This IP address has been reported a total of
271
times from
158 distinct
sources.
103.99.214.143 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-18T23:14:08.288190+00:00 cdn-nl sshd[1746733]: Invalid user kkk from 103.99.214.143 port 511 ...
show more2026-07-18T23:14:08.288190+00:00 cdn-nl sshd[1746733]: Invalid user kkk from 103.99.214.143 port 51124
2026-07-18T23:22:11.767156+00:00 cdn-nl sshd[1746963]: Invalid user dev from 103.99.214.143 port 59714
2026-07-18T23:24:43.963437+00:00 cdn-nl sshd[1747043]: Invalid user online from 103.99.214.143 port 42810
...
show less
2026-07-18T23:21:13.796211+00:00 de-fra01 sshd-session[1714646]: Invalid user dev from 103.99.214.14 ...
show more2026-07-18T23:21:13.796211+00:00 de-fra01 sshd-session[1714646]: Invalid user dev from 103.99.214.143 port 59462
2026-07-18T23:23:42.777406+00:00 de-fra01 sshd-session[1716150]: Connection from 103.99.214.143 port 60782 on 37.114.50.122 port 22 rdomain ""
2026-07-18T23:23:43.712622+00:00 de-fra01 sshd-session[1716150]: Invalid user online from 103.99.214.143 port 60782
...
show less
Brute-Force
SSH
Anonymous
Fail2ban (sshd jail): 2 failed SSH attempts from 103.99.214.143.
Brute-Force
SSH
Anonymous
2026-07-19T01:13:18.240210+02:00 mail sshd[432240]: Failed password for invalid user kkk from 103.99 ...
show more2026-07-19T01:13:18.240210+02:00 mail sshd[432240]: Failed password for invalid user kkk from 103.99.214.143 port 39478 ssh2
2026-07-19T01:15:51.733628+02:00 mail sshd[432333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.214.143 user=root
2026-07-19T01:15:53.590053+02:00 mail sshd[432333]: Failed password for root from 103.99.214.143 port 52936 ssh2
2026-07-19T01:18:40.554003+02:00 mail sshd[432652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.214.143 user=root
2026-07-19T01:18:43.277918+02:00 mail sshd[432652]: Failed password for root from 103.99.214.143 port 58816 ssh2
...
show less
Cluster member (Omitted) (US/United States/-) said, DENY 103.99.214.143, Reason:[(sshd) Failed SSH l ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 103.99.214.143, Reason:[(sshd) Failed SSH login from 103.99.214.143 (ID/Indonesia/-): 3 in the last 3600 secs]
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-07-18. Risk score: 100/100.
show less
Brute-Force
SSH
Anonymous
2026-07-18 18:21:06,816 fail2ban.actions [17874]: NOTICE [sshd] Ban 103.99.214.143
2026-07-1 ...
show more2026-07-18 18:21:06,816 fail2ban.actions [17874]: NOTICE [sshd] Ban 103.99.214.143
2026-07-18 18:42:13,162 fail2ban.actions [17874]: NOTICE [sshd] Ban 103.99.214.143
2026-07-18 18:58:10,390 fail2ban.actions [17874]: NOTICE [sshd] Ban 103.99.214.143
2026-07-18 19:22:42,976 fail2ban.actions [17874]: NOTICE [sshd] Ban 103.99.214.143
2026-07-18 19:43:50,436 fail2ban.actions [17874]: NOTICE [sshd] Ban 103.99.214.143
...
show less
2026-07-18T09:15:42.568385-07:00 maoyue-yyz1 sshd-session[2186891]: Invalid user moon from 103.99.21 ...
show more2026-07-18T09:15:42.568385-07:00 maoyue-yyz1 sshd-session[2186891]: Invalid user moon from 103.99.214.143 port 57308
2026-07-18T09:15:42.843845-07:00 maoyue-yyz1 sshd-session[2186891]: Disconnected from invalid user moon 103.99.214.143 port 57308 [preauth]
2026-07-18T09:19:12.946669-07:00 maoyue-yyz1 sshd-session[2187548]: Invalid user jeff from 103.99.214.143 port 51158
2026-07-18T09:19:13.212150-07:00 maoyue-yyz1 sshd-session[2187548]: Disconnected from invalid user jeff 103.99.214.143 port 51158 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 271 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩