This IP address has been reported a total of
13
times from
11 distinct
sources.
103.67.196.164 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-22T18:42:52.230112+02:00 ipoac.nl sshd-session-: Unable to negotiate with 103.67.196.164 por ...
show more2026-08-22T18:42:52.230112+02:00 ipoac.nl sshd-session-: Unable to negotiate with 103.67.196.164 port 52812: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-08-22T19:13:28.498132+02:00 ipoac.nl sshd-session-: Unable to negotiate with 103.67.196.164 port 43792: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-08-22T19:13:28.498132+02:00 ipoac.nl sshd-session-: Unable to negotiate with 103.67.196.164 port 43792: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-08-22T19:14:14.010886+02:00 ipoac.nl sshd-session-: Unable to negotiate with 103.67.196.164 port 34022: no matching key exc
show less
2026-08-22T16:49:50.011404+02:00 ipoac.nl sshd-session-: Connection closed by 103.67.196.164 port 36 ...
show more2026-08-22T16:49:50.011404+02:00 ipoac.nl sshd-session-: Connection closed by 103.67.196.164 port 36890 [preauth]
2026-08-22T16:50:40.233294+02:00 ipoac.nl sshd-session-: Connection closed by 103.67.196.164 port 56560 [preauth]
2026-08-22T16:50:56.201177+02:00 ipoac.nl sshd-session-: Connection closed by 103.67.196.164 port 52988 [preauth]
2026-08-22T16:52:24.387783+02:00 ipoac.nl sshd-session-: Connection closed by 103.67.196.164 port 39492 [preauth]
2026-08-22T16:53:15.771190+02:00 ipoac.nl sshd-session-: Connection closed by 103.67.196.164 port 56040 [preauth]
2026-08-22T16:53:18.498977+02:00 ipoac.nl sshd-session-: Connection closed by 103.67.196.164 port 54278 [preauth]
2026-08-22T17:25:36.797663+02:00 ipoac.nl sshd-session-: Unable to negotiate with 103.67.196.164 port 58020: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-08-22T17:26:22.349058+02:00 ipoac.n
show less
Automated trigger via Nginx Police. Reason: FAKE-USER-BOT. Trigger Log: 2026-08-22T21:04:23.670422+0 ...
show moreAutomated trigger via Nginx Police. Reason: FAKE-USER-BOT. Trigger Log: 2026-08-22T21:04:23.670422+05:30 vm774288012 sshd[794003]: Failed password for invalid user root from 103.67.196.164 port 46814 ssh2
show less
2026-08-21T23:58:54.120759+02:00 webmail sshd[1863595]: Invalid user ubuntu from 103.67.196.164 port ...
show more2026-08-21T23:58:54.120759+02:00 webmail sshd[1863595]: Invalid user ubuntu from 103.67.196.164 port 48332
2026-08-22T02:22:02.592315+02:00 webmail sshd[2256768]: Invalid user ubuntu from 103.67.196.164 port 46432
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 103.67.196.164
Targeted device: NAS
Firs ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 103.67.196.164
Targeted device: NAS
First seen: 21 Aug 2026 12:37:50 UTC
Last seen: 21 Aug 2026 16:57:41 UTC
Attempts: 4
Client: SSH-2.0-phpseclib_1.0 (openssl)
Sample credentials: root:123456, ubuntu:ubuntu, ubuntu:123456, ubuntu:1m1m1m
show less
Brute-Force
SSH
IoT Targeted
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩