This IP address has been reported a total of
97
times from
87 distinct
sources.
171.243.149.12 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 20/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 20/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 21 (3 bad password, 18 invalid user) | 0 success | 32 total SSH log events | seen on 2 sensor(s)
Origin: Vietnam (VN) | AS7552 Viettel Group | 171.243.149.0/24
First seen: 2026-08-31 18:19:45 UTC | Last seen: 2026-08-31 18:32:00 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
2026-08-31T18:22:18.476422+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1377403]: Failed password f ...
show more2026-08-31T18:22:18.476422+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1377403]: Failed password for invalid user installer from 171.243.149.12 port 60548 ssh2
2026-08-31T18:28:12.351736+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1377510]: Invalid user test from 171.243.149.12 port 41780
2026-08-31T18:28:13.222132+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1377510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.243.149.12
2026-08-31T18:28:15.516383+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1377510]: Failed password for invalid user test from 171.243.149.12 port 41780 ssh2
2026-08-31T18:31:43.905271+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1377592]: Invalid user admin from 171.243.149.12 port 47918
...
show less
SSH brute-force on sshd jail (fail2ban auto-report)
Brute-Force
SSH
Anonymous
Sep 1 02:24:15 vm50 sshd[50488]: Invalid user support from 171.243.149.12 port 58584
Sep 1 02:26:0 ...
show moreSep 1 02:24:15 vm50 sshd[50488]: Invalid user support from 171.243.149.12 port 58584
Sep 1 02:26:06 vm50 sshd[50497]: Connection from 171.243.149.12 port 34958 on 103.3.61.195 port 22 rdomain ""
Sep 1 02:26:09 vm50 sshd[50497]: Connection closed by authenticating user root 171.243.149.12 port 34958 [preauth]
Sep 1 02:28:15 vm50 sshd[50517]: Connection from 171.243.149.12 port 48724 on 103.3.61.195 port 22 rdomain ""
Sep 1 02:28:17 vm50 sshd[50517]: Invalid user admin from 171.243.149.12 port 48724
...
show less
2026-08-31T18:21:09.664974+00:00 sgp01 sshd[1336731]: Invalid user admin from 171.243.149.12 port 38 ...
show more2026-08-31T18:21:09.664974+00:00 sgp01 sshd[1336731]: Invalid user admin from 171.243.149.12 port 38458
2026-08-31T18:22:47.125995+00:00 sgp01 sshd[1336764]: Invalid user squid from 171.243.149.12 port 53480
2026-08-31T18:24:04.540613+00:00 sgp01 sshd[1336769]: Invalid user support from 171.243.149.12 port 45512
2026-08-31T18:24:39.962764+00:00 sgp01 sshd[1336798]: Invalid user config from 171.243.149.12 port 40918
2026-08-31T18:27:32.685746+00:00 sgp01 sshd[1336819]: Invalid user admin from 171.243.149.12 port 50766
...
show less
2026-08-31T18:24:42.620126+00:00 auxonode sshd[2596773]: Invalid user config from 171.243.149.12 por ...
show more2026-08-31T18:24:42.620126+00:00 auxonode sshd[2596773]: Invalid user config from 171.243.149.12 port 38710
2026-08-31T18:25:24.481206+00:00 auxonode sshd[2596807]: Invalid user admin from 171.243.149.12 port 51886
2026-08-31T18:27:26.314117+00:00 auxonode sshd[2596871]: Invalid user system from 171.243.149.12 port 52698
...
show less
2026-09-01T02:20:27.243721+08:00 hh-vm-bf25-5t-sgp sshd-session[2035374]: Invalid user user from 171 ...
show more2026-09-01T02:20:27.243721+08:00 hh-vm-bf25-5t-sgp sshd-session[2035374]: Invalid user user from 171.243.149.12 port 50020
2026-09-01T02:21:49.861484+08:00 hh-vm-bf25-5t-sgp sshd-session[2035564]: Invalid user admin from 171.243.149.12 port 48032
2026-09-01T02:26:15.300270+08:00 hh-vm-bf25-5t-sgp sshd-session[2036381]: Invalid user system from 171.243.149.12 port 43812
...
show less
2026-09-01T02:23:37.584762instance-20220408-0313 sshd[1126687]: Invalid user squid from 171.243.149. ...
show more2026-09-01T02:23:37.584762instance-20220408-0313 sshd[1126687]: Invalid user squid from 171.243.149.12 port 51092
2026-09-01T02:24:13.437301instance-20220408-0313 sshd[1126687]: error: PAM: Authentication failure for illegal user squid from 171.243.149.12
2026-09-01T02:24:13.437832instance-20220408-0313 sshd[1126687]: Failed keyboard-interactive/pam for invalid user squid from 171.243.149.12 port 51092 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 97 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩