This IP address has been reported a total of
129
times from
91 distinct
sources.
113.16.199.63 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2432278 with IP 3442166 for SSH brute-force attack by source 3474503 via ssh-honeypot/0.2.0+h ...
show moreReport 2432278 with IP 3442166 for SSH brute-force attack by source 3474503 via ssh-honeypot/0.2.0+http
show less
2026-06-05T02:10:38.457999+02:00 amqp-host01.amqp.srvfarm.net sshd[177951]: Invalid user vision from ...
show more2026-06-05T02:10:38.457999+02:00 amqp-host01.amqp.srvfarm.net sshd[177951]: Invalid user vision from 113.16.199.63 port 36036
2026-06-05T02:10:38.677002+02:00 amqp-host01.amqp.srvfarm.net sshd[177951]: Disconnected from invalid user vision 113.16.199.63 port 36036 [preauth]
2026-06-05T02:19:04.901734+02:00 amqp-host01.amqp.srvfarm.net sshd[178477]: Invalid user jia from 113.16.199.63 port 33366
2026-06-05T02:19:05.128919+02:00 amqp-host01.amqp.srvfarm.net sshd[178477]: Disconnected from invalid user jia 113.16.199.63 port 33366 [preauth]
2026-06-05T02:20:43.068322+02:00 amqp-host01.amqp.srvfarm.net sshd[178558]: Invalid user user from 113.16.199.63 port 49772
show less
2026-06-04T19:05:47.436208-05:00 nocix-dedi-bf2421-mci sshd-session[341351]: Invalid user factorio f ...
show more2026-06-04T19:05:47.436208-05:00 nocix-dedi-bf2421-mci sshd-session[341351]: Invalid user factorio from 113.16.199.63 port 49970
2026-06-04T19:09:52.075269-05:00 nocix-dedi-bf2421-mci sshd-session[341648]: Invalid user oem from 113.16.199.63 port 50602
2026-06-04T19:18:19.364392-05:00 nocix-dedi-bf2421-mci sshd-session[342211]: Invalid user user from 113.16.199.63 port 47934
...
show less
Jun 4 23:53:08 prisma sshd[4057390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 4 23:53:08 prisma sshd[4057390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.16.199.63
Jun 4 23:53:10 prisma sshd[4057390]: Failed password for invalid user ubuntu from 113.16.199.63 port 41986 ssh2
Jun 4 23:57:25 prisma sshd[4061203]: Invalid user umair from 113.16.199.63 port 58404
Jun 4 23:57:25 prisma sshd[4061203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.16.199.63
Jun 4 23:57:27 prisma sshd[4061203]: Failed password for invalid user umair from 113.16.199.63 port 58404 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T23:03:52.545178 mail2.akcurate.de sshd-session[41674]: Invalid user vlad from 113.16.199. ...
show more2026-06-04T23:03:52.545178 mail2.akcurate.de sshd-session[41674]: Invalid user vlad from 113.16.199.63 port 54808
2026-06-04T23:03:52.818403 mail2.akcurate.de sshd-session[41674]: Disconnected from invalid user vlad 113.16.199.63 port 54808 [preauth]
...
show less
Jun 4 14:33:40 mortgagebase sshd[18547]: Disconnected from authenticating user root 113.16.199.63 p ...
show moreJun 4 14:33:40 mortgagebase sshd[18547]: Disconnected from authenticating user root 113.16.199.63 port 38962 [preauth]
Jun 4 14:36:33 mortgagebase sshd[18615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.16.199.63 user=root
Jun 4 14:36:35 mortgagebase sshd[18615]: Failed password for root from 113.16.199.63 port 39132 ssh2
Jun 4 14:36:36 mortgagebase sshd[18615]: Disconnected from authenticating user root 113.16.199.63 port 39132 [preauth]
Jun 4 14:44:41 mortgagebase sshd[18889]: Invalid user cc from 113.16.199.63 port 39640
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T22:05:03.222630 mail2.akcurate.de sshd-session[39652]: Disconnected from invalid user vis ...
show more2026-06-04T22:05:03.222630 mail2.akcurate.de sshd-session[39652]: Disconnected from invalid user visitor 113.16.199.63 port 51258 [preauth]
2026-06-04T22:25:49.179338 mail2.akcurate.de sshd-session[40562]: Disconnected from authenticating user root 113.16.199.63 port 52446 [preauth]
2026-06-04T22:25:49.179338 mail2.akcurate.de sshd-session[40562]: Disconnected from authenticating user root 113.16.199.63 port 52446 [preauth]
...
show less
(sshd) Failed SSH login from 113.16.199.63 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 113.16.199.63 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 4 14:54:05 14587 sshd[32743]: Invalid user test from 113.16.199.63 port 37928
Jun 4 14:54:06 14587 sshd[32743]: Failed password for invalid user test from 113.16.199.63 port 37928 ssh2
Jun 4 15:13:16 14587 sshd[10248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.16.199.63 user=root
Jun 4 15:13:18 14587 sshd[10248]: Failed password for root from 113.16.199.63 port 50484 ssh2
Jun 4 15:25:07 14587 sshd[16333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.16.199.63 user=root
show less
Brute-Force
SSH
Anonymous
2026-06-04T20:13:46.919577652Z User root from 113.16.199.63 not allowed because not listed in AllowU ...
show more2026-06-04T20:13:46.919577652Z User root from 113.16.199.63 not allowed because not listed in AllowUsers
2026-06-04T20:13:46.985982844Z Disconnected from invalid user root 113.16.199.63 port 44276 [preauth]
2026-06-04T20:22:30.236655667Z User root from 113.16.199.63 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T21:57:07.125358 mail2.akcurate.de sshd-session[39561]: Invalid user test from 113.16.199. ...
show more2026-06-04T21:57:07.125358 mail2.akcurate.de sshd-session[39561]: Invalid user test from 113.16.199.63 port 53214
2026-06-04T21:57:07.392573 mail2.akcurate.de sshd-session[39561]: Disconnected from invalid user test 113.16.199.63 port 53214 [preauth]
2026-06-04T22:05:02.952516 mail2.akcurate.de sshd-session[39652]: Invalid user visitor from 113.16.199.63 port 51258
...
show less
Jun 4 13:54:33 mortgagebase sshd[17579]: Failed password for invalid user test from 113.16.199.63 p ...
show moreJun 4 13:54:33 mortgagebase sshd[17579]: Failed password for invalid user test from 113.16.199.63 port 55516 ssh2
Jun 4 13:54:33 mortgagebase sshd[17579]: Disconnected from invalid user test 113.16.199.63 port 55516 [preauth]
Jun 4 14:04:25 mortgagebase sshd[17757]: Invalid user visitor from 113.16.199.63 port 37264
Jun 4 14:04:25 mortgagebase sshd[17757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.16.199.63
Jun 4 14:04:27 mortgagebase sshd[17757]: Failed password for invalid user visitor from 113.16.199.63 port 37264 ssh2
...
show less
2026-06-04T21:14:05.346716+02:00 router01.mhm.de.mersrv.de sshd[3529560]: Disconnected from invalid ...
show more2026-06-04T21:14:05.346716+02:00 router01.mhm.de.mersrv.de sshd[3529560]: Disconnected from invalid user jamshid 113.16.199.63 port 40958 [preauth]
2026-06-04T21:19:19.775760+02:00 router01.mhm.de.mersrv.de sshd[3530851]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-04T21:19:19.775932+02:00 router01.mhm.de.mersrv.de sshd[3530851]: Connection reset by 113.16.199.63 port 55550
2026-06-04T21:20:35.157903+02:00 router01.mhm.de.mersrv.de sshd[3531548]: Invalid user test from 113.16.199.63 port 48728
2026-06-04T21:20:35.377072+02:00 router01.mhm.de.mersrv.de sshd[3531548]: Disconnected from invalid user test 113.16.199.63 port 48728 [preauth]
show less
2026-06-05T03:05:38.455963+08:00 localhost sshd[2721571]: Invalid user asa from 113.16.199.63 port 4 ...
show more2026-06-05T03:05:38.455963+08:00 localhost sshd[2721571]: Invalid user asa from 113.16.199.63 port 43474
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T20:14:49.029615+02:00 lXXX.com sshd[11048]: pam_unix(sshd:auth): authentication failure; ...
show more2026-06-04T20:14:49.029615+02:00 lXXX.com sshd[11048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.16.199.63
2026-06-04T20:14:51.484474+02:00 lXXX.com sshd[11048]: Failed password for invalid user ubuntu from 113.16.199.63 port 35606 ssh2
2026-06-04T20:52:34.365861+02:00 lXXX.com sshd[14089]: Invalid user debian from 113.16.199.63 port 41554
...
show less
Brute-Force
SSH
Showing 1 to
15
of 129 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩