This IP address has been reported a total of
12
times from
11 distinct
sources.
103.99.17.3 was first reported on
October 8th 2026 , and the most recent report was
3 hours ago Germany
with 3
reports;
Italy
with 3
reports;
Belgium
with 1
report.
The most common categories in these recent reports were:
Brute-Force
9
times;
Web App Attack
2
times;
Bad Web Bot
1
time;
FTP Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
idfo
2026-10-26 19:45:03
(3 hours ago)
warning: unknown[103.99.17.3]: SASL LOGIN authentication failed: (reason unavailable)
Brute-Force
🇮🇹
CoreTech srl
2026-10-26 18:52:33
(3 hours ago)
Smartermail 19:47:22.339 [79.154.1.136] SMTP Login failed: Incorrect email address [undergroundsound ...
show more
Smartermail 19:47:22.339 [79.154.1.136] SMTP Login failed: Incorrect email address [undergroundsound]Smartermail 19:47:22.339 [79.154.1.136] SMTP Login failed: Username or password is incorrect.is-6411d9d7 19:47:53.029 [124.115.64.232] SMTP Login failed: Username or password is incorrect.is-6411d9d7 19:47:53.029 [124.115.64.232] SMTP Login failed: Domain [ideaformat.it] not foundSmartermail 19:47:55.392 [115.77.154.236] SMTP Login failed: Domain [midifendo.it] not foundSmartermail 19:47:55.392 [115.77.154.236] SMTP Login failed: Username or password is incorrect.Smartermail 19:48:02.505 [95.190.6.221] SMTP Login failed: Username or password is incorrect.Smartermail 19:48:02.505 [95.190.6.221] SMTP Login failed: Domain [paltours.it] not foundSmartermail 19:48:04.967 [103.99.17.3] SMTP Login failed: Incorrect email address [clienti.amazon]Smartermail 19:48:04.967 [103.99.17.3] SMTP Login failed: Username or password is incorrect.
show less
Brute-Force
🇩🇪
DocNetzwerk
2026-10-26 14:13:16
(8 hours ago)
(smtpauth) Failed SMTP AUTH login from 103.99.17.3 (IN/India/-)
Brute-Force
🇮🇹
VHosting
2026-10-26 13:15:04
(9 hours ago)
Detected mail brute force attack from different servers
Brute-Force
🇺🇦
MakselPr
2026-10-26 12:50:39
(9 hours ago)
Oct 26 10:08:36 mail postfix/smtpd[1356164]: warning: unknown[103.99.17.3]: SASL LOGIN authenticatio ...
show more
Oct 26 10:08:36 mail postfix/smtpd[1356164]: warning: unknown[103.99.17.3]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=gww
Oct 26 14:50:38 mail postfix/smtpd[1371382]: warning: unknown[103.99.17.3]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=verwaltungsbeamte
...
show less
Brute-Force
🇮🇹
CoreTech srl
2026-10-26 12:47:38
(9 hours ago)
"SMTP Login failed": count(IP)=12.0is-6411d9d7 13:44:44.635 [98.174.60.198] SMTP Login failed: Domai ...
show more
"SMTP Login failed": count(IP)=12.0is-6411d9d7 13:44:44.635 [98.174.60.198] SMTP Login failed: Domain [rodo.it] not foundis-6411d9d7 13:44:44.635 [98.174.60.198] SMTP Login failed: Username or password is incorrect.is-6411d9d7 13:44:52.792 [203.221.63.201] SMTP Login failed: Incorrect email address [rudi.mari]is-6411d9d7 13:44:52.792 [203.221.63.201] SMTP Login failed: Username or password is incorrect.mail3-dc1 13:45:14.159 [103.99.17.3] SMTP Login failed: Username or password is incorrect.mail3-dc1 13:45:14.159 [103.99.17.3] SMTP Login failed: Incorrect password for user [[email protected] ]mail3-dc1 13:45:21.371 [121.131.220.167] SMTP Login failed: Incorrect email address [mario]mail3-dc1 13:45:21.371 [121.131.220.167] SMTP Login failed: Username or password is incorrect.Smartermail 13:45:37.559 [24.102.254.70] SMTP Login failed: Username or password is incorrect.
show less
Brute-Force
🇭🇺
Lacika555
2026-10-26 11:59:06
(10 hours ago)
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇩🇪
EGP Abuse Dept
2026-10-26 07:37:32
(15 hours ago)
SMTP AUTH attack
Brute-Force
🇵🇱
ArtLion
2026-10-26 06:46:15
(16 hours ago)
SMTP AUTH brute force on port 587
Brute-Force
🇩🇪
MusicLibrary
2026-10-19 02:27:59
(1 week ago)
Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-10-15 06:28:31
(1 week ago)
Accessed trap at '/wp-login.php'
Web App Attack
2026-10-08 14:28:02
(2 weeks ago)
2026-10-08 07:28:02,095 server-866667.chao.iondata.systems proftpd[2951222] 0.0.0.0 (103.99.17.3[103 ...
show more
2026-10-08 07:28:02,095 server-866667.chao.iondata.systems proftpd[2951222] 0.0.0.0 (103.99.17.3[103.99.17.3]): USER user: no such user found from 103.99.17.3 [103.99.17.3] to ::ffff:129.121.100.75:2222
...
show less
FTP Brute-Force
Showing 1 to
12
of 12 reports
