This IP address has been reported a total of
68
times from
49 distinct
sources.
103.94.129.4 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 19
reports;
United States of America
with 12
reports;
Czechia
with 6
reports.
The most common categories in these recent reports were:
Brute-Force
56
times;
SSH
56
times;
Port Scan
4
times;
Hacking
2
times;
Web App Attack
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 11 14:22:12 ns41 sshd[3292725]: Invalid user ftpuser1 from 103.94.129.4 port 47472
Oct 11 14:22: ...
show moreOct 11 14:22:12 ns41 sshd[3292725]: Invalid user ftpuser1 from 103.94.129.4 port 47472
Oct 11 14:22:12 ns41 sshd[3292725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.129.4
Oct 11 14:22:12 ns41 sshd[3292725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.129.4
...
show less
Oct 11 13:44:37 ns41 sshd[3289862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreOct 11 13:44:37 ns41 sshd[3289862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.129.4 user=root
Oct 11 13:44:39 ns41 sshd[3289862]: Failed password for root from 103.94.129.4 port 51930 ssh2
Oct 11 13:51:20 ns41 sshd[3290196]: Invalid user botuser from 103.94.129.4 port 52240
Oct 11 13:51:20 ns41 sshd[3290196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.129.4
Oct 11 13:51:22 ns41 sshd[3290196]: Failed password for invalid user botuser from 103.94.129.4 port 52240 ssh2
...
show less
SSH brute-force (5 failed logins), auto-banned by fail2ban
Brute-Force
SSH
Anonymous
2026-10-11T10:38:35.770532+00:00 tacalp-srv sshd[4169864]: Failed password for root from 103.94.129. ...
show more2026-10-11T10:38:35.770532+00:00 tacalp-srv sshd[4169864]: Failed password for root from 103.94.129.4 port 38082 ssh2
2026-10-11T10:40:19.187005+00:00 tacalp-srv sshd[4170317]: Invalid user tamil from 103.94.129.4 port 50336
2026-10-11T10:40:19.190025+00:00 tacalp-srv sshd[4170317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.129.4
2026-10-11T10:40:21.040352+00:00 tacalp-srv sshd[4170317]: Failed password for invalid user tamil from 103.94.129.4 port 50336 ssh2
2026-10-11T10:42:05.016086+00:00 tacalp-srv sshd[4170661]: Invalid user raju from 103.94.129.4 port 37104
...
show less
Brute-Force
SSH
Anonymous
2026-10-11T10:24:50.399473+00:00 tacalp-srv sshd[4167124]: Invalid user admin from 103.94.129.4 port ...
show more2026-10-11T10:24:50.399473+00:00 tacalp-srv sshd[4167124]: Invalid user admin from 103.94.129.4 port 41670
2026-10-11T10:24:50.402414+00:00 tacalp-srv sshd[4167124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.129.4
2026-10-11T10:24:52.719278+00:00 tacalp-srv sshd[4167124]: Failed password for invalid user admin from 103.94.129.4 port 41670 ssh2
2026-10-11T10:26:40.545090+00:00 tacalp-srv sshd[4167512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.129.4 user=root
2026-10-11T10:26:43.298371+00:00 tacalp-srv sshd[4167512]: Failed password for root from 103.94.129.4 port 44754 ssh2
...
show less
Oct 11 09:49:54 hecnet-us-east-gw sshd[2386202]: Invalid user inssserver from 103.94.129.4 port 5796 ...
show moreOct 11 09:49:54 hecnet-us-east-gw sshd[2386202]: Invalid user inssserver from 103.94.129.4 port 57964
Oct 11 09:49:56 hecnet-us-east-gw sshd[2386202]: Failed password for invalid user inssserver from 103.94.129.4 port 57964 ssh2
Oct 11 09:49:57 hecnet-us-east-gw sshd[2386202]: Disconnected from invalid user inssserver 103.94.129.4 port 57964 [preauth]
...
show less
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 18, successful ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 18, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (ch1) over 2026-10-09..2026-10-09. Reported by an SSH honeypot network; no production service involved.
show less
