AbuseIPDB » 103.149.28.105

103.149.28.105 was found in our database!

This IP was reported 36,109 times. Confidence of Abuse is 100%: ?

100%

ISP	WEBPX SOFTWARE COMPANY LIMITEDCOMPANY
Usage Type	Data Center/Web Hosting/Transit
ASN	AS149124
Domain Name	vncdata.com
Country	Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 103.149.28.105

Whois 103.149.28.105

IP Abuse Reports for 103.149.28.105:

This IP address has been reported a total of 36,109 times from 1,833 distinct sources. 103.149.28.105 was first reported on March 29th 2023, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
W8C Dev	2025-07-11 17:01:16 (46 minutes ago)	Jul 11 14:01:16 vmori-manager-1 sshd[119292]: Disconnected from authenticating user root 103.149.28. ... show moreJul 11 14:01:16 vmori-manager-1 sshd[119292]: Disconnected from authenticating user root 103.149.28.105 port 55308 [preauth] ... show less	Brute-Force SSH
dannyfolf.xyz	2025-07-11 16:56:05 (51 minutes ago)	2025-07-11T16:53:14.890327+00:00 localhost sshd[1647711]: Failed password for root from 103.149.28.1 ... show more2025-07-11T16:53:14.890327+00:00 localhost sshd[1647711]: Failed password for root from 103.149.28.105 port 59854 ssh2 2025-07-11T16:54:38.233552+00:00 localhost sshd[1647722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T16:54:39.636113+00:00 localhost sshd[1647722]: Failed password for root from 103.149.28.105 port 59542 ssh2 2025-07-11T16:56:02.766706+00:00 localhost sshd[1647731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T16:56:04.370222+00:00 localhost sshd[1647731]: Failed password for root from 103.149.28.105 port 59232 ssh2 ... show less	Brute-Force SSH
dannyfolf.xyz	2025-07-11 16:39:24 (1 hour ago)	2025-07-11T16:36:31.482090+00:00 localhost sshd[1647303]: Failed password for root from 103.149.28.1 ... show more2025-07-11T16:36:31.482090+00:00 localhost sshd[1647303]: Failed password for root from 103.149.28.105 port 35378 ssh2 2025-07-11T16:37:53.958115+00:00 localhost sshd[1647309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T16:37:56.058341+00:00 localhost sshd[1647309]: Failed password for root from 103.149.28.105 port 35066 ssh2 2025-07-11T16:39:21.962198+00:00 localhost sshd[1647380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T16:39:24.142772+00:00 localhost sshd[1647380]: Failed password for root from 103.149.28.105 port 34756 ssh2 ... show less	Brute-Force SSH
dannyfolf.xyz	2025-07-11 16:22:33 (1 hour ago)	2025-07-11T16:19:32.949807+00:00 localhost sshd[1646879]: Failed password for root from 103.149.28.1 ... show more2025-07-11T16:19:32.949807+00:00 localhost sshd[1646879]: Failed password for root from 103.149.28.105 port 39120 ssh2 2025-07-11T16:21:00.210556+00:00 localhost sshd[1646910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T16:21:01.909492+00:00 localhost sshd[1646910]: Failed password for root from 103.149.28.105 port 38810 ssh2 2025-07-11T16:22:30.029362+00:00 localhost sshd[1646949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T16:22:32.083018+00:00 localhost sshd[1646949]: Failed password for root from 103.149.28.105 port 38500 ssh2 ... show less	Brute-Force SSH
SysAdmin Dylan	2025-07-11 15:29:54 (2 hours ago)	(sshd) Failed SSH login from 103.149.28.105 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direc ... show more(sshd) Failed SSH login from 103.149.28.105 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 11 17:24:35 sshd[153281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=[USERNAME] show less	Brute-Force SSH
killmself	2025-07-11 15:26:01 (2 hours ago)	Caught by Fail2Ban	Brute-Force SSH
whitehat AbuseIPDB Official	2025-07-11 13:32:24 (4 hours ago)	2025-07-11T13:29:41.504221shield sshd\[7260\]: pam_unix\(sshd:auth\): authentication failure\; logna ... show more2025-07-11T13:29:41.504221shield sshd\[7260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T13:29:43.409422shield sshd\[7260\]: Failed password for root from 103.149.28.105 port 40042 ssh2 2025-07-11T13:31:04.267642shield sshd\[8082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T13:31:06.898895shield sshd\[8082\]: Failed password for root from 103.149.28.105 port 38712 ssh2 2025-07-11T13:32:23.789131shield sshd\[8912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root show less	Brute-Force SSH
whitehat AbuseIPDB Official	2025-07-11 13:19:28 (4 hours ago)	2025-07-11T13:16:41.974517shield sshd\[1417\]: pam_unix\(sshd:auth\): authentication failure\; logna ... show more2025-07-11T13:16:41.974517shield sshd\[1417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T13:16:43.799468shield sshd\[1417\]: Failed password for root from 103.149.28.105 port 51996 ssh2 2025-07-11T13:18:02.841098shield sshd\[1921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T13:18:05.122829shield sshd\[1921\]: Failed password for root from 103.149.28.105 port 50666 ssh2 2025-07-11T13:19:27.579097shield sshd\[2373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root show less	Brute-Force SSH
Filli Group	2025-07-11 13:05:54 (4 hours ago)	2025-07-11T15:02:50.371022mx02.crazycraftland.net sshd[2763791]: User root from 103.149.28.105 not a ... show more2025-07-11T15:02:50.371022mx02.crazycraftland.net sshd[2763791]: User root from 103.149.28.105 not allowed because not listed in AllowUsers 2025-07-11T15:04:28.365426mx02.crazycraftland.net sshd[2764652]: User root from 103.149.28.105 not allowed because not listed in AllowUsers 2025-07-11T15:05:53.672564mx02.crazycraftland.net sshd[2765446]: User root from 103.149.28.105 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
whitehat AbuseIPDB Official	2025-07-11 13:05:40 (4 hours ago)	2025-07-11T13:01:56.875900shield sshd\[25712\]: pam_unix\(sshd:auth\): authentication failure\; logn ... show more2025-07-11T13:01:56.875900shield sshd\[25712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T13:01:58.870552shield sshd\[25712\]: Failed password for root from 103.149.28.105 port 56698 ssh2 2025-07-11T13:04:14.438851shield sshd\[26756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root 2025-07-11T13:04:16.379804shield sshd\[26756\]: Failed password for root from 103.149.28.105 port 35740 ssh2 2025-07-11T13:05:38.820431shield sshd\[27710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root show less	Brute-Force SSH
netdevops	2025-07-11 13:05:10 (4 hours ago)	Jul 11 13:03:42 ubuntu sshd[2744392]: Failed password for root from 103.149.28.105 port 47528 ssh2<b ... show moreJul 11 13:03:42 ubuntu sshd[2744392]: Failed password for root from 103.149.28.105 port 47528 ssh2 Jul 11 13:05:07 ubuntu sshd[2744424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root Jul 11 13:05:09 ubuntu sshd[2744424]: Failed password for root from 103.149.28.105 port 46198 ssh2 ... show less	Brute-Force SSH
hanb.jp	2025-07-11 12:16:06 (5 hours ago)	Jul 11 12:14:36 v4bgp sshd[693558]: Failed password for root from 103.149.28.105 port 36972 ssh2<br ... show moreJul 11 12:14:36 v4bgp sshd[693558]: Failed password for root from 103.149.28.105 port 36972 ssh2 Jul 11 12:16:04 v4bgp sshd[693593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105 user=root Jul 11 12:16:06 v4bgp sshd[693593]: Failed password for root from 103.149.28.105 port 36876 ssh2 ... show less	Brute-Force SSH
NetWatch	2025-07-11 12:01:52 (5 hours ago)	The IP 103.149.28.105 tried multiple SSH logins	Brute-Force SSH
diego	2025-07-11 11:27:23 (6 hours ago)	[rede-44-49] (sshd) Failed SSH login from 103.149.28.105 (-): 5 in the last 3600 secs; Ports: *; Dir ... show more[rede-44-49] (sshd) Failed SSH login from 103.149.28.105 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 11 08:22:16 sshd[1506]: Invalid user [USERNAME] from 103.149.28.105 port 40124 Jul 11 08:22:17 sshd[1506]: Failed password for invalid user [USERNAME] from 103.149.28.105 port 40124 ssh2 Jul 11 08:25:41 sshd[1815]: Invalid user [USERNAME] from 103.149.28.105 port 33784 Jul 11 08:25:42 sshd[1815]: Failed password for invalid user [USERNAME] from 103.149.28.105 port 33784 ssh2 Jul 11 08:27:18 sshd[1985]: Invalid user [USERNAME] from 103.149.28.105 port 33532 show less	Port Scan
malamanhado.com.br	2025-07-11 11:24:20 (6 hours ago)	2025-07-11T11:24:18.588576+00:00 jitsi.malamanhado.com.br sshd[313787]: Connection from 103.149.28.1 ... show more2025-07-11T11:24:18.588576+00:00 jitsi.malamanhado.com.br sshd[313787]: Connection from 103.149.28.105 port 48908 on 74.50.123.34 port 22 rdomain "" 2025-07-11T11:24:19.869396+00:00 jitsi.malamanhado.com.br sshd[313787]: Invalid user radio from 103.149.28.105 port 48908 show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩