Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unsolicited TCP probe(s) to honeypot trap port(s) 2222. No production service is offered on these trap ports.
Observed 1 event(s) between 2026-11-11T15:10:24Z and 2026-11-11T15:10:24Z UTC.
2026-11-11T15:10:24Z tcp/2222 unsolicited connection, payload ...
show moreUnsolicited TCP probe(s) to honeypot trap port(s) 2222. No production service is offered on these trap ports.
Observed 1 event(s) between 2026-11-11T15:10:24Z and 2026-11-11T15:10:24Z UTC.
2026-11-11T15:10:24Z tcp/2222 unsolicited connection, payload bytes omitted.
Source IP added to the local ban list.
show less
2026-11-11T13:51:33.501455+00:00 node1 sshd-session[129056]: Failed password for root from 43.103.51.153 port 54582 ssh2
2026-11-11T13:51:34.824311+00:00 node1 sshd-session[129066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ...
show more2026-11-11T13:51:33.501455+00:00 node1 sshd-session[129056]: Failed password for root from 43.103.51.153 port 54582 ssh2
2026-11-11T13:51:34.824311+00:00 node1 sshd-session[129066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.103.51.153 user=root
2026-11-11T13:51:37.108959+00:00 node1 sshd-session[129066]: Failed password for root from 43.103.51.153 port 54588 ssh2
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
[AUTORAVALT][[11/11/2026 - 02:08:47 -03:00 UTC]
Attack from [43.103.51.153] Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, ...
show more[AUTORAVALT][[11/11/2026 - 02:08:47 -03:00 UTC]
Attack from [43.103.51.153] Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
2026-11-10T18:14:07.686402+00:00 ubuntu-4gb-nbg1-1 sshd[2920515]: Connection closed by authenticating user root 43.103.51.153 port 37692 [preauth]
2026-11-10T18:14:10.661727+00:00 ubuntu-4gb-nbg1-1 sshd[2920932]: pam_unix(sshd:auth): authentication f ...
show more2026-11-10T18:14:07.686402+00:00 ubuntu-4gb-nbg1-1 sshd[2920515]: Connection closed by authenticating user root 43.103.51.153 port 37692 [preauth]
2026-11-10T18:14:10.661727+00:00 ubuntu-4gb-nbg1-1 sshd[2920932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.103.51.153 user=root
2026-11-10T18:14:12.978623+00:00 ubuntu-4gb-nbg1-1 sshd[2920932]: Failed password for root from 43.103.51.153 port 43452 ssh2
...
show less
