This IP address has been reported a total of
19
times from
19 distinct
sources.
166.0.132.222 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Fail2ban (sshd jail): 2 failed SSH attempts from 166.0.132.222.
Multiple SSH login attempts from 166.0.132.222 targeting user(s): pakchoi,root | Server Managed by F ...
show moreMultiple SSH login attempts from 166.0.132.222 targeting user(s): pakchoi,root | Server Managed by Focusnic
show less
Oct 25 21:38:13 vmd80284 sshd[683911]: Invalid user temp from 166.0.132.222 port 55072
Oct 25 21:45: ...
show moreOct 25 21:38:13 vmd80284 sshd[683911]: Invalid user temp from 166.0.132.222 port 55072
Oct 25 21:45:29 vmd80284 sshd[684778]: Invalid user hdfs from 166.0.132.222 port 38460
Oct 25 21:47:01 vmd80284 sshd[684941]: Invalid user pakchoi from 166.0.132.222 port 37634
...
show less
Brute-Force
SSH
Anonymous
Oct 25 21:43:23 gateway1-old sshd[2825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreOct 25 21:43:23 gateway1-old sshd[2825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.0.132.222
Oct 25 21:43:26 gateway1-old sshd[2825]: Failed password for invalid user temp from 166.0.132.222 port 53478 ssh2
Oct 25 21:46:11 gateway1-old sshd[2916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.0.132.222
show less
2026-10-25T20:42:43.332245Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 166.0.132.222:4418 ...
show more2026-10-25T20:42:43.332245Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 166.0.132.222:44180 (158.69.22.11:2222) [session: 61e274191a72]
2026-10-25T20:46:06.162174Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 166.0.132.222:54974 (158.69.22.11:2222) [session: e757a189d964]
...
show less
2026-10-25T22:39:06.293047+02:00 * sshd[3122881]: pam_unix(sshd:auth): authentication failure; logna ...
show more2026-10-25T22:39:06.293047+02:00 * sshd[3122881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.0.132.222
2026-10-25T22:39:08.642050+02:00 * sshd[3122881]: Failed password for invalid user temp from 166.0.132.222 port 53220 ssh2
2026-10-25T22:39:10.807050+02:00 * sshd[3122881]: Disconnected from invalid user temp 166.0.132.222 port 53220 [preauth]
2026-10-25T22:45:36.780117+02:00 * sshd[3124860]: Invalid user hdfs from 166.0.132.222 port 60436
...
show less
Oct 25 21:13:37 NODE-1 sshd[2444299]: Disconnected from authenticating user root 166.0.132.222 port ...
show moreOct 25 21:13:37 NODE-1 sshd[2444299]: Disconnected from authenticating user root 166.0.132.222 port 38946 [preauth]
Oct 25 21:15:05 NODE-1 sshd[2467440]: Disconnected from authenticating user root 166.0.132.222 port 56736 [preauth]
Oct 25 21:16:32 NODE-1 sshd[2488710]: Disconnected from authenticating user root 166.0.132.222 port 42666 [preauth]
Oct 25 21:17:59 NODE-1 sshd[2509996]: Invalid user temp from 166.0.132.222 port 46744
Oct 25 21:17:59 NODE-1 sshd[2509996]: Disconnected from invalid user temp 166.0.132.222 port 46744 [preauth]
...
show less
SSH Brute force: 3 attempts were recorded from 166.0.132.222
2026-10-25T20:45:42+0100 Connection clo ...
show moreSSH Brute force: 3 attempts were recorded from 166.0.132.222
2026-10-25T20:45:42+0100 Connection closed by authenticating user root 166.0.132.222 [preauth]
2026-10-25T20:51:46+0100 Invalid user pakchoi from 166.0.132.222
2026-10-25T20:53:17+0100 Connection closed by authenticating user root 166.0.132.222 [preauth]
show less
Log Entry: 2026-10-25T19:52:18909+00:00 abuse sshd[1075883]: Invalid user pakchoi from 166.0.132.22 ...
show moreLog Entry: 2026-10-25T19:52:18909+00:00 abuse sshd[1075883]: Invalid user pakchoi from 166.0.132.222 port 55130
Log Entry: 2026-10-25T19:55:21371+00:00 abuse sshd[1076163]: Invalid user curl from 166.0.132.222 port 51168
Log Entry: 2026-10-25T19:56:46381+00:00 abuse sshd[1076318]: Invalid user temp from 166.0.132.222 port 47532
Log Entry: ...
show less
Oct 25 20:52:23 h3buntu sshd[4144620]: Invalid user pakchoi from 166.0.132.222 port 58922
Oct 25 20: ...
show moreOct 25 20:52:23 h3buntu sshd[4144620]: Invalid user pakchoi from 166.0.132.222 port 58922
Oct 25 20:52:23 h3buntu sshd[4144620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.0.132.222
Oct 25 20:52:25 h3buntu sshd[4144620]: Failed password for invalid user pakchoi from 166.0.132.222 port 58922 ssh2
...
show less
Brute-Force
SSH
Hacking
Showing 1 to
15
of 19 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩