166.1.237.197 is an IP address with 2 abuse reports from 2 distinct reporters, submitted between 10/22/2026 and 10/22/2026. The AbuseTrack community rates it as Medium risk, with a score of 48/100. The most frequently reported threat categories are Brute Force.
Back to the database
ip
166.1.237.197
Medium · 482 reports
United StatesInstant verdict
SUSPICIOUS
48/100
Community risk score
2
Reports
2
Reporters
10/22/2026
First seen
10/22/2026
Last seen
Threat type
Is this your address and is it listed wrongly? Request removal →
Intelligence
Country
United States (US)
WHOIS (RDAP)
- Country
- United States
- Location
- Kansas City, Missouri
Report history (2)
Brute Force10/22/2026, 09:47 PM · Enjyn Gruppe
fail2ban: SSH (sshd) brute-force — 3 failed attempts (jail: sshd)
Brute Force10/22/2026, 06:09 PM · NextServ Group
2026-10-22T18:08:42.491054+00:00 adguard sshd-session[33798]: Invalid user user from 166.1.237.197 port 44332 2026-10-22T18:08:42.492552+00:00 adguard sshd-session[33798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.1.237.197 2026-10-22T18:08:44.687415+00:00 adguard sshd-session[33798]: Failed password for invalid user user from 166.1.237.197 port 44332 ssh2 2026-10-22T18:09:16.239460+00:00 adguard sshd-session[33803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.1.237.197 user=root 2026-10-22T18:09:18.240158+00:00 adguard sshd-session[33803]: Failed password for root from 166.1.237.197 port 38170 ssh2