Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Nov 4 03:19:33 webServer-02 sshd[231224]: Invalid user user from 116.99.171.103 port 45430
Nov 4 03:19:36 webServer-02 sshd[231226]: Invalid user installer from 116.99.171.103 port 45438
Nov 4 03:20:06 webServer-02 sshd[231239]: Invalid user ubnt ...
show moreNov 4 03:19:33 webServer-02 sshd[231224]: Invalid user user from 116.99.171.103 port 45430
Nov 4 03:19:36 webServer-02 sshd[231226]: Invalid user installer from 116.99.171.103 port 45438
Nov 4 03:20:06 webServer-02 sshd[231239]: Invalid user ubnt from 116.99.171.103 port 44182
Nov 4 03:20:15 webServer-02 sshd[231243]: Invalid user squid from 116.99.171.103 port 49872
Nov 4 03:20:19 webServer-02 sshd[231245]: Invalid user guest from 116.99.171.103 port 52478
...
show less
2026-11-04T03:19:59.730764+10:00 smtp.geddy.au sshd-session[2435007]: Failed password for invalid user config from 116.99.171.103 port 42816 ssh2
2026-11-04T03:20:03.803638+10:00 smtp.geddy.au sshd-session[2435010]: Invalid user installer from 116.99 ...
show more2026-11-04T03:19:59.730764+10:00 smtp.geddy.au sshd-session[2435007]: Failed password for invalid user config from 116.99.171.103 port 42816 ssh2
2026-11-04T03:20:03.803638+10:00 smtp.geddy.au sshd-session[2435010]: Invalid user installer from 116.99.171.103 port 42832
2026-11-04T03:20:04.000724+10:00 smtp.geddy.au sshd-session[2435010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.99.171.103
2026-11-04T03:20:06.153943+10:00 smtp.geddy.au sshd-session[2435010]: Failed password for invalid user installer from 116.99.171.103 port 42832 ssh2
...
show less
2026-11-03T17:19:54.976429+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2585687]: Invalid user user from 116.99.171.103 port 48234
2026-11-03T17:20:00.216142+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2586082]: Invalid user admin from 116.9 ...
show more2026-11-03T17:19:54.976429+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2585687]: Invalid user user from 116.99.171.103 port 48234
2026-11-03T17:20:00.216142+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2586082]: Invalid user admin from 116.99.171.103 port 44866
2026-11-03T17:20:01.508940+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2586090]: Invalid user admin from 116.99.171.103 port 44882
...
show less
This source was blocked by Fail2Ban after repeated SSH login failures within a 10-minute detection window. The server log documents nonexistent account names, rejected password authentication; these unsolicited attempts are consistent with SSH creden ...
show moreThis source was blocked by Fail2Ban after repeated SSH login failures within a 10-minute detection window. The server log documents nonexistent account names, rejected password authentication; these unsolicited attempts are consistent with SSH credential probing. The timestamped entries below are the observed evidence for this report. Local server addresses and attempted account names are redacted.
SSH log evidence (UTC):
2026-11-03 17:19:50Z sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.99.171.103
2026-11-03 17:19:52Z sshd: Failed password for invalid user [account] from 116.99.171.103 port 48850 ssh2
2026-11-03 17:19:53Z sshd: Connection closed by invalid user [account] 116.99.171.103 port 48850 [preauth]
2026-11-03 17:19:57Z sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.99.171.103 [account]
2026-11-03 17:19:59Z sshd: Failed password for [account] from 116.99.171.103 port 35532 ssh2
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 116.99.171.103 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 3 12:19:34 sshd[64322]: Invalid user [USERNAME] from 116.99.171.103 port 37546
Isolated honeypot recorded 3 SSH authentication attempts. Local block at 2026-11-03 17:07 UTC. Count is cumulative for the observed sequence, not an exact count within a time window.
