JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.13.229.116

103.13.229.116 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	CH-CH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS23884
Hostname(s)	vps379.vpshispeed.net
Domain Name	cloudhosting.co.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.13.229.116

Whois 103.13.229.116

IP Abuse Reports for 103.13.229.116:

This IP address has been reported a total of 48 times from 41 distinct sources. 103.13.229.116 was first reported on July 5th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-07-08 10:51:41 (1 day ago)	portscan on multiple TCP ports : Firewall: Within 2026-07-06 04:27:55 - 2026-07-06 04:27:56 CEST(+02 ... show more portscan on multiple TCP ports : Firewall: Within 2026-07-06 04:27:55 - 2026-07-06 04:27:56 CEST(+0200) identified: unallowed access from 103.13.229.116/32 on port 2222(tcp:2222) (1 trial) Fail2ban: Within 2026-07-06 04:27:55 - 2026-07-06 04:27:56 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive] show less	Port Scan
🇦🇹 urnilxfgbez	2026-07-06 22:45:00 (3 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-07-06 05:00:42 (3 days ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇵🇱 Kotiacat_one	2026-07-06 03:42:34 (3 days ago)	2026-07-06T06:42:33.708940+03:00 kotia sshd-session[239261]: Invalid user admin from 103.13.229.116 ... show more 2026-07-06T06:42:33.708940+03:00 kotia sshd-session[239261]: Invalid user admin from 103.13.229.116 port 57196 ... show less	Brute-Force SSH
🇫🇷 antivirus_5846	2026-07-06 03:36:59 (3 days ago)	Jul 6 05:36:21 hestiacp-tunnel-ip sshd[130483]: Invalid user orangepi from 103.13.229.116 port 5154 ... show more Jul 6 05:36:21 hestiacp-tunnel-ip sshd[130483]: Invalid user orangepi from 103.13.229.116 port 51548 Jul 6 05:36:21 hestiacp-tunnel-ip sshd[130483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.229.116 Jul 6 05:36:23 hestiacp-tunnel-ip sshd[130483]: Failed password for invalid user orangepi from 103.13.229.116 port 51548 ssh2 Jul 6 05:36:55 hestiacp-tunnel-ip sshd[130485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.13.229.116 user=root Jul 6 05:36:58 hestiacp-tunnel-ip sshd[130485]: Failed password for root from 103.13.229.116 port 51636 ssh2 ... show less	Brute-Force SSH
🇨🇦 zapteryx	2026-07-06 03:02:07 (3 days ago)	2026-07-06T02:56:12.665584 octo sshd[301835]: Invalid user admin from 103.13.229.116 port 49580 2026 ... show more 2026-07-06T02:56:12.665584 octo sshd[301835]: Invalid user admin from 103.13.229.116 port 49580 2026-07-06T02:56:45.138620 octo sshd[301850]: Invalid user orangepi from 103.13.229.116 port 49644 2026-07-06T03:00:29.394113 octo sshd[302091]: Invalid user test from 103.13.229.116 port 50110 2026-07-06T03:01:02.049535 octo sshd[302133]: Invalid user user from 103.13.229.116 port 50194 2026-07-06T03:02:06.411945 octo sshd[302214]: Invalid user admin from 103.13.229.116 port 50344 ... show less	Brute-Force SSH
🇦🇹 Filli Group	2026-07-06 02:53:34 (4 days ago)	2026-07-06T04:52:30.523317+02:00 monitoring.infra.crazycraftland.net sshd-session[688437]: Invalid u ... show more 2026-07-06T04:52:30.523317+02:00 monitoring.infra.crazycraftland.net sshd-session[688437]: Invalid user admin from 103.13.229.116 port 40654 2026-07-06T04:53:02.663564+02:00 monitoring.infra.crazycraftland.net sshd-session[688531]: Invalid user orangepi from 103.13.229.116 port 40724 2026-07-06T04:53:34.225760+02:00 monitoring.infra.crazycraftland.net sshd-session[688621]: User root from 103.13.229.116 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Anonymous	2026-07-06 02:48:06 (4 days ago)	2026-07-06T05:48:05.670639 localhost.localdomain sshd[3657083]: Invalid user admin from 103.13.229.1 ... show more 2026-07-06T05:48:05.670639 localhost.localdomain sshd[3657083]: Invalid user admin from 103.13.229.116 port 48016 ... show less	Brute-Force SSH
Anonymous	2026-07-06 02:37:16 (4 days ago)	SSH brute force attempt. User: admin, Pass: [REDACTED]	Brute-Force SSH
🇩🇪 phil2k	2026-07-06 02:27:58 (4 days ago)	fail2ban:firewall:2026-07-06T04:27:55.827979+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-07-06T04:27:55.827979+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=103.13.229.116 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=25854 PROTO=TCP SPT=45688 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-06T04:27:55.828008+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=103.13.229.116 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=25854 PROTO=TCP SPT=45688 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan SSH
🇫🇷 LRob	2026-07-06 02:02:10 (4 days ago)	CrowdSec: crowdsecurity/http-cve-2021-41773 \| req: ["/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more CrowdSec: crowdsecurity/http-cve-2021-41773 \| req: ["/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] \| UA: ["-"] show less	Web App Attack
🇹🇭 MWA SOC	2026-07-06 01:52:16 (4 days ago)		Hacking
🇺🇸 MPL	2026-07-06 01:23:10 (4 days ago)	tcp/2222 (4 or more attempts)	Port Scan
🇩🇪 [email protected]	2026-07-06 00:30:36 (4 days ago)	...	Brute-Force SSH
🇺🇸 MPL	2026-07-06 00:20:10 (4 days ago)	tcp/23 (4 or more attempts)	Port Scan

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇫 180.94.75.110

🇧🇷 177.85.247.230

🇺🇸 152.32.205.153

🇸🇬 212.73.148.13

🇳🇱 185.93.89.147

🇺🇸 184.105.139.94

🇺🇸 172.253.249.61

🇺🇸 154.83.197.87

🇺🇸 147.185.132.85

🇸🇬 140.245.98.209

🇹🇷 94.154.43.30

🇫🇷 91.196.152.222

🇬🇧 81.19.219.240

🇳🇱 81.19.216.111

🇺🇸 64.62.156.45

🇳🇱 45.198.224.120

🇳🇱 45.148.10.151

🇬🇧 217.146.80.112

🇰🇷 211.51.132.104

🇺🇸 207.90.244.21