Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 1 SSH credential attack (attempts) on 08-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
(sshd) Failed SSH login from 222.166.85.67 (HK/Hong Kong/cm222-166-85-67.hkcable.com.hk): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2026-11-09T13:50:34.509377+11:00 arcade-james sshd-session[182739]: pam_unix(sshd:a ...
show more(sshd) Failed SSH login from 222.166.85.67 (HK/Hong Kong/cm222-166-85-67.hkcable.com.hk): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2026-11-09T13:50:34.509377+11:00 arcade-james sshd-session[182739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.166.85.67 user=root
2026-11-09T13:50:36.407169+11:00 arcade-james sshd-session[182739]: Failed password for invalid user root from 222.166.85.67 port 49425 ssh2
2026-11-09T13:50:39.187740+11:00 arcade-james sshd-session[182739]: Failed password for invalid user root from 222.166.85.67 port 49425 ssh2
2026-11-09T13:50:42.019335+11:00 arcade-james sshd-session[182739]: Failed password for invalid user root from 222.166.85.67 port 49425 ssh2
2026-11-09T13:50:44.580453+11:00 arcade-james sshd-session[182739]: Failed password for invalid user root from 222.166.85.67 port 49425 ssh2
show less
Logged in to a fake SSH service and ran 9 command(s) starting at 2026-11-08 19:09:49 UTC. Examples: /ip cloud print ; ifconfig ; uname -a. Full TCP handshake completed; no real service was exposed.
2026-11-08T09:52:32.716764-07:00 node1.us sshd-session[3614305]: Failed password for root from 222.166.85.67 port 58728 ssh2
2026-11-08T09:52:35.305689-07:00 node1.us sshd-session[3614305]: Failed password for root from 222.166.85.67 port 58728 ssh2
...
show more2026-11-08T09:52:32.716764-07:00 node1.us sshd-session[3614305]: Failed password for root from 222.166.85.67 port 58728 ssh2
2026-11-08T09:52:35.305689-07:00 node1.us sshd-session[3614305]: Failed password for root from 222.166.85.67 port 58728 ssh2
2026-11-08T09:52:38.087675-07:00 node1.us sshd-session[3614305]: Failed password for root from 222.166.85.67 port 58728 ssh2
...
show less
2026-11-08T16:47:32.019501+00:00 bastionez sshd-session[7762]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 53771 ssh2 [preauth]
2026-11-08T16:47:35.266955+00:00 bastionez sshd-session[7764]: error: maximum authent ...
show more2026-11-08T16:47:32.019501+00:00 bastionez sshd-session[7762]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 53771 ssh2 [preauth]
2026-11-08T16:47:35.266955+00:00 bastionez sshd-session[7764]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 53839 ssh2 [preauth]
...
show less
2026-11-08T07:28:56.042749+00:00 fra-mc-1 sshd[2897520]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 37488 ssh2 [preauth]
2026-11-08T07:28:59.053205+00:00 fra-mc-1 sshd[2897918]: error: maximum authentication atte ...
show more2026-11-08T07:28:56.042749+00:00 fra-mc-1 sshd[2897520]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 37488 ssh2 [preauth]
2026-11-08T07:28:59.053205+00:00 fra-mc-1 sshd[2897918]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 37575 ssh2 [preauth]
2026-11-08T07:29:03.624440+00:00 fra-mc-1 sshd[2898338]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 37637 ssh2 [preauth]
2026-11-08T07:29:07.973038+00:00 fra-mc-1 sshd[2898998]: Invalid user admin from 222.166.85.67 port 37774
2026-11-08T07:29:09.222573+00:00 fra-mc-1 sshd[2898998]: error: maximum authentication attempts exceeded for invalid user admin from 222.166.85.67 port 37774 ssh2 [preauth]
...
show less
2026-11-08T07:01:52.576064+00:00 mc sshd[755648]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 40281 ssh2 [preauth]
2026-11-08T07:01:53.775913+00:00 mc sshd[756636]: error: maximum authentication attempts exceeded ...
show more2026-11-08T07:01:52.576064+00:00 mc sshd[755648]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 40281 ssh2 [preauth]
2026-11-08T07:01:53.775913+00:00 mc sshd[756636]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 40307 ssh2 [preauth]
2026-11-08T07:01:54.801129+00:00 mc sshd[756983]: error: maximum authentication attempts exceeded for root from 222.166.85.67 port 40331 ssh2 [preauth]
2026-11-08T07:01:56.659551+00:00 mc sshd[757099]: Invalid user admin from 222.166.85.67 port 40382
2026-11-08T07:01:56.933144+00:00 mc sshd[757099]: error: maximum authentication attempts exceeded for invalid user admin from 222.166.85.67 port 40382 ssh2 [preauth]
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
