JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.39.70.253

103.39.70.253 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 55%: ?

55%

ISP	PT Gateway media Zafira
Usage Type	Fixed Line ISP
ASN	AS150274
Domain Name	zafira.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.39.70.253

Whois 103.39.70.253

IP Abuse Reports for 103.39.70.253:

This IP address has been reported a total of 22 times from 13 distinct sources. 103.39.70.253 was first reported on October 23rd 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 wrecker1602	2026-07-11 08:40:11 (10 hours ago)	2026-07-11T08:40:04.828430+00:00 WreckersBox sshd[34237]: Failed password for root from 103.39.70.25 ... show more 2026-07-11T08:40:04.828430+00:00 WreckersBox sshd[34237]: Failed password for root from 103.39.70.253 port 39276 ssh2 2026-07-11T08:40:08.036311+00:00 WreckersBox sshd[34239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root 2026-07-11T08:40:10.480083+00:00 WreckersBox sshd[34239]: Failed password for root from 103.39.70.253 port 39280 ssh2 ... show less	Brute-Force SSH
🇭🇰 CGT Software Webmaster	2026-07-10 01:51:31 (1 day ago)	2026-07-10T01:51:27.127936+00:00 CVM51718 sshd[230256]: Failed password for root from 103.39.70.253 ... show more 2026-07-10T01:51:27.127936+00:00 CVM51718 sshd[230256]: Failed password for root from 103.39.70.253 port 54308 ssh2 2026-07-10T01:51:28.971005+00:00 CVM51718 sshd[230258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root 2026-07-10T01:51:30.695810+00:00 CVM51718 sshd[230258]: Failed password for root from 103.39.70.253 port 54312 ssh2 ... show less	Port Scan Brute-Force
🇦🇹 urnilxfgbez	2026-07-09 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇸 Scan	2026-07-08 01:33:12 (3 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇯🇵 Execoop	2026-07-06 04:08:46 (5 days ago)	SSH honeypot \| Defense Evasion + Password Guessing (Heavy) \| 17031 auths, 2 cmds, 164.6m \| go_scanne ... show more SSH honeypot \| Defense Evasion + Password Guessing (Heavy) \| 17031 auths, 2 cmds, 164.6m \| go_scanner (likely bot) \| tactics: encoded commands show less	Hacking SSH
🇷🇸 Scan	2026-07-06 00:35:20 (5 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2026-07-04 01:04:06 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇬🇧 Smish	2026-07-01 06:50:45 (1 week ago)	(sshd) Failed SSH login from 103.39.70.253 (-): 5 in the last 3600 secs; Ports: ; Direction: inout; ... show more (sshd) Failed SSH login from 103.39.70.253 (-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jul 1 07:50:06 webhosting2 sshd[10213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root Jul 1 07:50:08 webhosting2 sshd[10213]: Failed password for root from 103.39.70.253 port 39368 ssh2 Jul 1 07:50:10 webhosting2 sshd[10255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root Jul 1 07:50:12 webhosting2 sshd[10255]: Failed password for root from 103.39.70.253 port 39372 ssh2 Jul 1 07:50:14 webhosting2 sshd[10259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.70.253 user=root show less	Brute-Force
🇦🇹 urnilxfgbez	2026-06-28 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇳🇵 radheykrishna.com.np	2026-06-28 07:09:37 (1 week ago)	Jun 28 12:54:37 kernel: [6120441.093762] [UFW BLOCK] IN=ens160 OUT= SRC=103.39.70.253 LEN=105 TOS=0x ... show more Jun 28 12:54:37 kernel: [6120441.093762] [UFW BLOCK] IN=ens160 OUT= SRC=103.39.70.253 LEN=105 TOS=0x00 PREC=0x00 TTL=56 ID=14889 DF PROTO=UDP SPT=38612 DPT=6881 LEN=85 ... show less	Port Scan
🇩🇪 Admins@FBN	2026-06-22 19:01:02 (2 weeks ago)	FW-PortScan: Traffic Blocked srcport=8841 dstport=8083	Port Scan
🇷🇸 Scan	2026-06-21 00:40:43 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 anycast_ac	2026-06-19 12:20:01 (3 weeks ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 2030 requests on port 443	DDoS Attack Web App Attack
Anonymous	2026-06-17 04:24:08 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇹 urnilxfgbez	2026-06-16 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.48.44.93

🇻🇳 27.71.99.173

🇳🇱 173.194.169.113

🇺🇸 173.91.46.151

🇺🇸 162.216.150.81

🇺🇸 162.216.150.65

🇺🇸 147.185.132.90

🇺🇸 147.185.132.88

🇺🇸 147.185.132.85

🇨🇳 124.31.104.58

🇰🇷 119.28.151.189

🇮🇱 82.80.249.157

🇺🇸 81.30.98.92

🇷🇴 80.94.95.242

🇮🇳 52.140.120.45

🇻🇳 45.121.24.222

🇬🇧 35.203.211.91

🇩🇪 217.86.170.55

🇳🇱 172.253.82.210

🇺🇸 165.154.202.142