This IP address has been reported a total of
24
times from
22 distinct
sources.
116.181.16.142 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-10T08:16:30.627452+08:00 *hostname* sshd-session[91963]: Invalid user ftpuser from 116.181.1 ...
show more2026-07-10T08:16:30.627452+08:00 *hostname* sshd-session[91963]: Invalid user ftpuser from 116.181.16.142 port 15009
2026-07-10T08:17:45.089793+08:00 *hostname* sshd-session[92099]: Connection from 116.181.16.142 port 49166 on 10.66.0.230 port 22 rdomain ""
2026-07-10T08:17:45.359186+08:00 *hostname* sshd-session[92099]: Invalid user dhkim from 116.181.16.142 port 49166
2026-07-10T08:18:56.957913+08:00 *hostname* sshd-session[92253]: Connection from 116.181.16.142 port 29384 on 10.66.0.230 port 22 rdomain ""
2026-07-10T08:18:57.223635+08:00 *hostname* sshd-session[92253]: Invalid user jason from 116.181.16.142 port 29384
show less
Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH
• Client: SSH-2.0 ...
show moreHoneypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH
• Client: SSH-2.0-libssh_0.9.6
show less
SSH
Port Scan
Anonymous
Jul 9 23:10:40 sftp-cognizant-san-jose-1 sshd[1952692]: Invalid user tim from 116.181.16.142 port 2 ...
show moreJul 9 23:10:40 sftp-cognizant-san-jose-1 sshd[1952692]: Invalid user tim from 116.181.16.142 port 27771
Jul 9 23:10:40 sftp-cognizant-san-jose-1 sshd[1952692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.181.16.142
Jul 9 23:10:41 sftp-cognizant-san-jose-1 sshd[1952692]: Failed password for invalid user tim from 116.181.16.142 port 27771 ssh2
...
show less
2026-07-09T21:11:11.451476+02:00 pve-osd-201 sshd[227680]: Failed password for invalid user ubuntu f ...
show more2026-07-09T21:11:11.451476+02:00 pve-osd-201 sshd[227680]: Failed password for invalid user ubuntu from 116.181.16.142 port 38082 ssh2
2026-07-09T21:11:11.765027+02:00 pve-osd-201 sshd[227680]: Disconnected from invalid user ubuntu 116.181.16.142 port 38082 [preauth]
2026-07-09T21:18:13.738398+02:00 pve-osd-201 sshd[228155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.181.16.142 user=root
2026-07-09T21:18:15.947462+02:00 pve-osd-201 sshd[228155]: Failed password for root from 116.181.16.142 port 36466 ssh2
2026-07-09T21:18:17.733375+02:00 pve-osd-201 sshd[228155]: Disconnected from authenticating user root 116.181.16.142 port 36466 [preauth]
2026-07-09T21:21:14.564271+02:00 pve-osd-201 sshd[228214]: Invalid user tiktok from 116.181.16.142 port 65352
...
show less
(sshd) Failed SSH login from 116.181.16.142 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 116.181.16.142 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 9 09:29:15 14241 sshd[26802]: Invalid user admin from 116.181.16.142 port 8169
Jul 9 09:29:18 14241 sshd[26802]: Failed password for invalid user admin from 116.181.16.142 port 8169 ssh2
Jul 9 09:35:54 14241 sshd[30463]: Invalid user test12345 from 116.181.16.142 port 54182
Jul 9 09:35:56 14241 sshd[30463]: Failed password for invalid user test12345 from 116.181.16.142 port 54182 ssh2
Jul 9 10:02:43 14241 sshd[12494]: Invalid user myuser from 116.181.16.142 port 8067
show less
Jul 9 11:19:01 mx1 sshd[25685]: Failed password for invalid user axway from 116.181.16.142 port 507 ...
show moreJul 9 11:19:01 mx1 sshd[25685]: Failed password for invalid user axway from 116.181.16.142 port 50792 ssh2
Jul 9 11:44:45 mx1 sshd[26557]: Invalid user silvia from 116.181.16.142 port 28166
Jul 9 11:44:45 mx1 sshd[26557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.181.16.142
Jul 9 11:44:47 mx1 sshd[26557]: Failed password for invalid user silvia from 116.181.16.142 port 28166 ssh2
Jul 9 12:02:01 mx1 sshd[27183]: Invalid user laravel from 116.181.16.142 port 6947
...
show less
2026-07-09T11:33:16.160754+02:00 gw-de19-01.guestgw.net sshd[306275]: Connection closed by 116.181.1 ...
show more2026-07-09T11:33:16.160754+02:00 gw-de19-01.guestgw.net sshd[306275]: Connection closed by 116.181.16.142 port 51022 [preauth]
2026-07-09T11:34:58.725251+02:00 gw-de19-01.guestgw.net sshd[306621]: Connection closed by 116.181.16.142 port 27176 [preauth]
2026-07-09T11:38:15.868574+02:00 gw-de19-01.guestgw.net sshd[307750]: Invalid user will from 116.181.16.142 port 38308
2026-07-09T11:38:16.248111+02:00 gw-de19-01.guestgw.net sshd[307750]: Disconnected from invalid user will 116.181.16.142 port 38308 [preauth]
2026-07-09T11:43:38.265605+02:00 gw-de19-01.guestgw.net sshd[309358]: Connection closed by 116.181.16.142 port 61882 [preauth]
show less
2026-07-09T08:13:50.683115+00:00 vps2 sshd[2967746]: Disconnected from authenticating user root 116. ...
show more2026-07-09T08:13:50.683115+00:00 vps2 sshd[2967746]: Disconnected from authenticating user root 116.181.16.142 port 57030 [preauth]
2026-07-09T08:17:11.527022+00:00 vps2 sshd[2967964]: Invalid user vpnuser from 116.181.16.142 port 47271
2026-07-09T08:17:11.729469+00:00 vps2 sshd[2967964]: Disconnected from invalid user vpnuser 116.181.16.142 port 47271 [preauth]
...
show less
Jul 9 08:25:10 dalia sshd[2750261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreJul 9 08:25:10 dalia sshd[2750261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.181.16.142
Jul 9 08:25:11 dalia sshd[2750261]: Failed password for invalid user test from 116.181.16.142 port 56401 ssh2
...
show less
Jul 9 07:38:29 pinkypie sshd[1706623]: Invalid user admin from 116.181.16.142 port 39007
Jul 9 07: ...
show moreJul 9 07:38:29 pinkypie sshd[1706623]: Invalid user admin from 116.181.16.142 port 39007
Jul 9 07:38:29 pinkypie sshd[1706623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.181.16.142
Jul 9 07:38:32 pinkypie sshd[1706623]: Failed password for invalid user admin from 116.181.16.142 port 39007 ssh2
...
show less
SSH Brute force: 4 attempts were recorded from 116.181.16.142
2026-07-09T04:43:34+02:00 Invalid user ...
show moreSSH Brute force: 4 attempts were recorded from 116.181.16.142
2026-07-09T04:43:34+02:00 Invalid user admin from 116.181.16.142 port 42761
2026-07-09T04:51:57+02:00 Disconnected from authenticating user root 116.181.16.142 port 61889 [preauth]
2026-07-09T05:02:45+02:00 Invalid user oracle from 116.181.16.142 port 12201
2026-07-09T05:13:18+02:00 Invalid user zh from 116.181.16.142 port 15330
show less
Brute-Force
SSH
Anonymous
2026-07-09T00:04:46.927920 orion-manager sshd[2504610]: Invalid user dev from 116.181.16.142 port 24 ...
show more2026-07-09T00:04:46.927920 orion-manager sshd[2504610]: Invalid user dev from 116.181.16.142 port 24845
2026-07-09T00:28:21.587437 orion-manager sshd[2657043]: Invalid user user from 116.181.16.142 port 49368
2026-07-09T00:30:31.569041 orion-manager sshd[2670795]: Invalid user student from 116.181.16.142 port 54307
2026-07-09T00:38:12.259879 orion-manager sshd[2720594]: Invalid user admin from 116.181.16.142 port 4578
2026-07-09T00:45:43.641514 orion-manager sshd[2769134]: Invalid user ts3 from 116.181.16.142 port 10876
...
show less
(sshd) Failed SSH login from 116.181.16.142 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 116.181.16.142 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 8 18:10:27 14512 sshd[16214]: Invalid user james from 116.181.16.142 port 12201
Jul 8 18:10:28 14512 sshd[16214]: Failed password for invalid user james from 116.181.16.142 port 12201 ssh2
Jul 8 18:23:02 14512 sshd[22861]: Invalid user vf from 116.181.16.142 port 47477
Jul 8 18:23:05 14512 sshd[22861]: Failed password for invalid user vf from 116.181.16.142 port 47477 ssh2
Jul 8 18:24:34 14512 sshd[23813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.181.16.142 user=root
show less
Brute-Force
SSH
Showing 1 to
15
of 24 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩