This IP address has been reported a total of
48
times from
32 distinct
sources.
103.109.109.124 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW on hk [3389/tcp]
Source port: 47429
TTL: 242
Packet length: 40
TOS: 0x00
This report ...
show moreBlocked by UFW on hk [3389/tcp]
Source port: 47429
TTL: 242
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Unsolicited TCP connection from 103.109.109.124 to port 0 at 2026-07-28T14:37:43Z. Source IP complet ...
show moreUnsolicited TCP connection from 103.109.109.124 to port 0 at 2026-07-28T14:37:43Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
This IP address carried out 304 port scanning attempts on 26-07-2026. For more information or to rep ...
show moreThis IP address carried out 304 port scanning attempts on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-07-27T14:33:33.410204+02:00 euve sshd-session[159617]: Failed password for root from 103.109.10 ...
show more2026-07-27T14:33:33.410204+02:00 euve sshd-session[159617]: Failed password for root from 103.109.109.124 port 10179 ssh2
2026-07-27T14:33:35.642877+02:00 euve sshd-session[159617]: Connection closed by authenticating user root 103.109.109.124 port 10179 [preauth]
2026-07-27T18:47:41.505880+02:00 euve sshd-session[169659]: Invalid user ubuntu from 103.109.109.124 port 43802
...
show less
103.109.109.124 (IN/India/reverse.bluelotus.109.109.103.in-addr.arpa), 5 distributed sshd attacks on ...
show more103.109.109.124 (IN/India/reverse.bluelotus.109.109.103.in-addr.arpa), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 11:35:48 13586 sshd[1439]: Invalid user ubuntu from 52.191.142.40 port 33810
Jul 27 11:35:50 13586 sshd[1439]: Failed password for invalid user ubuntu from 52.191.142.40 port 33810 ssh2
Jul 27 11:31:01 13586 sshd[31432]: Invalid user ubuntu from 103.69.3.179 port 55783
Jul 27 11:31:03 13586 sshd[31432]: Failed password for invalid user ubuntu from 103.69.3.179 port 55783 ssh2
Jul 27 11:40:36 13586 sshd[3882]: Invalid user ubuntu from 103.109.109.124 port 35614
IP Addresses Blocked:
52.191.142.40 (US/United States/-)
103.69.3.179 (PK/Pakistan/-)
show less
103.109.109.124 (IN/India/reverse.bluelotus.109.109.103.in-addr.arpa), 5 distributed sshd attacks on ...
show more103.109.109.124 (IN/India/reverse.bluelotus.109.109.103.in-addr.arpa), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 11:25:18 14974 sshd[15257]: Invalid user ubuntu from 188.48.181.12 port 52074
Jul 27 11:06:04 14974 sshd[5688]: Invalid user ubuntu from 20.169.219.57 port 59977
Jul 27 11:06:06 14974 sshd[5688]: Failed password for invalid user ubuntu from 20.169.219.57 port 59977 ssh2
Jul 27 11:10:54 14974 sshd[7915]: Invalid user ubuntu from 103.109.109.124 port 3808
Jul 27 11:10:56 14974 sshd[7915]: Failed password for invalid user ubuntu from 103.109.109.124 port 3808 ssh2
IP Addresses Blocked:
188.48.181.12 (SA/Saudi Arabia/-)
20.169.219.57 (US/United States/-)
show less
Brute-Force
SSH
Showing 1 to
15
of 48 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩