Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
T-Pot Honeypot (Cowrie): Automated attack on port 22/SSH
Brute-Force
SSH
Anonymous
2026-11-12T10:49:59.363538+08:00 vm50 sshd[8242]: error: kex_exchange_identification: Connection closed by remote host
2026-11-12T10:50:07.837816+08:00 vm50 sshd[8243]: Connection from 103.39.125.146 port 53832 on 103.3.61.195 port 22 rdomain ""
2026 ...
show more2026-11-12T10:49:59.363538+08:00 vm50 sshd[8242]: error: kex_exchange_identification: Connection closed by remote host
2026-11-12T10:50:07.837816+08:00 vm50 sshd[8243]: Connection from 103.39.125.146 port 53832 on 103.3.61.195 port 22 rdomain ""
2026-11-12T10:50:07.837902+08:00 vm50 sshd[8243]: error: kex_exchange_identification: Connection closed by remote host
2026-11-12T10:50:24.246690+08:00 vm50 sshd[8244]: Connection from 103.39.125.146 port 54535 on 103.3.61.195 port 22 rdomain ""
2026-11-12T10:50:24.248536+08:00 vm50 sshd[8244]: error: kex_exchange_identification: Connection closed by remote host
...
show less
2026-11-11T03:31:51.700699+08:00 vm50 sshd[4044]: error: kex_exchange_identification: Connection closed by remote host
2026-11-11T03:32:00.249599+08:00 vm50 sshd[4045]: Connection from 103.39.125.146 port 62880 on 103.3.61.195 port 22 rdomain ""
2026 ...
show more2026-11-11T03:31:51.700699+08:00 vm50 sshd[4044]: error: kex_exchange_identification: Connection closed by remote host
2026-11-11T03:32:00.249599+08:00 vm50 sshd[4045]: Connection from 103.39.125.146 port 62880 on 103.3.61.195 port 22 rdomain ""
2026-11-11T03:32:00.249696+08:00 vm50 sshd[4045]: error: kex_exchange_identification: Connection closed by remote host
2026-11-11T03:32:16.641194+08:00 vm50 sshd[4046]: Connection from 103.39.125.146 port 63811 on 103.3.61.195 port 22 rdomain ""
2026-11-11T03:32:16.642994+08:00 vm50 sshd[4046]: error: kex_exchange_identification: Connection closed by remote host
...
show less
Brute-Force
SSH
Anonymous
2026-11-10T16:05:55.953280+08:00 vm50 sshd[2458]: error: kex_exchange_identification: Connection closed by remote host
2026-11-10T16:05:59.939710+08:00 vm50 sshd[2459]: Connection from 103.39.125.146 port 55366 on 103.3.61.195 port 22 rdomain ""
2026 ...
show more2026-11-10T16:05:55.953280+08:00 vm50 sshd[2458]: error: kex_exchange_identification: Connection closed by remote host
2026-11-10T16:05:59.939710+08:00 vm50 sshd[2459]: Connection from 103.39.125.146 port 55366 on 103.3.61.195 port 22 rdomain ""
2026-11-10T16:05:59.939803+08:00 vm50 sshd[2459]: error: kex_exchange_identification: Connection closed by remote host
2026-11-10T16:06:08.374538+08:00 vm50 sshd[2461]: Connection from 103.39.125.146 port 55997 on 103.3.61.195 port 22 rdomain ""
2026-11-10T16:06:08.374653+08:00 vm50 sshd[2461]: error: kex_exchange_identification: Connection closed by remote host
...
show less
Nov 10 01:24:54 vm50 sshd[28622]: error: kex_exchange_identification: Connection closed by remote host
Nov 10 01:25:02 vm50 sshd[28626]: Connection from 103.39.125.146 port 58413 on 103.3.61.195 port 22 rdomain ""
Nov 10 01:25:02 vm50 sshd[28626]: er ...
show moreNov 10 01:24:54 vm50 sshd[28622]: error: kex_exchange_identification: Connection closed by remote host
Nov 10 01:25:02 vm50 sshd[28626]: Connection from 103.39.125.146 port 58413 on 103.3.61.195 port 22 rdomain ""
Nov 10 01:25:02 vm50 sshd[28626]: error: kex_exchange_identification: Connection closed by remote host
Nov 10 01:25:19 vm50 sshd[28627]: Connection from 103.39.125.146 port 58984 on 103.3.61.195 port 22 rdomain ""
Nov 10 01:25:19 vm50 sshd[28627]: error: kex_exchange_identification: Connection closed by remote host
...
show less