This IP address has been reported a total of
8
times from
5 distinct
sources.
103.245.237.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Network port/address scan: probed 1 distinct port(s) across 53 host(s); 100% of connections received ...
show moreNetwork port/address scan: probed 1 distinct port(s) across 53 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
show less
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show moreMalicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-07-10 13:52:54 UTC
Log evidence:
07/10/2026-13:52:53.276577 [**] [1:2023753:4] ET SCAN MS Terminal Server Traffic on Non-standard Port [**] [Classification: Attempted Information Leak] [Priority: 2] {TCP} 103.245.237.139:62067 -> 185.127.18.66:443
07/10/2026-13:52:53.541254 [**] [1:2023753:4] ET SCAN MS Terminal Server Traffic on Non-standard Port [**] [Classification: Attempted Information Leak] [Priority: 2] {TCP} 103.245.237.139:62067 -> 185.127.18.66:443
show less
Jul 8 23:51:11 pkdns2 sshd\[20077\]: Failed password for root from 103.245.237.139 port 64011 ssh2J ...
show moreJul 8 23:51:11 pkdns2 sshd\[20077\]: Failed password for root from 103.245.237.139 port 64011 ssh2Jul 8 23:51:30 pkdns2 sshd\[20082\]: Failed password for root from 103.245.237.139 port 63659 ssh2Jul 8 23:52:08 pkdns2 sshd\[20106\]: Failed password for root from 103.245.237.139 port 64621 ssh2Jul 8 23:52:28 pkdns2 sshd\[20111\]: Failed password for root from 103.245.237.139 port 57111 ssh2Jul 8 23:52:45 pkdns2 sshd\[20115\]: Failed password for root from 103.245.237.139 port 62296 ssh2Jul 8 23:53:02 pkdns2 sshd\[20117\]: Failed password for root from 103.245.237.139 port 65340 ssh2
...
show less
Jul 8 23:34:20 pkdns2 sshd\[19435\]: Failed password for root from 103.245.237.139 port 52855 ssh2J ...
show moreJul 8 23:34:20 pkdns2 sshd\[19435\]: Failed password for root from 103.245.237.139 port 52855 ssh2Jul 8 23:34:38 pkdns2 sshd\[19437\]: Failed password for root from 103.245.237.139 port 56332 ssh2Jul 8 23:35:00 pkdns2 sshd\[19439\]: Failed password for root from 103.245.237.139 port 62631 ssh2Jul 8 23:35:23 pkdns2 sshd\[19511\]: Failed password for root from 103.245.237.139 port 50164 ssh2Jul 8 23:35:41 pkdns2 sshd\[19514\]: Failed password for root from 103.245.237.139 port 61271 ssh2Jul 8 23:36:00 pkdns2 sshd\[19516\]: Failed password for root from 103.245.237.139 port 60423 ssh2
...
show less
Jul 8 23:17:49 pkdns2 sshd\[18838\]: Failed password for root from 103.245.237.139 port 60904 ssh2J ...
show moreJul 8 23:17:49 pkdns2 sshd\[18838\]: Failed password for root from 103.245.237.139 port 60904 ssh2Jul 8 23:17:56 pkdns2 sshd\[18834\]: Failed password for root from 103.245.237.139 port 60435 ssh2Jul 8 23:18:12 pkdns2 sshd\[18864\]: Failed password for root from 103.245.237.139 port 57395 ssh2Jul 8 23:18:31 pkdns2 sshd\[18869\]: Failed password for root from 103.245.237.139 port 64896 ssh2Jul 8 23:18:53 pkdns2 sshd\[18871\]: Failed password for root from 103.245.237.139 port 55374 ssh2Jul 8 23:19:12 pkdns2 sshd\[18896\]: Failed password for root from 103.245.237.139 port 54233 ssh2
...
show less
Jul 8 23:01:08 pkdns2 sshd\[18245\]: Failed password for root from 103.245.237.139 port 53308 ssh2J ...
show moreJul 8 23:01:08 pkdns2 sshd\[18245\]: Failed password for root from 103.245.237.139 port 53308 ssh2Jul 8 23:01:31 pkdns2 sshd\[18251\]: Failed password for root from 103.245.237.139 port 49601 ssh2Jul 8 23:01:55 pkdns2 sshd\[18253\]: Failed password for root from 103.245.237.139 port 62016 ssh2Jul 8 23:02:11 pkdns2 sshd\[18277\]: Failed password for root from 103.245.237.139 port 58366 ssh2Jul 8 23:02:25 pkdns2 sshd\[18282\]: Invalid user ubuntu from 103.245.237.139Jul 8 23:02:28 pkdns2 sshd\[18282\]: Failed password for invalid user ubuntu from 103.245.237.139 port 51412 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩