This IP address has been reported a total of
949
times from
444 distinct
sources.
1.1.220.166 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-14 16:33:42,953 quad proftpd[1363095] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (node-iau.pool-1- ...
show more2026-06-14 16:33:42,953 quad proftpd[1363095] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (node-iau.pool-1-1.dynamic.nt-isp.net[1.1.220.166]): USER root: no such user found from node-iau.pool-1-1.dynamic.nt-isp.net [1.1.220.166] to 2.56.97.107:22
show less
2026-06-14T13:32:03.600130-03:00 salada-de-fruta sshd[2883807]: Connection closed by authenticating ...
show more2026-06-14T13:32:03.600130-03:00 salada-de-fruta sshd[2883807]: Connection closed by authenticating user root 1.1.220.166 port 55206 [preauth]
...
show less
2026-06-14T17:00:29.723409+02:00 vps sshd[12063]: Failed password for root from 1.1.220.166 port 333 ...
show more2026-06-14T17:00:29.723409+02:00 vps sshd[12063]: Failed password for root from 1.1.220.166 port 33356 ssh2
2026-06-14T17:01:57.443826+02:00 vps sshd[12091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.1.220.166 user=root
2026-06-14T17:01:59.082139+02:00 vps sshd[12091]: Failed password for root from 1.1.220.166 port 39448 ssh2
...
show less
systemd timer sync; fail2ban jail=sshd host=tk ip=1.1.220.166; evidence=fail2ban log NOTICE Ban even ...
show moresystemd timer sync; fail2ban jail=sshd host=tk ip=1.1.220.166; evidence=fail2ban log NOTICE Ban event
show less
2026-06-14T10:37:04.913634+02:00 thor sshd-session[101580]: pam_unix(sshd:auth): authentication fail ...
show more2026-06-14T10:37:04.913634+02:00 thor sshd-session[101580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.1.220.166
2026-06-14T10:37:07.363558+02:00 thor sshd-session[101580]: Failed password for invalid user tomcat from 1.1.220.166 port 41220 ssh2
2026-06-14T10:37:07.995225+02:00 thor sshd-session[101580]: Connection closed by invalid user tomcat 1.1.220.166 port 41220 [preauth]
...
show less
2026-06-14T09:39:42.828189+03:00 kotia sshd[153587]: Invalid user walrus from 1.1.220.166 port 49932 ...
show more2026-06-14T09:39:42.828189+03:00 kotia sshd[153587]: Invalid user walrus from 1.1.220.166 port 49932
...
show less
Brute-Force
SSH
Showing 1 to
15
of 949 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩