JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.39.70.253

103.39.70.253 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 58%: ?

58%

ISP	PT Gateway media Zafira
Usage Type	Fixed Line ISP
ASN	AS150274
Domain Name	zafira.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.39.70.253

Whois 103.39.70.253

IP Abuse Reports for 103.39.70.253:

This IP address has been reported a total of 29 times from 17 distinct sources. 103.39.70.253 was first reported on October 23rd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-07-30 01:56:03 (2 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 COMPLEX	2026-07-28 19:41:43 (3 days ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇧🇷 helix	2026-07-25 20:23:27 (6 days ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇩🇪 Admins@FBN	2026-07-21 01:41:17 (1 week ago)	FW-PortScan: Traffic Blocked srcport=58589 dstport=8083	Port Scan
🇪🇸 el-brujo	2026-07-17 10:34:44 (2 weeks ago)	07/17/2026-12:32:09.176973 103.39.70.253 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
🇷🇸 Scan	2026-07-17 00:34:17 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 feuerwehr-pischeldorf.at	2026-07-14 09:03:31 (2 weeks ago)	2026-07-14T11:03:20.421078+02:00 v2202301167543214332 sshd[805261]: Failed password for root from 10 ... show more 2026-07-14T11:03:20.421078+02:00 v2202301167543214332 sshd[805261]: Failed password for root from 103.39.70.253 port 55982 ssh2 2026-07-14T11:03:23.073615+02:00 v2202301167543214332 sshd[805263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root 2026-07-14T11:03:25.004033+02:00 v2202301167543214332 sshd[805263]: Failed password for root from 103.39.70.253 port 55986 ssh2 2026-07-14T11:03:27.986402+02:00 v2202301167543214332 sshd[805265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root 2026-07-14T11:03:30.132545+02:00 v2202301167543214332 sshd[805265]: Failed password for root from 103.39.70.253 port 55990 ssh2 ... show less	DDoS Attack Ping of Death Web Spam Email Spam Bad Web Bot Brute-Force SSH
🇸🇪 wrecker1602	2026-07-11 08:40:11 (2 weeks ago)	2026-07-11T08:40:04.828430+00:00 WreckersBox sshd[34237]: Failed password for root from 103.39.70.25 ... show more 2026-07-11T08:40:04.828430+00:00 WreckersBox sshd[34237]: Failed password for root from 103.39.70.253 port 39276 ssh2 2026-07-11T08:40:08.036311+00:00 WreckersBox sshd[34239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root 2026-07-11T08:40:10.480083+00:00 WreckersBox sshd[34239]: Failed password for root from 103.39.70.253 port 39280 ssh2 ... show less	Brute-Force SSH
🇭🇰 CGT Software Webmaster	2026-07-10 01:51:31 (3 weeks ago)	2026-07-10T01:51:27.127936+00:00 CVM51718 sshd[230256]: Failed password for root from 103.39.70.253 ... show more 2026-07-10T01:51:27.127936+00:00 CVM51718 sshd[230256]: Failed password for root from 103.39.70.253 port 54308 ssh2 2026-07-10T01:51:28.971005+00:00 CVM51718 sshd[230258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root 2026-07-10T01:51:30.695810+00:00 CVM51718 sshd[230258]: Failed password for root from 103.39.70.253 port 54312 ssh2 ... show less	Port Scan Brute-Force
🇦🇹 urnilxfgbez	2026-07-09 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇸 Scan	2026-07-08 01:33:12 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇯🇵 Execoop	2026-07-06 04:08:46 (3 weeks ago)	SSH honeypot \| Defense Evasion + Password Guessing (Heavy) \| 17031 auths, 2 cmds, 164.6m \| go_scanne ... show more SSH honeypot \| Defense Evasion + Password Guessing (Heavy) \| 17031 auths, 2 cmds, 164.6m \| go_scanner (likely bot) \| tactics: encoded commands show less	Hacking SSH
🇷🇸 Scan	2026-07-06 00:35:20 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2026-07-04 01:04:06 (4 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇬🇧 Smish	2026-07-01 06:50:45 (4 weeks ago)	(sshd) Failed SSH login from 103.39.70.253 (-): 5 in the last 3600 secs; Ports: ; Direction: inout; ... show more (sshd) Failed SSH login from 103.39.70.253 (-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jul 1 07:50:06 webhosting2 sshd[10213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root Jul 1 07:50:08 webhosting2 sshd[10213]: Failed password for root from 103.39.70.253 port 39368 ssh2 Jul 1 07:50:10 webhosting2 sshd[10255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root Jul 1 07:50:12 webhosting2 sshd[10255]: Failed password for root from 103.39.70.253 port 39372 ssh2 Jul 1 07:50:14 webhosting2 sshd[10259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root show less	Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.119

🇺🇸 184.186.102.208

🇲🇽 148.245.169.230

🇹🇷 78.135.83.192

🇺🇸 45.79.177.245

🇧🇪 34.34.156.148

🇺🇸 24.206.80.69

🇨🇭 20.203.133.142

🇹🇼 198.235.24.43

🇧🇷 191.240.227.43

🇩🇪 167.94.146.45

🇺🇸 100.29.192.72

🇫🇷 91.196.152.109

🇪🇸 88.28.13.25

🇫🇷 85.217.140.31

🇷🇴 80.94.92.234

🇪🇸 80.28.254.80

🇺🇸 66.132.224.236

🇫🇷 51.38.224.114

🇲🇾 49.124.151.83