This IP address has been reported a total of
53
times from
31 distinct
sources.
103.214.63.41 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-07-21T04:19:38.002616+00:00 de-fsn1-app1 sshd[1413880]: Invalid user test from 103.214.63.41 po ...
show more2026-07-21T04:19:38.002616+00:00 de-fsn1-app1 sshd[1413880]: Invalid user test from 103.214.63.41 port 13934
2026-07-21T04:35:38.789270+00:00 de-fsn1-app1 sshd[1414530]: Invalid user wpuser from 103.214.63.41 port 11382
2026-07-21T04:43:47.738876+00:00 de-fsn1-app1 sshd[1415022]: Invalid user git from 103.214.63.41 port 26256
...
show less
2026-07-21T04:29:28.953Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-07-21T04:29:28.953Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 103.214.63.41.
show less
(sshd) Failed SSH login from 103.214.63.41 (IN/-/-): 5 in the last 3600 secs; Ports: *; Direction: i ...
show more(sshd) Failed SSH login from 103.214.63.41 (IN/-/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 20 22:49:35 na-s3 sshd[2067153]: Invalid user edu from 103.214.63.41 port 44413
Jul 20 22:53:39 na-s3 sshd[2112976]: Invalid user johnny from 103.214.63.41 port 49431
Jul 20 23:09:31 na-s3 sshd[2285772]: Invalid user qyy from 103.214.63.41 port 62832
Jul 20 23:17:24 na-s3 sshd[2371398]: Invalid user ubuntu from 103.214.63.41 port 28463
Jul 20 23:21:23 na-s3 sshd[2413172]: Invalid user oracle from 103.214.63.41 port 46442
show less
Port Scan
Anonymous
2026-07-21T02:47:57.880956+00:00 de-fsn1-app1 sshd[1410165]: Invalid user edu from 103.214.63.41 por ...
show more2026-07-21T02:47:57.880956+00:00 de-fsn1-app1 sshd[1410165]: Invalid user edu from 103.214.63.41 port 10087
2026-07-21T02:52:45.522729+00:00 de-fsn1-app1 sshd[1410589]: Invalid user johnny from 103.214.63.41 port 33660
2026-07-21T03:08:41.326903+00:00 de-fsn1-app1 sshd[1411265]: Invalid user qyy from 103.214.63.41 port 6041
...
show less
2026-07-21T02:18:45.245579+00:00 localhost sshd[1475370]: Failed password for invalid user admin fro ...
show more2026-07-21T02:18:45.245579+00:00 localhost sshd[1475370]: Failed password for invalid user admin from 103.214.63.41 port 14929 ssh2
2026-07-21T02:22:34.097065+00:00 localhost sshd[1475417]: Invalid user httpd from 103.214.63.41 port 40456
2026-07-21T02:22:34.100574+00:00 localhost sshd[1475417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.63.41
2026-07-21T02:22:36.361096+00:00 localhost sshd[1475417]: Failed password for invalid user httpd from 103.214.63.41 port 40456 ssh2
2026-07-21T02:26:26.737123+00:00 localhost sshd[1475454]: Invalid user kube from 103.214.63.41 port 18817
...
show less
Brute-Force
SSH
Anonymous
2026-07-21T03:54:59.698025+02:00 hvs sshd-session[35874]: Disconnected from invalid user squid 103.2 ...
show more2026-07-21T03:54:59.698025+02:00 hvs sshd-session[35874]: Disconnected from invalid user squid 103.214.63.41 port 50789 [preauth]
2026-07-21T04:10:35.864668+02:00 hvs sshd-session[36132]: Disconnected from authenticating user root 103.214.63.41 port 33620 [preauth]
2026-07-21T04:14:29.756421+02:00 hvs sshd-session[36159]: Invalid user john from 103.214.63.41 port 35974
2026-07-21T04:14:29.906502+02:00 hvs sshd-session[36159]: Disconnected from invalid user john 103.214.63.41 port 35974 [preauth]
2026-07-21T04:18:26.573544+02:00 hvs sshd-session[36211]: Invalid user admin from 103.214.63.41 port 6884
...
show less
2026-07-21T01:59:12.379970+00:00 localhost sshd[1475098]: pam_unix(sshd:auth): authentication failur ...
show more2026-07-21T01:59:12.379970+00:00 localhost sshd[1475098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.63.41 user=root
2026-07-21T01:59:14.700817+00:00 localhost sshd[1475098]: Failed password for root from 103.214.63.41 port 14794 ssh2
2026-07-21T02:07:01.741381+00:00 localhost sshd[1475214]: Invalid user demo from 103.214.63.41 port 57496
2026-07-21T02:07:01.744496+00:00 localhost sshd[1475214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.63.41
2026-07-21T02:07:03.924295+00:00 localhost sshd[1475214]: Failed password for invalid user demo from 103.214.63.41 port 57496 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-07-21T03:43:13.317593+02:00 hvs sshd-session[35780]: Invalid user git from 103.214.63.41 port 2 ...
show more2026-07-21T03:43:13.317593+02:00 hvs sshd-session[35780]: Invalid user git from 103.214.63.41 port 24082
2026-07-21T03:43:13.466438+02:00 hvs sshd-session[35780]: Disconnected from invalid user git 103.214.63.41 port 24082 [preauth]
2026-07-21T03:47:10.554781+02:00 hvs sshd-session[35812]: Invalid user neeraj from 103.214.63.41 port 37507
2026-07-21T03:47:10.722718+02:00 hvs sshd-session[35812]: Disconnected from invalid user neeraj 103.214.63.41 port 37507 [preauth]
2026-07-21T03:54:59.528570+02:00 hvs sshd-session[35874]: Invalid user squid from 103.214.63.41 port 50789
...
show less
2026-07-21T01:35:47.375736+00:00 localhost sshd[1474727]: Failed password for invalid user mcuser fr ...
show more2026-07-21T01:35:47.375736+00:00 localhost sshd[1474727]: Failed password for invalid user mcuser from 103.214.63.41 port 22839 ssh2
2026-07-21T01:39:38.853068+00:00 localhost sshd[1474766]: Invalid user tom from 103.214.63.41 port 62115
2026-07-21T01:39:38.855996+00:00 localhost sshd[1474766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.63.41
2026-07-21T01:39:41.146555+00:00 localhost sshd[1474766]: Failed password for invalid user tom from 103.214.63.41 port 62115 ssh2
2026-07-21T01:43:33.451732+00:00 localhost sshd[1474847]: Invalid user git from 103.214.63.41 port 34921
...
show less
Brute-Force
SSH
Anonymous
2026-07-21T03:15:51.817128+02:00 hvs sshd-session[35495]: Disconnected from authenticating user root ...
show more2026-07-21T03:15:51.817128+02:00 hvs sshd-session[35495]: Disconnected from authenticating user root 103.214.63.41 port 26187 [preauth]
2026-07-21T03:23:43.311602+02:00 hvs sshd-session[35576]: Invalid user runner from 103.214.63.41 port 36449
2026-07-21T03:23:43.480068+02:00 hvs sshd-session[35576]: Disconnected from invalid user runner 103.214.63.41 port 36449 [preauth]
2026-07-21T03:27:38.851872+02:00 hvs sshd-session[35610]: Invalid user oracle from 103.214.63.41 port 16994
2026-07-21T03:27:39.001209+02:00 hvs sshd-session[35610]: Disconnected from invalid user oracle 103.214.63.41 port 16994 [preauth]
...
show less
2026-07-21T02:52:26.444608+02:00 hvs sshd-session[35158]: Invalid user lee from 103.214.63.41 port 5 ...
show more2026-07-21T02:52:26.444608+02:00 hvs sshd-session[35158]: Invalid user lee from 103.214.63.41 port 52468
2026-07-21T02:52:26.587568+02:00 hvs sshd-session[35158]: Disconnected from invalid user lee 103.214.63.41 port 52468 [preauth]
2026-07-21T02:56:21.522587+02:00 hvs sshd-session[35207]: Invalid user iptv from 103.214.63.41 port 5829
2026-07-21T02:56:21.671816+02:00 hvs sshd-session[35207]: Disconnected from invalid user iptv 103.214.63.41 port 5829 [preauth]
2026-07-21T03:00:20.941831+02:00 hvs sshd-session[35234]: Disconnected from authenticating user root 103.214.63.41 port 29205 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 53 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩