This IP address has been reported a total of
45
times from
40 distinct
sources.
14.116.221.2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
14.116.221.2 (CN/China/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; P ...
show more14.116.221.2 (CN/China/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 9 14:48:45 sshd[56392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.221.2 user=[USERNAME]
show less
2026-07-07T15:13:32.920834-03:00 vps sshd[954865]: Disconnecting authenticating user root 14.116.221 ...
show more2026-07-07T15:13:32.920834-03:00 vps sshd[954865]: Disconnecting authenticating user root 14.116.221.2 port 48698: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-07-07T15:13:34.794955-03:00 vps sshd[954900]: Invalid user test from 14.116.221.2 port 41196
2026-07-07T15:13:34.798058-03:00 vps sshd[954900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.221.2
2026-07-07T15:13:37.059263-03:00 vps sshd[954900]: Failed password for invalid user test from 14.116.221.2 port 41196 ssh2
2026-07-07T15:13:39.624009-03:00 vps sshd[954900]: Failed password for invalid user test from 14.116.221.2 port 41196 ssh2
...
show less
2026-07-07T20:12:27.352142+02:00 vmi3368549 sshd[600479]: Failed password for root from 14.116.221.2 ...
show more2026-07-07T20:12:27.352142+02:00 vmi3368549 sshd[600479]: Failed password for root from 14.116.221.2 port 33930 ssh2
2026-07-07T20:12:30.613187+02:00 vmi3368549 sshd[600479]: Failed password for root from 14.116.221.2 port 33930 ssh2
2026-07-07T20:12:33.599946+02:00 vmi3368549 sshd[600479]: Failed password for root from 14.116.221.2 port 33930 ssh2
2026-07-07T20:12:37.152543+02:00 vmi3368549 sshd[600479]: Failed password for root from 14.116.221.2 port 33930 ssh2
2026-07-07T20:12:40.166585+02:00 vmi3368549 sshd[600479]: Failed password for root from 14.116.221.2 port 33930 ssh2
...
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-07-07. Risk score: 30/100.
show less
2026-07-05T19:53:48.100022+00:00 ws1.trivox.sh sshd-session[199108]: Failed password for root from 1 ...
show more2026-07-05T19:53:48.100022+00:00 ws1.trivox.sh sshd-session[199108]: Failed password for root from 14.116.221.2 port 39366 ssh2
2026-07-05T19:53:51.239787+00:00 ws1.trivox.sh sshd-session[199108]: Failed password for root from 14.116.221.2 port 39366 ssh2
2026-07-05T19:53:53.092998+00:00 ws1.trivox.sh sshd-session[199108]: Failed password for root from 14.116.221.2 port 39366 ssh2
2026-07-05T19:53:55.139723+00:00 ws1.trivox.sh sshd-session[199108]: Failed password for root from 14.116.221.2 port 39366 ssh2
...
show less
US902-DEDIROCK-LA: SSH Brute Force from 14.116.221.2 at 2026-07-05 21:02:19 IST
Brute-Force
SSH
Anonymous
Jul 4 10:19:34 PAR806216 sshd[1611865]: Failed password for root from 14.116.221.2 port 56128 ssh2
...
show moreJul 4 10:19:34 PAR806216 sshd[1611865]: Failed password for root from 14.116.221.2 port 56128 ssh2
Jul 4 10:19:38 PAR806216 sshd[1611865]: Failed password for root from 14.116.221.2 port 56128 ssh2
Jul 4 10:19:41 PAR806216 sshd[1611865]: Failed password for root from 14.116.221.2 port 56128 ssh2
...
show less