This IP address has been reported a total of
310
times from
210 distinct
sources.
103.99.214.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 103.99.214.149 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Dir ...
show more(sshd) Failed SSH login from 103.99.214.149 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 9 13:37:56 10231 sshd[28075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.214.149 user=root
Jul 9 13:37:58 10231 sshd[28075]: Failed password for root from 103.99.214.149 port 49214 ssh2
Jul 9 13:47:07 10231 sshd[1080]: Invalid user teamspeak from 103.99.214.149 port 56850
Jul 9 13:47:09 10231 sshd[1080]: Failed password for invalid user teamspeak from 103.99.214.149 port 56850 ssh2
Jul 9 13:49:01 10231 sshd[1932]: Invalid user jb from 103.99.214.149 port 53448
show less
2026-07-09T18:41:51.288472+02:00 fusco sshd-session[3053309]: pam_unix(sshd:auth): authentication fa ...
show more2026-07-09T18:41:51.288472+02:00 fusco sshd-session[3053309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.214.149
2026-07-09T18:41:53.231364+02:00 fusco sshd-session[3053309]: Failed password for invalid user icp from 103.99.214.149 port 35280 ssh2
2026-07-09T18:44:58.649961+02:00 fusco sshd-session[3056339]: Invalid user odoo from 103.99.214.149 port 45622
...
show less
Automated sensor: 9 SSH brute-force attempts over the last 24h (latest 2026-07-09T14:59Z). Usernames ...
show moreAutomated sensor: 9 SSH brute-force attempts over the last 24h (latest 2026-07-09T14:59Z). Usernames tried: dspace, family, root.
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: dspace:dspace@2025
• Number o ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: dspace:dspace@2025
• Number of login attempts: 1
• Client: SSH-2.0-libssh_0.9.6
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-07-09T14:50:02.299687+02:00 v2202104133598150667 sshd[1302415]: Invalid user teamcity from 103. ...
show more2026-07-09T14:50:02.299687+02:00 v2202104133598150667 sshd[1302415]: Invalid user teamcity from 103.99.214.149 port 59768
2026-07-09T14:59:32.630657+02:00 v2202104133598150667 sshd[1307873]: Invalid user Guest from 103.99.214.149 port 48006
2026-07-09T15:01:47.026151+02:00 v2202104133598150667 sshd[1309215]: Invalid user roots from 103.99.214.149 port 45946
...
show less
2026-07-09T08:42:31.449606-04:00 site sshd-session[126740]: User root from 103.99.214.149 not allowe ...
show more2026-07-09T08:42:31.449606-04:00 site sshd-session[126740]: User root from 103.99.214.149 not allowed because not listed in AllowUsers
2026-07-09T08:49:27.431921-04:00 site sshd-session[126755]: Invalid user teamcity from 103.99.214.149 port 41376
2026-07-09T08:51:53.623987-04:00 site sshd-session[126760]: User root from 103.99.214.149 not allowed because not listed in AllowUsers
...
show less
2026-07-09T12:53:14.065269+02:00 lw-dedi-hdz-10g2480-ams sshd-session[3129690]: Invalid user ftpuser ...
show more2026-07-09T12:53:14.065269+02:00 lw-dedi-hdz-10g2480-ams sshd-session[3129690]: Invalid user ftpuser from 103.99.214.149 port 34236
2026-07-09T13:04:57.570136+02:00 lw-dedi-hdz-10g2480-ams sshd-session[3130974]: Invalid user student1 from 103.99.214.149 port 57292
2026-07-09T13:10:39.030385+02:00 lw-dedi-hdz-10g2480-ams sshd-session[3131631]: Invalid user mcbserver from 103.99.214.149 port 51006
...
show less
(sshd) Failed SSH login from 103.99.214.149 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Dir ...
show more(sshd) Failed SSH login from 103.99.214.149 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 9 06:01:16 14084 sshd[31625]: Invalid user ftpuser from 103.99.214.149 port 42020
Jul 9 06:01:18 14084 sshd[31625]: Failed password for invalid user ftpuser from 103.99.214.149 port 42020 ssh2
Jul 9 06:05:55 14084 sshd[1661]: Invalid user student1 from 103.99.214.149 port 40780
Jul 9 06:05:57 14084 sshd[1661]: Failed password for invalid user student1 from 103.99.214.149 port 40780 ssh2
Jul 9 06:07:50 14084 sshd[2766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.214.149 user=root
show less
2026-07-09T11:04:59.613764+00:00 Leaderscartel sshd[3971213]: Failed password for invalid user stude ...
show more2026-07-09T11:04:59.613764+00:00 Leaderscartel sshd[3971213]: Failed password for invalid user student1 from 103.99.214.149 port 47914 ssh2
2026-07-09T11:06:50.993032+00:00 Leaderscartel sshd[3971278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.214.149 user=root
2026-07-09T11:06:53.365746+00:00 Leaderscartel sshd[3971278]: Failed password for root from 103.99.214.149 port 36878 ssh2
...
show less
2026-07-09T11:01:35.888177+0000 inbound port scan detected by Suricata. src=103.99.214.149:58570 dst ...
show more2026-07-09T11:01:35.888177+0000 inbound port scan detected by Suricata. src=103.99.214.149:58570 dst=51.68.231.122:22 proto=TCP. signature="ET SCAN Potential SSH Scan" category="Attempted Information Leak" sid=2001219 reason=scan_signature.
show less