AbuseIPDB » 103.217.144.139

103.217.144.139 was found in our database!

This IP was reported 1,972 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Guna Bahan Inti
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136052
Hostname(s)	mail.invra.id
Domain Name	gunabahan.my.id
Country	Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 103.217.144.139

Whois 103.217.144.139

IP Abuse Reports for 103.217.144.139:

This IP address has been reported a total of 1,972 times from 601 distinct sources. 103.217.144.139 was first reported on June 11th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bogdanv	2025-03-26 19:36:33 (1 day ago)	$f2bV_matches	Brute-Force SSH
bogdanv	2025-03-24 15:31:12 (4 days ago)	$f2bV_matches	Brute-Force SSH
bogdanv	2025-03-21 16:29:29 (1 week ago)	$f2bV_matches	Brute-Force SSH
bogdanv	2025-03-15 16:08:01 (1 week ago)	$f2bV_matches	Brute-Force SSH
rtbh.com.tr	2025-03-11 20:49:02 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Parth Maniar	2025-03-11 13:01:23 (2 weeks ago)	This IP address carried out 148 port scanning attempts on 10-03-2025. For more information or to rep ... show moreThis IP address carried out 148 port scanning attempts on 10-03-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
Parth Maniar	2025-03-11 11:25:37 (2 weeks ago)	This IP address carried out 32 SSH credential attack (attempts) on 10-03-2025. For more information ... show moreThis IP address carried out 32 SSH credential attack (attempts) on 10-03-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
urnilxfgbez	2025-03-10 23:45:00 (2 weeks ago)	Last 24 hours Brute Force Attacks	Brute-Force
ThreatBook.io	2025-03-10 22:44:21 (2 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/103.217.144.139	Brute-Force
rtbh.com.tr	2025-03-10 20:49:04 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
boxed-it	2025-03-10 10:04:29 (2 weeks ago)	sshd[1739699]: Invalid user test from 103.217.144.139 port 35268 sshd[1739699]: pam_unix(sshd: ... show moresshd[1739699]: Invalid user test from 103.217.144.139 port 35268 sshd[1739699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.217.144.139 sshd[1739699]: Failed password for invalid user test from 103.217.144.139 port 35268 ssh2 sshd[1744045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.217.144.139 user=root sshd[1744045]: Failed password for root from 103.217.144.139 port 40390 ssh2 show less	Brute-Force SSH
ballichar.de	2025-03-10 10:03:04 (2 weeks ago)	Mar 10 11:03:00 dalia sshd[3438986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreMar 10 11:03:00 dalia sshd[3438986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.217.144.139 Mar 10 11:03:03 dalia sshd[3438986]: Failed password for invalid user test from 103.217.144.139 port 47254 ssh2 ... show less	Brute-Force SSH
pcpiefke	2025-03-10 07:24:21 (2 weeks ago)	(sshd) Failed SSH login from 103.217.144.139 (ID/Indonesia/mail.invra.id)	Brute-Force SSH
amit177	2025-03-10 07:23:53 (2 weeks ago)		Brute-Force SSH
Deveroonie	2025-03-10 07:10:55 (2 weeks ago)	2025-03-10T07:10:55.105310+00:00 instance-20241105-1951 sshd[1366401]: Disconnected from authenticat ... show more2025-03-10T07:10:55.105310+00:00 instance-20241105-1951 sshd[1366401]: Disconnected from authenticating user root 103.217.144.139 port 49722 [preauth] ... show less	Hacking Brute-Force SSH