This IP address has been reported a total of
361
times from
288 distinct
sources.
116.99.168.167 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
(sshd) Failed SSH login from 116.99.168.167 (VN/-/dynamic-ip-adsl.viettel.vn): 5 in the last 3600 se ...
show more(sshd) Failed SSH login from 116.99.168.167 (VN/-/dynamic-ip-adsl.viettel.vn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 3 13:46:05 na-s3 sshd[3618774]: Invalid user installer from 116.99.168.167 port 48240
Jun 3 13:49:48 na-s3 sshd[3659101]: Invalid user ubnt from 116.99.168.167 port 55222
Jun 3 13:50:50 na-s3 sshd[3672793]: Invalid user ubnt from 116.99.168.167 port 51294
Jun 3 13:51:32 na-s3 sshd[3679077]: Invalid user ubnt from 116.99.168.167 port 53152
Jun 3 13:52:20 na-s3 sshd[3690527]: Invalid user squid from 116.99.168.167 port 54110
show less
2026-06-03T17:51:47.819690shield sshd\[29866\]: Invalid user ubnt from 116.99.168.167 port 58570
202 ...
show more2026-06-03T17:51:47.819690shield sshd\[29866\]: Invalid user ubnt from 116.99.168.167 port 58570
2026-06-03T17:51:53.922956shield sshd\[29866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.99.168.167
2026-06-03T17:51:55.121822shield sshd\[29876\]: Invalid user squid from 116.99.168.167 port 45124
2026-06-03T17:51:55.390806shield sshd\[29876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.99.168.167
2026-06-03T17:51:55.926557shield sshd\[29866\]: Failed password for invalid user ubnt from 116.99.168.167 port 58570 ssh2
show less
Brute-Force
SSH
Anonymous
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: admin:admin, installer:installer, ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: admin:admin, installer:installer, user:user, ubnt:ubnt
• Number of login attempts: 4
• Client: SSH-2.0-AsyncSSH_2.1.0
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-03 12:49:24.458980-0500 localhost sshd-session[34413]: Failed password for invalid user ubn ...
show more2026-06-03 12:49:24.458980-0500 localhost sshd-session[34413]: Failed password for invalid user ubnt from 116.99.168.167 port 33474 ssh2
show less
2026-06-04T01:48:57.795862+08:00 *hostname* sshd-session[150206]: error: PAM: Authentication failure ...
show more2026-06-04T01:48:57.795862+08:00 *hostname* sshd-session[150206]: error: PAM: Authentication failure for illegal user user from 116.99.168.167
2026-06-04T01:48:57.796209+08:00 *hostname* sshd-session[150206]: Failed keyboard-interactive/pam for invalid user user from 116.99.168.167 port 57152 ssh2
2026-06-04T01:49:01.824038+08:00 *hostname* sshd-session[150206]: Connection closed by invalid user user 116.99.168.167 port 57152 [preauth]
2026-06-04T01:50:52.927536+08:00 *hostname* sshd-session[150229]: Connection from 116.99.168.167 port 40112 on 10.66.0.3 port 22 rdomain ""
2026-06-04T01:50:57.340756+08:00 *hostname* sshd-session[150229]: Invalid user ubnt from 116.99.168.167 port 40112
show less
[CDN] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
...
show more[CDN] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
Jun 3 18:41:29 cdn sshd[500138]: Failed password for invalid user admin from 116.99.168.167 port 41288 ssh2
Jun 3 18:48:08 cdn sshd[500149]: Invalid user user from 116.99.168.167 port 46020
Jun 3 18:48:09 cdn sshd[500149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.99.168.167
Jun 3 18:48:12 cdn sshd[500149]: Failed password for invalid user user from 116.99.168.167 port 46020 ssh2
Jun 3 18:50:31 cdn sshd[500152]: Invalid user ubnt from 116.99.168.167 port 50212
show less
2026-06-03T17:47:41.064756+00:00 kocer-main-webserver sshd[3031950]: Invalid user user from 116.99.1 ...
show more2026-06-03T17:47:41.064756+00:00 kocer-main-webserver sshd[3031950]: Invalid user user from 116.99.168.167 port 58172
2026-06-03T17:47:41.301715+00:00 kocer-main-webserver sshd[3031950]: Connection closed by invalid user user 116.99.168.167 port 58172 [preauth]
2026-06-03T17:50:16.471134+00:00 kocer-main-webserver sshd[3032224]: Invalid user ubnt from 116.99.168.167 port 38124
...
show less
Jun 3 10:41:25 panduh sshd[7556]: Invalid user admin from 116.99.168.167 port 36106
Jun 3 10:43:41 ...
show moreJun 3 10:41:25 panduh sshd[7556]: Invalid user admin from 116.99.168.167 port 36106
Jun 3 10:43:41 panduh sshd[8052]: Invalid user installer from 116.99.168.167 port 59160
Jun 3 10:45:59 panduh sshd[8561]: Invalid user user from 116.99.168.167 port 40472
Jun 3 10:50:04 panduh sshd[9618]: Invalid user user from 116.99.168.167 port 44760
...
show less
2026-06-03T17:47:56.020836+00:00 ssh sshd[1914162]: Invalid user user from 116.99.168.167 port 55532 ...
show more2026-06-03T17:47:56.020836+00:00 ssh sshd[1914162]: Invalid user user from 116.99.168.167 port 55532
2026-06-03T17:48:07.651600+00:00 ssh sshd[1914162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.99.168.167
2026-06-03T17:48:09.630201+00:00 ssh sshd[1914162]: Failed password for invalid user user from 116.99.168.167 port 55532 ssh2
2026-06-03T17:49:09.763599+00:00 ssh sshd[1914664]: Invalid user ubnt from 116.99.168.167 port 49072
...
show less
2026-06-03T11:40:48.069162-06:00 oracle7 sshd[1878182]: Invalid user admin from 116.99.168.167 port ...
show more2026-06-03T11:40:48.069162-06:00 oracle7 sshd[1878182]: Invalid user admin from 116.99.168.167 port 33680
2026-06-03T11:42:24.833241-06:00 oracle7 sshd[1879180]: Invalid user admin from 116.99.168.167 port 39818
2026-06-03T11:48:57.969428-06:00 oracle7 sshd[1882794]: Invalid user ubnt from 116.99.168.167 port 41556
...
show less