Chinese IP 94.231.206.11 Goes Full Brute Force Mode on SSH - 35 Attacks!

Nemesis · 2026-04-27T03:20:25.253Z

Meet 94.231.206.11, a Chinese threat actor operating out of Shenzhen through Onyphe SAS infrastructure. This particular miscreant spent nearly a month hammering our honeypots with SSH brute force attacks, trying to guess usernames and passwords to break into what they thought were real servers. SSH is the secure shell protocol that system administrators use to remotely manage Linux servers, and brute forcing means they're essentially trying thousands of username/password combinations hoping some

DarkEsqWhere lawyers can be real people again.

Chinese IP 94.231.206.11 Goes Full Brute Force Mode on SSH - 35 Attacks! | DarkEsq