AbuseIPDB » 103.252.116.179

103.252.116.179 was found in our database!

This IP was reported 361 times. Confidence of Abuse is 100%: ?

100%

ISP	Kamatera Inc.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	kamatera.com
Country	Hong Kong
City	Hong Kong, Hong Kong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 103.252.116.179

Whois 103.252.116.179

IP Abuse Reports for 103.252.116.179:

This IP address has been reported a total of 361 times from 88 distinct sources. 103.252.116.179 was first reported on April 2nd 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
nNordic	2024-09-14 06:45:45 (1 day ago)	Connection attempt blocked by IDS/IPS from IP 103.252.116.179/32	Hacking
gu-alvareza	2024-09-01 07:05:24 (2 weeks ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking Web App Attack
diego	2024-09-01 04:31:55 (2 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
SELECT-IT Beratung und IT Dienstleistung GmbH	2024-09-01 03:23:09 (2 weeks ago)	2024-09-01T05:23:11.337698+02:00 runner3 sshd[1002206]: pam_unix(sshd:auth): authentication failure; ... show more2024-09-01T05:23:11.337698+02:00 runner3 sshd[1002206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.252.116.179 user=root 2024-09-01T05:23:13.506192+02:00 runner3 sshd[1002206]: Failed password for root from 103.252.116.179 port 45866 ssh2 2024-09-01T05:23:41.774243+02:00 runner3 sshd[1002211]: Invalid user postgres from 103.252.116.179 port 55656 2024-09-01T05:23:41.778020+02:00 runner3 sshd[1002211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.252.116.179 2024-09-01T05:23:43.399928+02:00 runner3 sshd[1002211]: Failed password for invalid user postgres from 103.252.116.179 port 55656 ssh2 ... show less	Brute-Force SSH
ATV	2024-09-01 03:04:26 (2 weeks ago)	Unsolicited connection attempts to port 22	Hacking SSH
sid3windr	2024-09-01 00:40:30 (2 weeks ago)	SSH port scan (Tarpitted for 1m50s, wasted 173B)	Port Scan SSH
MPL	2024-08-31 23:59:01 (2 weeks ago)	tcp/23	Port Scan
MPL	2024-08-31 23:59:01 (2 weeks ago)	tcp/23	Port Scan
MPL	2024-08-31 20:45:33 (2 weeks ago)	tcp/22	Port Scan
MPL	2024-08-31 20:45:33 (2 weeks ago)	tcp/22	Port Scan
diego	2024-08-31 19:31:52 (2 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 5 times in the last 10800 seconds	DDoS Attack
KPS	2024-08-31 18:04:35 (2 weeks ago)	PortscanM	Port Scan
RAP	2024-08-31 17:33:32 (2 weeks ago)	Probing web services for vulnerabilities	Port Scan
Anonymous	2024-08-31 16:43:55 (2 weeks ago)	Drop from IP address 103.252.116.179 to tcp-port 2222	Port Scan
diego	2024-08-31 15:21:10 (2 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 5 times in the last 10800 seconds	DDoS Attack