This IP address has been reported a total of
52
times from
49 distinct
sources.
103.149.93.239 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 16 12:45:21 phoenix sshd[3720234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ...
show moreOct 16 12:45:21 phoenix sshd[3720234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.93.239 user=root
Oct 16 12:45:24 phoenix sshd[3720234]: Failed password for root from 103.149.93.239 port 45842 ssh2
...
show less
This IP address carried out 28 port scanning attempts on 16-10-2026. For more information or to repo ...
show moreThis IP address carried out 28 port scanning attempts on 16-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Report 2750912 with IP 3798481 for SSH brute-force attack by source 3793137 via ssh-honeypot/0.2.0+h ...
show moreReport 2750912 with IP 3798481 for SSH brute-force attack by source 3793137 via ssh-honeypot/0.2.0+http
show less
This IP address carried out 2 SSH credential attack (attempts) on 15-10-2026. For more information o ...
show moreThis IP address carried out 2 SSH credential attack (attempts) on 15-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-16T17:38:30.331878+02:00 fusco sshd-session[3118334]: Failed password for root from 103.149. ...
show more2026-10-16T17:38:30.331878+02:00 fusco sshd-session[3118334]: Failed password for root from 103.149.93.239 port 50316 ssh2
2026-10-16T17:38:33.242990+02:00 fusco sshd-session[3118337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.93.239 user=root
2026-10-16T17:38:35.171282+02:00 fusco sshd-session[3118337]: Failed password for root from 103.149.93.239 port 50332 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-16T18:12:35.604379+03:00 2426447-on24665.twc1.net sshd[270700]: pam_unix(sshd:auth): authent ...
show more2026-10-16T18:12:35.604379+03:00 2426447-on24665.twc1.net sshd[270700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.93.239 user=root
2026-10-16T18:12:37.514925+03:00 2426447-on24665.twc1.net sshd[270700]: Failed password for root from 103.149.93.239 port 55968 ssh2
...
show less
[AUTORAVALT][[15/10/2026 - 21:47:12 -03:00 UTC]
Attack from [103.149.93.239]-[RANGE:103.149.93.0 - 1 ...
show more[AUTORAVALT][[15/10/2026 - 21:47:12 -03:00 UTC]
Attack from [103.149.93.239]-[RANGE:103.149.93.0 - 103.149.93.255]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
Hacking
SSH
Showing 1 to
15
of 52 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩