JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.139.244.233

103.139.244.233 was found in our database!

This IP was reported 652 times. Confidence of Abuse is 100%: ?

100%

ISP	PT. PRIMA NUSANTARA TELEKOMUNIKASI
Usage Type	Data Center/Web Hosting/Transit
ASN	AS151000
Hostname(s)	233.244.139.103.metroreload.biz
Domain Name	primantara.net
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.139.244.233

Whois 103.139.244.233

IP Abuse Reports for 103.139.244.233:

This IP address has been reported a total of 652 times from 318 distinct sources. 103.139.244.233 was first reported on August 10th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vey Dron	2026-06-11 06:25:17 (1 week ago)	SSH brute force attack on port <port> (Fail2ban on mmo-de)	Brute-Force SSH
🇩🇪 Vey Dron	2026-06-09 06:09:56 (1 week ago)	SSH brute force attack on port <port> (Fail2ban on mmo-de)	Brute-Force SSH
🇺🇸 NetGuard	2026-06-03 07:54:21 (2 weeks ago)	#honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard2 ... show more #honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-05-27T08:01:53.494+00:00 Attacker IP: 103.139.244.233 \| Port: N/A \| Country: Indonesia Honeypot: cowrie \| Attack: ssh_telnet_probe Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇩🇪 Random	2026-06-03 06:37:09 (2 weeks ago)	Fail2Ban sshd jail triggered for 103.139.244.233	Brute-Force SSH
🇩🇪 Vey Dron	2026-06-03 06:03:02 (2 weeks ago)	SSH brute force attack on port <port> (Fail2ban on mmo-de)	Brute-Force SSH
🇨🇭 Modules	2026-06-01 10:00:00 (2 weeks ago)	Cowrie: cowrie.session.connect proto=ssh \| Cowrie: cowrie.client.version proto=ssh \| Cowrie: cowrie. ... show more Cowrie: cowrie.session.connect proto=ssh \| Cowrie: cowrie.client.version proto=ssh \| Cowrie: cowrie.client.kex proto=ssh \| Cowrie: cowrie.login.success user=user21 pwd=user21 proto=ssh \| Cowrie: cowrie.session.params proto=ssh \| Cowrie: cowrie.command.input proto=ssh \| Cowrie: cowrie.command.failed proto=ssh \| Cowrie: cowrie.log.closed proto=ssh \| Cowrie: cowrie.session.file_download proto=ssh \| Cowrie: cowrie.session.closed proto=ssh \| Cowrie: cowrie.login.failed user=user21 pwd=3245gs5662d34 proto=ssh (23 events, first: 2026-05-31T22:56:45.210Z, last: 2026-05-31T22:56:55.235Z) show less	Port Scan SSH
🇲🇽 Luyi_ASCII	2026-06-01 09:39:56 (2 weeks ago)	SSH brute force attack detected by Cowrie honeypot	Brute-Force SSH
🇫🇷 kleine babykatze	2026-06-01 09:22:48 (2 weeks ago)	2026-06-01T11:02:52.501426+02:00 vmd177327 sshd[3151840]: Failed password for invalid user bounce fr ... show more 2026-06-01T11:02:52.501426+02:00 vmd177327 sshd[3151840]: Failed password for invalid user bounce from 103.139.244.233 port 49066 ssh2 2026-06-01T11:22:45.196223+02:00 vmd177327 sshd[3254430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.244.233 user=root 2026-06-01T11:22:47.064719+02:00 vmd177327 sshd[3254430]: Failed password for root from 103.139.244.233 port 49742 ssh2 ... show less	Brute-Force SSH FTP Brute-Force
🇩🇪 formality	2026-06-01 08:34:22 (2 weeks ago)	Invalid user ricoh from 103.139.244.233 port 48384	Brute-Force SSH
🇮🇹 alph44	2026-06-01 07:13:16 (2 weeks ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇫🇷 NetEye	2026-06-01 07:12:28 (2 weeks ago)	SSH brute force login attempt	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-01 07:08:27 (2 weeks ago)	103.139.244.233 (ID/Indonesia/233.244.139.103.metroreload.biz), 5 distributed sshd attacks on accoun ... show more 103.139.244.233 (ID/Indonesia/233.244.139.103.metroreload.biz), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 1 02:00:49 14601 sshd[13863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.244.233 user=root Jun 1 02:00:51 14601 sshd[13863]: Failed password for root from 103.139.244.233 port 58420 ssh2 Jun 1 02:08:07 14601 sshd[18476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.224.81.31 user=root Jun 1 01:59:41 14601 sshd[13212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.224.81.31 user=root Jun 1 01:59:43 14601 sshd[13212]: Failed password for root from 4.224.81.31 port 44154 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇯🇵 Execoop	2026-06-01 05:12:47 (2 weeks ago)	SSH honeypot \| SSH Backdoor Install + Auth Attempts (Moderate) \| 5 auths (4 users), 4 cmds, 18.3m \| ... show more SSH honeypot \| SSH Backdoor Install + Auth Attempts (Moderate) \| 5 auths (4 users), 4 cmds, 18.3m \| libssh \| tactics: SSH key injection, tunnel/proxy show less	Hacking Exploited Host SSH
🇩🇪 ipcop.net	2026-06-01 03:59:40 (2 weeks ago)	2026-06-01T05:51:39.963975+02:00 gw-de20-01.guestgw.net sshd[190361]: Disconnected from authenticati ... show more 2026-06-01T05:51:39.963975+02:00 gw-de20-01.guestgw.net sshd[190361]: Disconnected from authenticating user admin 103.139.244.233 port 36160 [preauth] 2026-06-01T05:57:42.820124+02:00 gw-de20-01.guestgw.net sshd[192124]: Invalid user bodega from 103.139.244.233 port 57408 2026-06-01T05:57:43.034727+02:00 gw-de20-01.guestgw.net sshd[192124]: Disconnected from invalid user bodega 103.139.244.233 port 57408 [preauth] 2026-06-01T05:59:39.540963+02:00 gw-de20-01.guestgw.net sshd[192672]: Invalid user cmm from 103.139.244.233 port 38848 2026-06-01T05:59:39.747371+02:00 gw-de20-01.guestgw.net sshd[192672]: Disconnected from invalid user cmm 103.139.244.233 port 38848 [preauth] show less	Brute-Force
🇺🇸 jennij	2026-06-01 03:52:49 (2 weeks ago)	Fail2Ban sshd ban on luckymc.gg ...	Brute-Force SSH

Showing 1 to 15 of 652 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 67.227.113.189

🇸🇬 47.82.14.222

🇸🇬 213.35.123.154

🇧🇪 198.235.24.235

🇳🇱 176.65.139.56

🇺🇸 162.216.149.164

🇩🇪 162.19.243.145

🇺🇸 107.150.103.151

🇨🇦 85.217.149.70

🇨🇷 82.23.227.244

🇺🇸 72.10.32.138

🇫🇷 51.255.167.208

🇫🇮 45.130.127.173

🇸🇬 43.128.113.103

🇮🇩 41.216.178.119

🇧🇷 187.51.212.130

🇫🇷 185.113.249.159

🇸🇬 129.226.213.238

🇨🇳 106.63.26.6

🇭🇰 103.243.24.124