This IP address has been reported a total of
29
times from
21 distinct
sources.
103.213.95.199 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-07-25T04:10:58.321287+08:00 HKCM1-20251208195653fcc911 sshd[64952]: Failed password for invalid ...
show more2026-07-25T04:10:58.321287+08:00 HKCM1-20251208195653fcc911 sshd[64952]: Failed password for invalid user ubuntu from 103.213.95.199 port 39130 ssh2
2026-07-25T04:35:32.536055+08:00 HKCM1-20251208195653fcc911 sshd[64970]: Invalid user ubuntu from 103.213.95.199 port 57634
2026-07-25T04:35:32.551372+08:00 HKCM1-20251208195653fcc911 sshd[64970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.95.199
2026-07-25T04:35:34.510897+08:00 HKCM1-20251208195653fcc911 sshd[64970]: Failed password for invalid user ubuntu from 103.213.95.199 port 57634 ssh2
2026-07-25T05:00:01.258819+08:00 HKCM1-20251208195653fcc911 sshd[65023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.95.199 user=root
2026-07-25T05:00:02.883064+08:00 HKCM1-20251208195653fcc911 sshd[65023]: Failed password for root from 103.213.95.199 port 47906 ssh2
...
show less
(sshd) Failed SSH login from 103.213.95.199 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 103.213.95.199 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 25 01:29:56 ded01 sshd[1590354]: Did not receive identification string from 103.213.95.199 port 53496
Jul 25 01:30:04 ded01 sshd[1591646]: Did not receive identification string from 103.213.95.199 port 45198
Jul 25 01:30:53 ded01 sshd[1592194]: Did not receive identification string from 103.213.95.199 port 42096
Jul 25 01:39:35 ded01 sshd[1598618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.95.199 user=root
Jul 25 01:39:37 ded01 sshd[1598618]: Failed password for root from 103.213.95.199 port 43626 ssh2
show less
2026-07-24T00:13:00.193735+00:00 Canada1 sshd-session[475643]: Unable to negotiate with 103.213.95.1 ...
show more2026-07-24T00:13:00.193735+00:00 Canada1 sshd-session[475643]: Unable to negotiate with 103.213.95.199 port 43258: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-07-24T03:58:55.735193+00:00 Canada1 sshd-session[3369855]: Unable to negotiate with 103.213.95.199 port 38122: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less
Malicious activity from 103.213.95.199 detected by FDC honeypots. Categories: 14,15,18,22. 6 events ...
show moreMalicious activity from 103.213.95.199 detected by FDC honeypots. Categories: 14,15,18,22. 6 events in last 24h.
show less
2026-07-23T23:12:57.217393+00:00 thelemmy.club sshd-session[902313]: Unable to negotiate with 103.21 ...
show more2026-07-23T23:12:57.217393+00:00 thelemmy.club sshd-session[902313]: Unable to negotiate with 103.213.95.199 port 45330: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-07-24T02:59:12.297618+00:00 thelemmy.club sshd-session[1108667]: Unable to negotiate with 103.213.95.199 port 40194: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less
(sshd) Failed SSH login from 103.213.95.199 (CN/-/-): 5 in the last 3600 secs; Ports: *; Direction: ...
show more(sshd) Failed SSH login from 103.213.95.199 (CN/-/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 23 20:54:07 na-s3 sshd[4018794]: Invalid user ubuntu from 103.213.95.199 port 35668
Jul 23 21:12:20 na-s3 sshd[28651]: Invalid user ubuntu from 103.213.95.199 port 42814
Jul 23 21:23:12 na-s3 sshd[149629]: Invalid user ubuntu from 103.213.95.199 port 36232
Jul 23 21:32:06 na-s3 sshd[251165]: Invalid user ubuntu from 103.213.95.199 port 60080
Jul 23 21:32:58 na-s3 sshd[261210]: Invalid user ubuntu from 103.213.95.199 port 44116
show less
Jul 24 02:13:08 honeypot sshd[18210]: Failed password for root from 103.213.95.199 port 53686 ssh2
. ...
show moreJul 24 02:13:08 honeypot sshd[18210]: Failed password for root from 103.213.95.199 port 53686 ssh2
...
show less