Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Nov 8 06:08:45 obsidian sshd[3169259]: Failed password for root from 103.146.125.139 port 42110 ssh2
Nov 8 06:09:00 obsidian sshd[3170124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.125.139 use ...
show moreNov 8 06:08:45 obsidian sshd[3169259]: Failed password for root from 103.146.125.139 port 42110 ssh2
Nov 8 06:09:00 obsidian sshd[3170124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.125.139 user=root
Nov 8 06:09:02 obsidian sshd[3170124]: Failed password for root from 103.146.125.139 port 34426 ssh2
...
show less
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 3, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (us1) over 2026-11-08..2026-11-08. Reported by an SSH honeypot network; no production service ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 3, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (us1) over 2026-11-08..2026-11-08. Reported by an SSH honeypot network; no production service involved.
show less
2026-11-07T17:26:34.730552+01:00 gaia sshd[1839167]: Failed password for invalid user root from 103.146.125.139 port 47906 ssh2
2026-11-07T17:26:35.866447+01:00 gaia sshd[1839182]: Connection from 103.146.125.139 port 47942 on 148.251.110.65 port 22 ...
show more2026-11-07T17:26:34.730552+01:00 gaia sshd[1839167]: Failed password for invalid user root from 103.146.125.139 port 47906 ssh2
2026-11-07T17:26:35.866447+01:00 gaia sshd[1839182]: Connection from 103.146.125.139 port 47942 on 148.251.110.65 port 22 rdomain ""
2026-11-07T17:26:37.228797+01:00 gaia sshd[1839182]: User root from 103.146.125.139 not allowed because not listed in AllowUsers
...
show less
2026-11-08T00:19:09.973660+08:00 vmi996132.contaboserver.net sshd[1687793]: Connection closed by authenticating user root 103.146.125.139 port 33292 [preauth]
2026-11-08T00:19:10.464411+08:00 vmi996132.contaboserver.net sshd[1687796]: pam_unix(sshd:a ...
show more2026-11-08T00:19:09.973660+08:00 vmi996132.contaboserver.net sshd[1687793]: Connection closed by authenticating user root 103.146.125.139 port 33292 [preauth]
2026-11-08T00:19:10.464411+08:00 vmi996132.contaboserver.net sshd[1687796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.125.139 user=root
2026-11-08T00:19:12.553311+08:00 vmi996132.contaboserver.net sshd[1687796]: Failed password for root from 103.146.125.139 port 33304 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force: repeated failed logins and invalid usernames. Reported by fail2ban.