This IP address has been reported a total of
70
times from
36 distinct
sources.
5.99.102.204 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban SSH brute-force ban on MainVps.aurorix.net. jail=sshd; source=fail2ban; no raw log lines in ...
show moreFail2Ban SSH brute-force ban on MainVps.aurorix.net. jail=sshd; source=fail2ban; no raw log lines included.
show less
May 27 19:05:29 servidor pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [insta ...
show moreMay 27 19:05:29 servidor pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [instalacaodegassorocaba]
May 27 20:46:35 servidor pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [instalacaodegassorocaba]
May 27 22:42:34 servidor pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [instalacaodegassorocaba]
...
show less
Fail2Ban SSH brute-force ban on MainVps.aurorix.net. jail=sshd; source=fail2ban; no raw log lines in ...
show moreFail2Ban SSH brute-force ban on MainVps.aurorix.net. jail=sshd; source=fail2ban; no raw log lines included.
show less
[AUTORAVALT][[27/05/2026 - 23:10:24 -03:00 UTC]
Attack from [5.99.102.204][host-5-99-102-204.busines ...
show more[AUTORAVALT][[27/05/2026 - 23:10:24 -03:00 UTC]
Attack from [5.99.102.204][host-5-99-102-204.business.telecomitalia.it]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
5.99.102.204 (IT/Italy/host-5-99-102-204.business.telecomitalia.it), 5 distributed ftpd attacks on a ...
show more5.99.102.204 (IT/Italy/host-5-99-102-204.business.telecomitalia.it), 5 distributed ftpd attacks on account [redacted]
show less
May 25 07:21:55 <server> sshd\[6419\]: Invalid user netmet from 5.99.102.204May 25 07:21:57 <server> ...
show moreMay 25 07:21:55 <server> sshd\[6419\]: Invalid user netmet from 5.99.102.204May 25 07:21:57 <server> sshd\[6419\]: Failed password for invalid user netmet from 5.99.102.204 port 48274 ssh2
...
show less
May 25 07:23:56 hosting sshd[3549554]: Invalid user ammoslux from 5.99.102.204 port 51718
May 25 07: ...
show moreMay 25 07:23:56 hosting sshd[3549554]: Invalid user ammoslux from 5.99.102.204 port 51718
May 25 07:23:56 hosting sshd[3549554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.99.102.204
May 25 07:23:58 hosting sshd[3549554]: Failed password for invalid user ammoslux from 5.99.102.204 port 51718 ssh2
show less
May 25 06:40:13 hosting sshd[3539763]: Invalid user ammoslux from 5.99.102.204 port 54392
May 25 06: ...
show moreMay 25 06:40:13 hosting sshd[3539763]: Invalid user ammoslux from 5.99.102.204 port 54392
May 25 06:40:13 hosting sshd[3539763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.99.102.204
May 25 06:40:15 hosting sshd[3539763]: Failed password for invalid user ammoslux from 5.99.102.204 port 54392 ssh2
show less
SSH
Brute-Force
Showing 1 to
15
of 70 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩