This IP address has been reported a total of
669
times from
154 distinct
sources.
103.149.26.43 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH brute-force detected by honeypot. 40 failed login attempts. Last username: 'root'. SSH client: S ...
show moreSSH brute-force detected by honeypot. 40 failed login attempts. Last username: 'root'. SSH client: SSH-2.0-libssh2_1.11.0. Origin: Hong Kong (AS135377 - UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED).
show less
2026-05-29T22:18:32.999892+03:00 vatnik sshd[238747]: User root from 103.149.26.43 not allowed becau ...
show more2026-05-29T22:18:32.999892+03:00 vatnik sshd[238747]: User root from 103.149.26.43 not allowed because listed in DenyUsers
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of lo ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of login attempts: 1
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: 6c:4a:e2:3a:95:1e:57:f5:a1:06:89:33:ad:24:8a:d8
show less
2026-05-29T18:10:17.167204+00:00 mail sshd[98269]: User root from 103.149.26.43 not allowed because ...
show more2026-05-29T18:10:17.167204+00:00 mail sshd[98269]: User root from 103.149.26.43 not allowed because not listed in AllowUsers
...
show less
May 28 16:54:58 servidor sshd[3601290]: Disconnected from authenticating user root 103.149.26.43 por ...
show moreMay 28 16:54:58 servidor sshd[3601290]: Disconnected from authenticating user root 103.149.26.43 port 51052 [preauth]
May 28 19:01:19 servidor sshd[3612617]: Disconnected from authenticating user root 103.149.26.43 port 56166 [preauth]
May 29 10:19:29 servidor sshd[3886119]: Disconnected from authenticating user root 103.149.26.43 port 38024 [preauth]
...
show less
2026-05-29T16:32:37.862378+00:00 messaround sshd[2310105]: error: maximum authentication attempts ex ...
show more2026-05-29T16:32:37.862378+00:00 messaround sshd[2310105]: error: maximum authentication attempts exceeded for root from 103.149.26.43 port 43328 ssh2 [preauth]
...
show less
2026-05-30T01:30:51.560025+09:00 no4 sshd[2115837]: Disconnected from authenticating user root 103.1 ...
show more2026-05-30T01:30:51.560025+09:00 no4 sshd[2115837]: Disconnected from authenticating user root 103.149.26.43 port 41974 [preauth]
...
show less
May 29 11:57:53 vmori-manager-1 sshd[105931]: Disconnected from authenticating user root 103.149.26. ...
show moreMay 29 11:57:53 vmori-manager-1 sshd[105931]: Disconnected from authenticating user root 103.149.26.43 port 57064 [preauth]
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-29T13:51:13Z and 2026-05-2 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-29T13:51:13Z and 2026-05-29T13:51:13Z
show less
Brute-Force
SSH
Showing 136 to
150
of 669 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩