This IP address has been reported a total of
133
times from
28 distinct
sources.
103.212.120.214 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 59
reports;
United States of America
with 22
reports;
Bulgaria
with 19
reports.
The most common categories in these recent reports were:
SSH
130
times;
Brute-Force
130
times;
DDoS Attack
40
times;
Web Spam
39
times;
Ping of Death
39
times;
Other
87
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-04T22:56:49.333642+00:00 alertalicitacao sshd[4107037]: User root from 103.212.120.214 not a ...
show more2026-10-04T22:56:49.333642+00:00 alertalicitacao sshd[4107037]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
2026-10-04T23:01:54.144399+00:00 alertalicitacao sshd[4107902]: Connection from 103.212.120.214 port 36606 on 192.168.100.167 port 22 rdomain ""
2026-10-04T23:01:55.856404+00:00 alertalicitacao sshd[4107902]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
2026-10-04T23:03:14.305784+00:00 alertalicitacao sshd[4108090]: Connection from 103.212.120.214 port 38858 on 192.168.100.167 port 22 rdomain ""
2026-10-04T23:03:16.465887+00:00 alertalicitacao sshd[4108090]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
...
show less
2026-10-04T23:00:00.597077+00:00 kansas1 sshd[3756500]: Failed password for root from 103.212.120.21 ...
show more2026-10-04T23:00:00.597077+00:00 kansas1 sshd[3756500]: Failed password for root from 103.212.120.214 port 34468 ssh2
2026-10-04T23:00:32.485744+00:00 kansas1 sshd[3756624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.212.120.214 user=root
2026-10-04T23:00:33.963190+00:00 kansas1 sshd[3756624]: Failed password for root from 103.212.120.214 port 45710 ssh2
...
show less
SSH honeypot: logged in as 'trade-able'/'TRADE-ABLE@2022' and ran 1 command(s), e.g.: uname -a 2>/de ...
show moreSSH honeypot: logged in as 'trade-able'/'TRADE-ABLE@2022' and ran 1 command(s), e.g.: uname -a 2>/dev/null
show less
2026-10-04T22:02:06.949173+00:00 alertalicitacao sshd[4097377]: User root from 103.212.120.214 not a ...
show more2026-10-04T22:02:06.949173+00:00 alertalicitacao sshd[4097377]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
2026-10-04T22:07:10.661012+00:00 alertalicitacao sshd[4098215]: Connection from 103.212.120.214 port 60092 on 192.168.100.167 port 22 rdomain ""
2026-10-04T22:07:12.027156+00:00 alertalicitacao sshd[4098215]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
2026-10-04T22:08:32.144499+00:00 alertalicitacao sshd[4098461]: Connection from 103.212.120.214 port 60750 on 192.168.100.167 port 22 rdomain ""
2026-10-04T22:08:35.559333+00:00 alertalicitacao sshd[4098461]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
...
show less
2026-10-04T21:52:41.911005+00:00 kansas1 sshd[3751929]: Failed password for root from 103.212.120.21 ...
show more2026-10-04T21:52:41.911005+00:00 kansas1 sshd[3751929]: Failed password for root from 103.212.120.214 port 35944 ssh2
2026-10-04T21:54:18.571118+00:00 kansas1 sshd[3752038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.212.120.214 user=root
2026-10-04T21:54:20.490013+00:00 kansas1 sshd[3752038]: Failed password for root from 103.212.120.214 port 37914 ssh2
...
show less
2026-10-04T21:07:00.711803+00:00 alertalicitacao sshd[4087709]: User root from 103.212.120.214 not a ...
show more2026-10-04T21:07:00.711803+00:00 alertalicitacao sshd[4087709]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
2026-10-04T21:12:21.294571+00:00 alertalicitacao sshd[4088701]: Connection from 103.212.120.214 port 33138 on 192.168.100.167 port 22 rdomain ""
2026-10-04T21:12:23.103823+00:00 alertalicitacao sshd[4088701]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
2026-10-04T21:13:40.385165+00:00 alertalicitacao sshd[4088902]: Connection from 103.212.120.214 port 51780 on 192.168.100.167 port 22 rdomain ""
2026-10-04T21:13:42.191082+00:00 alertalicitacao sshd[4088902]: User root from 103.212.120.214 not allowed because not listed in AllowUsers
...
show less
2026-10-04T20:40:24.503093+00:00 kansas1 sshd[3747189]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-04T20:40:24.503093+00:00 kansas1 sshd[3747189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.212.120.214
2026-10-04T20:40:26.707098+00:00 kansas1 sshd[3747189]: Failed password for invalid user bbdspread from 103.212.120.214 port 49838 ssh2
2026-10-04T20:43:42.862399+00:00 kansas1 sshd[3747422]: Invalid user charlie from 103.212.120.214 port 58260
...
show less
Detected 2 distributed attacks from 103.212.120.214. LF_DISTATTACK; Logs: 2026-10-04T22:28:12.059976 ...
show moreDetected 2 distributed attacks from 103.212.120.214. LF_DISTATTACK; Logs: 2026-10-04T22:28:12.059976+02:00 vps1 sshd-session[1453601]: Invalid user ubuntu from 103.212.120.214 port 33288 2026-10-04T22:28:25.774314+02:00 vps1 sshd-session[1453923]: Invalid user ubuntu from 103.212.120.214 port 39668
show less
