This IP address has been reported a total of
71
times from
62 distinct
sources.
116.103.16.99 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-28T02:34:51.964571+02:00 vmi3491693 kernel: [59258.690880] PORTSCAN: IN=eth0 OUT= MAC=00:50: ...
show more2026-08-28T02:34:51.964571+02:00 vmi3491693 kernel: [59258.690880] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=116.103.16.99 DST=169.58.138.2 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=34727 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
Anonymous
2026-08-27T18:30:05.569256 VOSTOK sshd[19959]: Invalid user pi from 116.103.16.99 port 56058
2026-08 ...
show more2026-08-27T18:30:05.569256 VOSTOK sshd[19959]: Invalid user pi from 116.103.16.99 port 56058
2026-08-27T18:30:05.642650 VOSTOK sshd[19958]: Invalid user pi from 116.103.16.99 port 56054
2026-08-27T18:30:05.806763 VOSTOK sshd[19959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.103.16.99
2026-08-27T18:30:08.293407 VOSTOK sshd[19959]: Failed password for invalid user pi from 116.103.16.99 port 56058 ssh2
...
show less
Failed password for pi from 116.103.16.99 port 37890 ssh2
Failed password for pi from 116.103.16.99 ...
show moreFailed password for pi from 116.103.16.99 port 37890 ssh2
Failed password for pi from 116.103.16.99 port 37888 ssh2
Connection closed by pi 116.103.16.99 port 37890 [preauth]
show less
Aug 27 19:56:12 pxe sshd[3090861]: Invalid user pi from 116.103.16.99 port 43292
Aug 27 19:56:12 pxe ...
show moreAug 27 19:56:12 pxe sshd[3090861]: Invalid user pi from 116.103.16.99 port 43292
Aug 27 19:56:12 pxe sshd[3090860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.103.16.99
Aug 27 19:56:14 pxe sshd[3090860]: Failed password for invalid user pi from 116.103.16.99 port 43290 ssh2
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 116.103.16.99
Targeted device: DVR
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 116.103.16.99
Targeted device: DVR
First seen: 27 Aug 2026 19:12:10 UTC
Last seen: 27 Aug 2026 19:12:12 UTC
Attempts: 4
Client: SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u2
Sample credentials: pi:raspberry, pi:raspberryraspberry993311
show less
2026-08-27T20:56:38.316174+02:00 proxmox sshd[1148447]: Invalid user pi from 116.103.16.99 port 3656 ...
show more2026-08-27T20:56:38.316174+02:00 proxmox sshd[1148447]: Invalid user pi from 116.103.16.99 port 36564
2026-08-27T20:56:38.491606+02:00 proxmox sshd[1148412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.103.16.99
2026-08-27T20:56:40.131810+02:00 proxmox sshd[1148412]: Failed password for invalid user pi from 116.103.16.99 port 36558 ssh2
...
show less
Aug 27 18:39:27 fail2ban sshd[4075761]: Invalid user pi from 116.103.16.99 port 42560
Aug 27 18:39:2 ...
show moreAug 27 18:39:27 fail2ban sshd[4075761]: Invalid user pi from 116.103.16.99 port 42560
Aug 27 18:39:28 fail2ban sshd[4075762]: Invalid user pi from 116.103.16.99 port 42566
...
show less
Brute-Force
SSH
Anonymous
Aug 27 17:53:05 f2b auth.info sshd[50092]: Invalid user pi from 116.103.16.99 port 35604
Aug 27 17:5 ...
show moreAug 27 17:53:05 f2b auth.info sshd[50092]: Invalid user pi from 116.103.16.99 port 35604
Aug 27 17:53:05 f2b auth.info sshd[50093]: Invalid user pi from 116.103.16.99 port 35612
Aug 27 17:53:05 f2b auth.info sshd[50092]: Failed password for invalid user pi from 116.103.16.99 port 35604 ssh2
...
show less
Aug 27 16:41:57 dev sshd[2373760]: Invalid user pi from 116.103.16.99 port 52490
Aug 27 16:41:57 dev ...
show moreAug 27 16:41:57 dev sshd[2373760]: Invalid user pi from 116.103.16.99 port 52490
Aug 27 16:41:57 dev sshd[2373762]: Invalid user pi from 116.103.16.99 port 52504
...
show less
Aug 27 15:57:45 localhost sshd[30910]: refused connect from 116.103.16.99 (116.103.16.99)
Aug 27 15: ...
show moreAug 27 15:57:45 localhost sshd[30910]: refused connect from 116.103.16.99 (116.103.16.99)
Aug 27 15:57:45 localhost sshd[30911]: refused connect from 116.103.16.99 (116.103.16.99)
...
show less