This IP address has been reported a total of
148
times from
82 distinct
sources.
103.249.133.245 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH credential brute-force observed by honeypot. | Source IP: 103.249.133.245 | Targeted device: Deb ...
show moreSSH credential brute-force observed by honeypot. | Source IP: 103.249.133.245 | Targeted device: Debian server | First seen: 28 Aug 2026 05:35:47 UTC | Last seen: 28 Aug 2026 09:35:20 UTC | Attempts: 5 | Client: SSH-2.0-phpseclib_1.0 (openssl) | Sample credentials: root:123456, ubuntu:ubuntu, ubuntu:123456, root:123qweasd, dxftp:dxftp
show less
Aug 27 19:22:06 v4bgp sshd[1630586]: Failed password for root from 103.249.133.245 port 14280 ssh2
A ...
show moreAug 27 19:22:06 v4bgp sshd[1630586]: Failed password for root from 103.249.133.245 port 14280 ssh2
Aug 27 19:23:25 v4bgp sshd[1630621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.133.245 user=root
Aug 27 19:23:27 v4bgp sshd[1630621]: Failed password for root from 103.249.133.245 port 63704 ssh2
...
show less
2026-08-27T06:27:41.376263+06:00 zabbix sshd[724785]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-08-27T06:27:41.376263+06:00 zabbix sshd[724785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.133.245
2026-08-27T06:27:43.310727+06:00 zabbix sshd[724785]: Failed password for invalid user kdm from 103.249.133.245 port 29342 ssh2
...
show less
2026-08-25T06:38:27.053335+00:00 sshd-session[459662]: Unable to negotiate with 103.249.133.245 ...
show more2026-08-25T06:38:27.053335+00:00 sshd-session[459662]: Unable to negotiate with 103.249.133.245 port 47436: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-08-25T13:47:39.264366+00:00 sshd-session[460249]: Unable to negotiate with 103.249.133.245 port 50292: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-08-25T17:37:54.406576+00:00 sshd-session[460664]: Unable to negotiate with 103.249.133.245 port 58078: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less
2026-08-25T06:13:50.107504+00:00 thelemmy.club sshd-session[1886907]: Unable to negotiate with 103.2 ...
show more2026-08-25T06:13:50.107504+00:00 thelemmy.club sshd-session[1886907]: Unable to negotiate with 103.249.133.245 port 10742: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-08-25T17:05:28.567405+00:00 thelemmy.club sshd-session[2284543]: Unable to negotiate with 103.249.133.245 port 10074: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less
2026-08-25T05:35:19.346394+00:00 Canada1 sshd-session[524396]: Connection closed by 103.249.133.245 ...
show more2026-08-25T05:35:19.346394+00:00 Canada1 sshd-session[524396]: Connection closed by 103.249.133.245 port 58290 [preauth]
2026-08-25T06:39:05.197793+00:00 Canada1 sshd-session[932189]: Unable to negotiate with 103.249.133.245 port 30310: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 148 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ