This IP address has been reported a total of
45
times from
38 distinct
sources.
103.214.63.104 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 15
reports;
United States of America
with 6
reports;
Finland
with 4
reports.
The most common categories in these recent reports were:
Brute-Force
40
times;
SSH
37
times;
Port Scan
3
times;
FTP Brute-Force
2
times;
DDoS Attack
1
time;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-20T13:35:14.262796-07:00 server.vexstria.pro sshd[1399866]: Invalid user palworld from 103.2 ...
show more2026-10-20T13:35:14.262796-07:00 server.vexstria.pro sshd[1399866]: Invalid user palworld from 103.214.63.104 port 44722
2026-10-20T13:35:14.264523-07:00 server.vexstria.pro sshd[1399866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.63.104
2026-10-20T13:35:16.355940-07:00 server.vexstria.pro sshd[1399866]: Failed password for invalid user palworld from 103.214.63.104 port 44722 ssh2
...
show less
2026-10-20T18:15:23.833868+00:00 aws.vandogh.org sshd-session[482513]: Failed password for invalid u ...
show more2026-10-20T18:15:23.833868+00:00 aws.vandogh.org sshd-session[482513]: Failed password for invalid user support from 103.214.63.104 port 52141 ssh2
2026-10-20T18:24:17.723946+00:00 aws.vandogh.org sshd-session[482622]: Invalid user celery from 103.214.63.104 port 14513
2026-10-20T18:24:17.726754+00:00 aws.vandogh.org sshd-session[482622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.63.104
2026-10-20T18:24:19.697067+00:00 aws.vandogh.org sshd-session[482622]: Failed password for invalid user celery from 103.214.63.104 port 14513 ssh2
...
show less
2026-10-20T23:10:20.661703+08:00 kltw-debian sshd[478021]: Disconnected from authenticating user roo ...
show more2026-10-20T23:10:20.661703+08:00 kltw-debian sshd[478021]: Disconnected from authenticating user root 103.214.63.104 port 1970 [preauth]
2026-10-20T23:21:02.882874+08:00 kltw-debian sshd[478059]: Disconnected from authenticating user root 103.214.63.104 port 4174 [preauth]
2026-10-20T23:28:08.557863+08:00 kltw-debian sshd[478064]: Invalid user andres from 103.214.63.104 port 60666
2026-10-20T23:28:08.692413+08:00 kltw-debian sshd[478064]: Disconnected from invalid user andres 103.214.63.104 port 60666 [preauth]
2026-10-20T23:29:57.076066+08:00 kltw-debian sshd[478067]: Disconnected from authenticating user root 103.214.63.104 port 9135 [preauth]
...
show less
NetWatch sensor network: The IP 103.214.63.104 executed unauthorized SSH login attempts.
Brute-Force
SSH
Anonymous
sshd
Brute-Force
SSH
Anonymous
2026-10-20T12:57:53.902523+00:00 de-fsn1-app1 sshd[3836727]: Invalid user deploy from 103.214.63.104 ...
show more2026-10-20T12:57:53.902523+00:00 de-fsn1-app1 sshd[3836727]: Invalid user deploy from 103.214.63.104 port 32253
2026-10-20T13:03:02.142786+00:00 de-fsn1-app1 sshd[3837917]: Invalid user ubuntu from 103.214.63.104 port 46081
2026-10-20T13:08:31.635791+00:00 de-fsn1-app1 sshd[3838836]: Invalid user user1 from 103.214.63.104 port 7891
...
show less
