This IP address has been reported a total of
46
times from
43 distinct
sources.
16.147.195.99 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and atta ...
show moreAuto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and attack probes. Requests blocked (403).
show less
2026-09-01T03:51:58.161712+02:00 dokploy-2 sshd-session[3756014]: Connection closed by 16.147.195.99 ...
show more2026-09-01T03:51:58.161712+02:00 dokploy-2 sshd-session[3756014]: Connection closed by 16.147.195.99 port 60042 [preauth]
2026-09-01T03:51:59.149336+02:00 dokploy-2 sshd-session[3756016]: Connection closed by 16.147.195.99 port 60066 [preauth]
2026-09-01T03:52:00.165770+02:00 dokploy-2 sshd-session[3756023]: Unable to negotiate with 16.147.195.99 port 60078: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
Sep 1 01:40:17 sanyalnet-oracle-vps2 sshd[4135094]: Unable to negotiate with 16.147.195.99 port 392 ...
show moreSep 1 01:40:17 sanyalnet-oracle-vps2 sshd[4135094]: Unable to negotiate with 16.147.195.99 port 39222: no matching host key type found. Their offer: ecdsa-sha2-nistp256,[email protected] [preauth]
Sep 1 01:40:17 sanyalnet-oracle-vps2 sshd[4135096]: Connection from 16.147.195.99 port 39236 on 10.0.0.93 port 22 rdomain ""
Sep 1 01:40:17 sanyalnet-oracle-vps2 sshd[4135096]: Unable to negotiate with 16.147.195.99 port 39236: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
2026-09-01T01:20:46.423098+00:00 instance-20241105-1951 sshd[2935483]: Connection closed by 16.147.1 ...
show more2026-09-01T01:20:46.423098+00:00 instance-20241105-1951 sshd[2935483]: Connection closed by 16.147.195.99 port 52366 [preauth]
...
show less
2026-09-01T01:01:11.923602+00:00 polka sshd-session[68870]: Connection closed by 16.147.195.99 port ...
show more2026-09-01T01:01:11.923602+00:00 polka sshd-session[68870]: Connection closed by 16.147.195.99 port 46918 [preauth]
2026-09-01T01:01:12.870735+00:00 polka sshd-session[68872]: Connection closed by 16.147.195.99 port 53472 [preauth]
2026-09-01T01:01:13.559604+00:00 polka sshd-session[68874]: Unable to negotiate with 16.147.195.99 port 53478: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-09-01T01:01:13.973349+00:00 polka sshd-session[68876]: Unable to negotiate with 16.147.195.99 port 53488: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-09-01T01:01:14.949771+00:00 polka sshd-session[68878]: Connection closed by 16.147.195.99 port 53504 [preauth]
...
show less
2026-09-01T00:30:07.521241+00:00 [SERVER] sshd-session[3775852]: Connection closed by 16.147.195.99 ...
show more2026-09-01T00:30:07.521241+00:00 [SERVER] sshd-session[3775852]: Connection closed by 16.147.195.99 port 54150 [preauth]
2026-09-01T00:30:08.800042+00:00 [SERVER] sshd-session[3775860]: Connection closed by 16.147.195.99 port 54158 [preauth]
2026-09-01T00:30:09.532343+00:00 [SERVER] sshd-session[3775862]: Unable to negotiate with 16.147.195.99 port 54172: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
show less
2026-08-31T20:15:29.027657 rhel-20gb-ash-1 sshd[1830629]: Connection closed by 16.147.195.99 port 35 ...
show more2026-08-31T20:15:29.027657 rhel-20gb-ash-1 sshd[1830629]: Connection closed by 16.147.195.99 port 35812 [preauth]
...
show less
SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Cons ...
show moreSSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Consistent with automated SSH scanning/brute-force. Reported by dotnetdork.dev security honeypot.
show less
2026-08-31T18:06:49.365719-06:00 node1.us sshd-session[3467913]: Connection closed by 16.147.195.99 ...
show more2026-08-31T18:06:49.365719-06:00 node1.us sshd-session[3467913]: Connection closed by 16.147.195.99 port 35550 [preauth]
2026-08-31T18:06:50.864311-06:00 node1.us sshd-session[3467917]: Connection closed by 16.147.195.99 port 35552 [preauth]
2026-08-31T18:06:51.496643-06:00 node1.us sshd-session[3467921]: Unable to negotiate with 16.147.195.99 port 35558: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 46 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩