This IP address has been reported a total of
61
times from
32 distinct
sources.
116.66.214.191 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
Anonymous
2026-07-23T11:36:39.604742+02:00 arm-fr sshd[1350160]: Invalid user user from 116.66.214.191 port 41 ...
show more2026-07-23T11:36:39.604742+02:00 arm-fr sshd[1350160]: Invalid user user from 116.66.214.191 port 41400
2026-07-23T11:36:41.129101+02:00 arm-fr sshd[1350162]: Invalid user user from 116.66.214.191 port 41424
2026-07-23T11:36:42.178960+02:00 arm-fr sshd[1350165]: Invalid user user from 116.66.214.191 port 41430
...
show less
2026-07-23T02:20:30.485402 h111-108.rackhostvps.com sshd-session[568235]: Failed password for root f ...
show more2026-07-23T02:20:30.485402 h111-108.rackhostvps.com sshd-session[568235]: Failed password for root from 116.66.214.191 port 49342 ssh2
2026-07-23T02:20:32.157268 h111-108.rackhostvps.com sshd-session[568255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.66.214.191 user=root
2026-07-23T02:20:34.669190 h111-108.rackhostvps.com sshd-session[568255]: Failed password for root from 116.66.214.191 port 49368 ssh2
...
show less
2026-07-22T19:35:06.194792+02:00 saltoalvacio.com sshd-session[41256]: Invalid user user from 116.66 ...
show more2026-07-22T19:35:06.194792+02:00 saltoalvacio.com sshd-session[41256]: Invalid user user from 116.66.214.191 port 52132
2026-07-22T19:35:07.158352+02:00 saltoalvacio.com sshd-session[41260]: Invalid user user from 116.66.214.191 port 48318
2026-07-22T19:35:08.199982+02:00 saltoalvacio.com sshd-session[41262]: Invalid user user from 116.66.214.191 port 48326
2026-07-22T19:35:09.145131+02:00 saltoalvacio.com sshd-session[41264]: Invalid user user from 116.66.214.191 port 48328
2026-07-22T19:35:10.061446+02:00 saltoalvacio.com sshd-session[41266]: Invalid user user from 116.66.214.191 port 48340
...
show less
2026-07-22T19:15:49.018644+02:00 jabber-host01.talk.srvfarm.net sshd[116080]: Connection closed by a ...
show more2026-07-22T19:15:49.018644+02:00 jabber-host01.talk.srvfarm.net sshd[116080]: Connection closed by authenticating user root 116.66.214.191 port 52956 [preauth]
2026-07-22T19:15:50.238001+02:00 jabber-host01.talk.srvfarm.net sshd[116082]: Connection closed by authenticating user root 116.66.214.191 port 52960 [preauth]
2026-07-22T19:15:51.447316+02:00 jabber-host01.talk.srvfarm.net sshd[116085]: Connection closed by authenticating user root 116.66.214.191 port 52968 [preauth]
2026-07-22T19:15:52.655526+02:00 jabber-host01.talk.srvfarm.net sshd[116088]: Connection closed by authenticating user root 116.66.214.191 port 52970 [preauth]
2026-07-22T19:15:53.871409+02:00 jabber-host01.talk.srvfarm.net sshd[116090]: Connection closed by authenticating user root 116.66.214.191 port 52982 [preauth]
show less
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (7 events in 5 ...
show moreAuto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (7 events in 5min) at 2026-07-22 16:41
show less
Jul 22 11:35:47 dev sshd[2086901]: Failed password for root from 116.66.214.191 port 52998 ssh2
Jul ...
show moreJul 22 11:35:47 dev sshd[2086901]: Failed password for root from 116.66.214.191 port 52998 ssh2
Jul 22 11:35:50 dev sshd[2086903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.66.214.191 user=root
Jul 22 11:35:52 dev sshd[2086903]: Failed password for root from 116.66.214.191 port 42602 ssh2
Jul 22 11:35:56 dev sshd[2086905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.66.214.191 user=root
Jul 22 11:35:58 dev sshd[2086905]: Failed password for root from 116.66.214.191 port 42618 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 61 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩