JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.31.39.11

103.31.39.11 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 0%: ?

ISP	PT Cloud Hosting Indonesia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136052
Hostname(s)	ip103-31-39-11.cloudhost.web.id
Domain Name	cloudhost.web.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.31.39.11

Whois 103.31.39.11

IP Abuse Reports for 103.31.39.11:

This IP address has been reported a total of 216 times from 133 distinct sources. 103.31.39.11 was first reported on February 27th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-28 07:33:20 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=3)	Hacking Brute-Force SSH
Anonymous	2026-03-24 11:02:59 (5 months ago)	Fail2ban: sshd - 2592000s ban	Brute-Force SSH
Anonymous	2026-03-14 12:52:33 (5 months ago)	Fail2ban: sshd - 2592000s ban	Brute-Force SSH
🇰🇷 i553041	2026-03-03 05:35:24 (5 months ago)	/var/log/auth.log.1:Mar 1 02:43:03 instance-20210809-1933 sshd[1854624]: Disconnected from authenti ... show more /var/log/auth.log.1:Mar 1 02:43:03 instance-20210809-1933 sshd[1854624]: Disconnected from authenticating user root 103.31.39.11 port 43002 [preauth] /var/log/auth.log.1:Mar 1 02:46:59 instance-20210809-1933 sshd[1854657]: Received disconnect from 103.31.39.11 port 40042:11: Bye Bye [preauth] /var/log/auth.log.1:Mar 1 02:46:59 instance-20210809-1933 sshd[1854657]: Disconnected from authenticating user root 103.31.39.11 port 40042 [preauth] show less	Brute-Force Port Scan Web App Attack
🇰🇷 i553041	2026-03-02 05:24:21 (5 months ago)	Mar 1 02:34:33 instance-20210809-1933 sshd[1853287]: Disconnected from authenticating user root 103 ... show more Mar 1 02:34:33 instance-20210809-1933 sshd[1853287]: Disconnected from authenticating user root 103.31.39.11 port 48288 [preauth] Mar 1 02:43:03 instance-20210809-1933 sshd[1854624]: Received disconnect from 103.31.39.11 port 43002:11: Bye Bye [preauth] Mar 1 02:43:03 instance-20210809-1933 sshd[1854624]: Disconnected from authenticating user root 103.31.39.11 port 43002 [preauth] Mar 1 02:46:59 instance-20210809-1933 sshd[1854657]: Received disconnect from 103.31.39.11 port 40042:11: Bye Bye [preauth] Mar 1 02:46:59 instance-20210809-1933 sshd[1854657]: Disconnected from authenticating user root 103.31.39.11 port 40042 [preauth] show less	Brute-Force SSH
🇫🇮 6kilowatti	2026-03-02 03:36:19 (5 months ago)	2026-03-02T05:36:17.049250+02:00 oh6ah sshd[1119802]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-03-02T05:36:17.049250+02:00 oh6ah sshd[1119802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.11 2026-03-02T05:36:18.834122+02:00 oh6ah sshd[1119802]: Failed password for invalid user rootadmin from 103.31.39.11 port 50600 ssh2 ... show less	Brute-Force SSH
🇭🇰 bing	2026-03-02 03:34:08 (5 months ago)	2026-03-02T03:34:05.515850 ZT2083209408 sshd[3956221]: pam_unix(sshd:auth): authentication failure; ... show more 2026-03-02T03:34:05.515850 ZT2083209408 sshd[3956221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.11 2026-03-02T03:34:08.180000 ZT2083209408 sshd[3956221]: Failed password for invalid user rootadmin from 103.31.39.11 port 33840 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-03-02 03:02:52 (5 months ago)	Fail2Ban detection - brute-force attempt (jail: sshd)	Brute-Force
🇺🇸 jennij	2026-03-02 00:47:08 (5 months ago)	Fail2Ban sshd ban on luckymc.gg ...	Brute-Force SSH
🇫🇷 tyabus	2026-03-02 00:45:29 (5 months ago)	SSH Bruteforce ...	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-02 00:43:39 (5 months ago)	103.31.39.11 (ID/Indonesia/ip103-31-39-11.cloudhost.web.id), 5 distributed sshd attacks on account [ ... show more 103.31.39.11 (ID/Indonesia/ip103-31-39-11.cloudhost.web.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 1 18:38:39 15014 sshd[4503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.11 user=root Mar 1 18:38:42 15014 sshd[4503]: Failed password for root from 103.31.39.11 port 34362 ssh2 Mar 1 18:43:28 15014 sshd[4934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.11 user=root Mar 1 18:43:31 15014 sshd[4934]: Failed password for root from 103.31.39.11 port 39836 ssh2 Mar 1 18:42:58 15014 sshd[4837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.168.71.160 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇳🇱 majo-it.nl	2026-03-02 00:00:57 (5 months ago)	Mar 2 00:00:54 fail2ban sshd[3178490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Mar 2 00:00:54 fail2ban sshd[3178490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.11 user=root Mar 2 00:00:56 fail2ban sshd[3178490]: Failed password for root from 103.31.39.11 port 53866 ssh2 ... show less	Brute-Force SSH
🇧🇷 W8C Dev	2026-03-02 00:00:42 (5 months ago)	Mar 1 20:54:59 vidsell sshd[1448143]: Disconnected from authenticating user root 103.31.39.11 port ... show more Mar 1 20:54:59 vidsell sshd[1448143]: Disconnected from authenticating user root 103.31.39.11 port 39120 [preauth] Mar 1 21:00:41 vidsell sshd[1448331]: Disconnected from authenticating user root 103.31.39.11 port 60174 [preauth] ... show less	Brute-Force SSH
🇭🇺 sRichy	2026-03-01 23:21:43 (5 months ago)	Mar 2 00:12:58 racetecweb sshd[3379094]: User root from 103.31.39.11 not allowed because not listed ... show more Mar 2 00:12:58 racetecweb sshd[3379094]: User root from 103.31.39.11 not allowed because not listed in AllowUsers Mar 2 00:18:05 racetecweb sshd[3379367]: User root from 103.31.39.11 not allowed because not listed in AllowUsers Mar 2 00:21:42 racetecweb sshd[3379411]: User root from 103.31.39.11 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-01 23:17:58 (5 months ago)	103.31.39.11 (ID/Indonesia/ip103-31-39-11.cloudhost.web.id), 5 distributed sshd attacks on account [ ... show more 103.31.39.11 (ID/Indonesia/ip103-31-39-11.cloudhost.web.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 1 17:17:47 14250 sshd[31805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.11 user=root Mar 1 17:12:16 14250 sshd[31299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.11 user=root Mar 1 17:12:17 14250 sshd[31299]: Failed password for root from 103.31.39.11 port 60292 ssh2 Mar 1 17:15:25 14250 sshd[31600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.70.45 user=root Mar 1 17:15:27 14250 sshd[31600]: Failed password for root from 140.246.70.45 port 51248 ssh2 IP Addresses Blocked: show less	Brute-Force SSH

Showing 1 to 15 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 13.89.124.22

🇺🇸 4.242.119.13

🇮🇪 2a05:d018:1d9d:e702:1f98:fde7:44b:1f00

🇳🇱 195.178.110.218

🇳🇱 185.223.235.45

🇺🇸 51.81.169.114

🇺🇸 51.81.163.78

🇳🇱 45.148.10.151

🇬🇧 35.203.210.47

🇨🇭 31.10.165.66

🇨🇳 218.202.91.147

🇧🇴 190.181.25.210

🇧🇷 186.227.215.77

🇺🇸 173.239.240.36

🇺🇸 172.245.135.89

🇩🇪 89.163.254.46

🇰🇷 49.247.37.22

🇺🇸 34.61.185.54

🇸🇬 8.219.161.21

🇳🇱 193.47.62.69