This IP address has been reported a total of
111
times from
77 distinct
sources.
103.99.38.145 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Cluster member (Omitted) (US/United States/-) said, DENY 103.99.38.145, Reason:[(sshd) Failed SSH lo ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 103.99.38.145, Reason:[(sshd) Failed SSH login from 103.99.38.145 (IN/India/-): 3 in the last 3600 secs]
show less
SSH credential brute-force observed by honeypot.
Source IP: 103.99.38.145
Targeted device: NAS
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 103.99.38.145
Targeted device: NAS
First seen: 08 Jul 2026 05:25:38 UTC
Last seen: 08 Jul 2026 06:21:02 UTC
Attempts: 22
Client: SSH-2.0-libssh_0.9.6
Sample credentials: root:september, root:wanglei123, root:yuiop, root:5202414, valentin:valentin123, 345gs5662d34:345gs5662d34, valentin:3245gs5662d34, azureuser:test123, root:100100100, jira123:deploy
show less
2026-07-08T07:40:32.368117+02:00 schenklradio sshd[1193644]: Invalid user valentin from 103.99.38.14 ...
show more2026-07-08T07:40:32.368117+02:00 schenklradio sshd[1193644]: Invalid user valentin from 103.99.38.145 port 54294
2026-07-08T07:43:12.363796+02:00 schenklradio sshd[1193658]: Invalid user azureuser from 103.99.38.145 port 50518
2026-07-08T07:48:32.628053+02:00 schenklradio sshd[1193694]: Invalid user jira123 from 103.99.38.145 port 44282
2026-07-08T07:59:08.663180+02:00 schenklradio sshd[1193786]: Invalid user webadm from 103.99.38.145 port 57430
2026-07-08T08:04:31.302413+02:00 schenklradio sshd[1193823]: Invalid user eric from 103.99.38.145 port 48124
...
show less
2026-07-08T07:41:00.207170+02:00 game042 sshd-session[1764863]: Invalid user valentin from 103.99.38 ...
show more2026-07-08T07:41:00.207170+02:00 game042 sshd-session[1764863]: Invalid user valentin from 103.99.38.145 port 39674
2026-07-08T07:43:39.037059+02:00 game042 sshd-session[1765860]: Invalid user azureuser from 103.99.38.145 port 37014
2026-07-08T07:49:00.255032+02:00 game042 sshd-session[1767531]: Invalid user jira123 from 103.99.38.145 port 41142
...
show less
2026-07-07T22:22:40.987807-07:00 maoyue-yyz1 sshd-session[4188827]: Disconnected from authenticating ...
show more2026-07-07T22:22:40.987807-07:00 maoyue-yyz1 sshd-session[4188827]: Disconnected from authenticating user root 103.99.38.145 port 46660 [preauth]
2026-07-07T22:32:30.537457-07:00 maoyue-yyz1 sshd-session[4190212]: Disconnected from authenticating user root 103.99.38.145 port 35518 [preauth]
2026-07-07T22:35:09.266048-07:00 maoyue-yyz1 sshd-session[4190657]: Disconnected from authenticating user root 103.99.38.145 port 58662 [preauth]
2026-07-07T22:37:43.675473-07:00 maoyue-yyz1 sshd-session[4190919]: Disconnected from authenticating user root 103.99.38.145 port 56432 [preauth]
...
show less
2026-07-08T05:08:22.918299+02:00 sshd-session[808264]: Disconnected from authenticating user root 1 ...
show more2026-07-08T05:08:22.918299+02:00 sshd-session[808264]: Disconnected from authenticating user root 103.99.38.145 port 56850 [preauth]
2026-07-08T05:10:54.461559+02:00 sshd-session[809604]: Disconnected from authenticating user root 103.99.38.145 port 59344 [preauth]
2026-07-08T05:13:34.438985+02:00 sshd-session[811007]: Disconnected from authenticating user root 103.99.38.145 port 51292 [preauth]
...
show less
2026-07-08T03:59:27.064463+01:00 CiviDrupal16GB sshd[703382]: User root from 103.99.38.145 not allow ...
show more2026-07-08T03:59:27.064463+01:00 CiviDrupal16GB sshd[703382]: User root from 103.99.38.145 not allowed because not listed in AllowUsers
2026-07-08T04:08:32.080653+01:00 CiviDrupal16GB sshd[703967]: User root from 103.99.38.145 not allowed because not listed in AllowUsers
...
show less
2026-07-07T22:50:34.281321 rhel-20gb-ash-1 sshd[3255053]: Disconnected from authenticating user root ...
show more2026-07-07T22:50:34.281321 rhel-20gb-ash-1 sshd[3255053]: Disconnected from authenticating user root 103.99.38.145 port 52980 [preauth]
...
show less
(sshd) Failed SSH login from 103.99.38.145 (IN/India/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 103.99.38.145 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 8 02:40:25 da057 sshd[3036718]: Invalid user test2 from 103.99.38.145 port 51476
Jul 8 02:57:49 da057 sshd[3070598]: Invalid user guest from 103.99.38.145 port 38014
Jul 8 03:11:15 da057 sshd[3098052]: User mysql from 103.99.38.145 not allowed because not listed in AllowUsers
Jul 8 03:14:01 da057 sshd[3102843]: Invalid user deployer from 103.99.38.145 port 46020
Jul 8 03:16:44 da057 sshd[3109677]: Invalid user ubuntu from 103.99.38.145 port 50604
show less
Port Scan
Showing 1 to
15
of 111 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ