103.106.103.218
On the shared blocklist: servers in the shieldie network block it.
Ban ends: Nov 5, 2026, 1:42 PM UTC
- Why
- AI analyst: SSH-only brute-forcing across 3 networks, no subnet activity
- Attack types
sshd- First reported
- Sep 20, 2026, 9:10 AM UTC
- Last reported
- Nov 4, 2026, 1:42 PM UTC
- Network
- AS137144 Passit Media And Communication Pvt. Ltd.
- Location
- India
Attacks by type
| Attack type | Incidents |
|---|---|
sshd | 3 |
Incidents by severity: Low 3
Incidents
These incidents come from 3 different servers. Each describes only its own history with this address, so a first ban on one can be a repeat ban on another.
sshdServer 1LowAI verdict: malicious1 hitNov 4, 2026, 1:39 PM UTCOpportunistic, untargeted SSH brute-force noise from 103.106.103.218 (first ban, no prior recidive) tripped shieldie-guard's sshd jail, which applied a deterministic 3600s firewall ban, consistent with prior similar incidents.
sshdServer 2LowAI verdict: malicious1 hitNov 1, 2026, 8:09 PM UTCRepeated SSH auth failures from 103.106.103.218 tripped shieldie-guard's sshd jail, which applied a 3600s firewall ban; no prior bans in the recidive window, consistent with untargeted internet-wide brute-force noise.
sshdServer 3LowAI verdict: malicious1 hitNov 1, 2026, 2:47 AM UTCRepeated SSH auth failures from 103.106.103.218 (no prior bans in the recidive window) matched shieldie-guard's 'sshd' jail, which applied a 3600s firewall ban; this is consistent with opportunistic internet-wide brute-force noise, not a targeted attack.
Timeline
- Nov 4, 2026, 1:42 PM UTCLast reported
- Nov 4, 2026, 1:39 PM UTC
sshdLow - Nov 1, 2026, 8:09 PM UTC
sshdLow - Nov 1, 2026, 2:47 AM UTC
sshdLow - Sep 20, 2026, 9:10 AM UTCFirst reported
Shown: attack type, severity, AI verdict and a short redacted summary as reported by shieldie servers. Server names, addresses, user names and log lines are never published.