This IP address has been reported a total of
41
times from
34 distinct
sources.
103.245.237.17 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 15
reports;
United States of America
with 8
reports;
Germany
with 5
reports.
The most common categories in these recent reports were:
Brute-Force
29
times;
SSH
28
times;
Port Scan
14
times;
Hacking
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-01T14:18:00.803873+00:00 helium sshd-session[3287038]: Connection closed by authenticating u ...
show more2026-10-01T14:18:00.803873+00:00 helium sshd-session[3287038]: Connection closed by authenticating user root 103.245.237.17 port 56488 [preauth]
2026-10-01T14:32:14.270007+00:00 helium sshd-session[3291379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.245.237.17 user=root
2026-10-01T14:32:16.043626+00:00 helium sshd-session[3291379]: Failed password for root from 103.245.237.17 port 58728 ssh2
...
show less
2026-10-01T12:49:45.348993+00:00 helium sshd-session[3261141]: Connection closed by authenticating u ...
show more2026-10-01T12:49:45.348993+00:00 helium sshd-session[3261141]: Connection closed by authenticating user root 103.245.237.17 port 43010 [preauth]
2026-10-01T13:03:33.222787+00:00 helium sshd-session[3265361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.245.237.17 user=root
2026-10-01T13:03:35.139143+00:00 helium sshd-session[3265361]: Failed password for root from 103.245.237.17 port 45268 ssh2
...
show less
Repeated SSH connections that never attempted authentication (pre-auth probing) recorded by a honeyp ...
show moreRepeated SSH connections that never attempted authentication (pre-auth probing) recorded by a honeypot sensor network.
Threat score: 13/100 (info) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 0 (0 bad password, 0 invalid user) | 0 success | 10 total SSH log events | seen on 3 sensor(s)
Origin: Vietnam (VN) | AS151858 INTERDIGI JOINT STOCK COMPANY | 103.245.237.0/24
First seen: 2026-10-01 11:14:47 UTC | Last seen: 2026-10-01 12:56:40 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Oct 1 13:53:49 mx1 sshd[1199698]: Failed password for root from 103.245.237.17 port 2370 ssh2
Oct ...
show moreOct 1 13:53:49 mx1 sshd[1199698]: Failed password for root from 103.245.237.17 port 2370 ssh2
Oct 1 14:07:55 mx1 sshd[1200299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.245.237.17 user=root
Oct 1 14:07:57 mx1 sshd[1200299]: Failed password for root from 103.245.237.17 port 4706 ssh2
Oct 1 14:22:29 mx1 sshd[1201059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.245.237.17 user=root
Oct 1 14:22:32 mx1 sshd[1201059]: Failed password for root from 103.245.237.17 port 7046 ssh2
...
show less
