15T10:08:43.815254+01:00 hz-vm-web-006 sshd[4059210]: Invalid user ikun_xjx from 66.94.124.210 port 56122
show less
Brute-Force
SSH
Anonymous
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fai ...
show moreMessage meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2024-09-10 time=15:39:48 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1726000788251983143 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=66.94.124.210 srccountry="United States" user="testing-gp" group="N/A" dst_host="N/A" reason="sslvpn_login_permission_denied" msg="SSL user failed to logged i
show less
msg=SSL user failed to logged in logdesc=SSL VPN login fail user=jgraham remip=66.94.124.210 group=N ...
show moremsg=SSL user failed to logged in logdesc=SSL VPN login fail user=jgraham remip=66.94.124.210 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_permission_denied
show less
Hacking
Brute-Force
Anonymous
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Def ...
show moreAutomatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx
show less
Web App Attack
Anonymous
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Def ...
show moreAutomatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx
show less
Web App Attack
Anonymous
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Def ...
show moreAutomatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx
show less