JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.49.239.217

103.49.239.217 was found in our database!

This IP was reported 370 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Cloud Hosting Indonesia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136052
Hostname(s)	ip103-49-239-217.cloudhost.web.id
Domain Name	cloudhost.web.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.49.239.217

Whois 103.49.239.217

IP Abuse Reports for 103.49.239.217:

This IP address has been reported a total of 370 times from 188 distinct sources. 103.49.239.217 was first reported on July 16th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-06-04 15:43:16 (2 hours ago)	103.49.239.217 (ID/Indonesia/ip103-49-239-217.cloudhost.web.id), 5 distributed sshd attacks on accou ... show more 103.49.239.217 (ID/Indonesia/ip103-49-239-217.cloudhost.web.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 4 10:43:02 14926 sshd[23547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.239.217 user=root Jun 4 10:43:05 14926 sshd[23547]: Failed password for root from 103.49.239.217 port 34442 ssh2 Jun 4 10:26:47 14926 sshd[21986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.6.237 user=root Jun 4 10:26:49 14926 sshd[21986]: Failed password for root from 139.59.6.237 port 47550 ssh2 Jun 4 10:18:45 14926 sshd[21181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.156.253.13 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 mxpgmbh	2026-06-04 12:44:41 (5 hours ago)	2026-06-04T14:44:12.908072+02:00 ** sshd-session[40354]: pam_unix(sshd:auth): authentication failu ... show more 2026-06-04T14:44:12.908072+02:00 sshd-session[40354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.239.217 2026-06-04T14:44:14.435042+02:00 sshd-session[40354]: Failed password for invalid user from 103.49.239.217 port 47676 ssh2 2026-06-04T14:44:38.760601+02:00 sshd-session[41011]: Invalid user from 103.49.239.217 port 51834 2026-06-04T14:44:38.762584+02:00 sshd-session[41011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.239.217 2026-06-04T14:44:41.084983+02:00 sshd-session[41011]: Failed password for invalid user ** from 103.49.239.217 port 51834 ssh2 show less	Brute-Force SSH
🇩🇪 licen777	2026-06-04 09:23:26 (8 hours ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-04T09:23:20Z and 2026-06-0 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-04T09:23:20Z and 2026-06-04T09:23:26Z show less	Brute-Force SSH
🇺🇸 66691337	2026-06-04 00:40:50 (17 hours ago)	Jun 3 19:40:04 mail sshd[1847091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Jun 3 19:40:04 mail sshd[1847091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.239.217 Jun 3 19:40:06 mail sshd[1847091]: Failed password for invalid user frappe from 103.49.239.217 port 43092 ssh2 Jun 3 19:40:25 mail sshd[1847120]: Invalid user admin from 103.49.239.217 port 54598 Jun 3 19:40:25 mail sshd[1847120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.239.217 Jun 3 19:40:27 mail sshd[1847120]: Failed password for invalid user admin from 103.49.239.217 port 54598 ssh2 Jun 3 19:40:46 mail sshd[1847136]: Invalid user user1 from 103.49.239.217 port 43488 Jun 3 19:40:46 mail sshd[1847136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.239.217 Jun 3 19:40:49 mail sshd[1847136]: Failed password for invalid user user1 from 103.49.239.217 port 43488 ssh2 ... show less	Brute-Force SSH
🇫🇷 Ordis Hysa	2026-06-03 18:39:28 (23 hours ago)	2026-06-03T20:38:40.663791 vmi2089077.contaboserver.net sshd[3116295]: Invalid user development from ... show more 2026-06-03T20:38:40.663791 vmi2089077.contaboserver.net sshd[3116295]: Invalid user development from 103.49.239.217 port 38238 2026-06-03T20:39:07.180737 vmi2089077.contaboserver.net sshd[3116472]: Invalid user hr from 103.49.239.217 port 56238 2026-06-03T20:39:27.476047 vmi2089077.contaboserver.net sshd[3116618]: Invalid user newuser from 103.49.239.217 port 37232 ... show less	Brute-Force SSH
🇩🇪 et-a_network	2026-06-03 09:40:02 (1 day ago)	2026-06-03T09:36:56.554250+00:00 cloud.et-a.eu sshd[1730187]: Invalid user invitado from 103.49.239. ... show more 2026-06-03T09:36:56.554250+00:00 cloud.et-a.eu sshd[1730187]: Invalid user invitado from 103.49.239.217 port 48480 2026-06-03T09:37:21.435558+00:00 cloud.et-a.eu sshd[1730576]: Invalid user ai from 103.49.239.217 port 54882 2026-06-03T09:37:49.904593+00:00 cloud.et-a.eu sshd[1731087]: Invalid user newusername from 103.49.239.217 port 56350 2026-06-03T09:39:33.924932+00:00 cloud.et-a.eu sshd[1732834]: Invalid user test from 103.49.239.217 port 53838 2026-06-03T09:40:02.378632+00:00 cloud.et-a.eu sshd[1733267]: Invalid user hussain from 103.49.239.217 port 44570 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-03 09:36:49 (1 day ago)	103.49.239.217 (ID/Indonesia/ip103-49-239-217.cloudhost.web.id), 5 distributed sshd attacks on accou ... show more 103.49.239.217 (ID/Indonesia/ip103-49-239-217.cloudhost.web.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 3 04:09:51 15518 sshd[12438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.60.40 user=root Jun 3 04:09:54 15518 sshd[12438]: Failed password for root from 43.128.60.40 port 59466 ssh2 Jun 3 04:36:27 15518 sshd[26602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.239.217 user=root Jun 3 04:23:05 15518 sshd[19651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.79.47 user=root Jun 3 04:23:07 15518 sshd[19651]: Failed password for root from 146.70.79.47 port 59338 ssh2 IP Addresses Blocked: 43.128.60.40 (HK/Hong Kong/-) show less	Brute-Force SSH
🇭🇺 kranem	2026-06-03 03:35:30 (1 day ago)	2026-06-03T05:35:06.026706+02:00 CORE-0 sshd[1014066]: Failed password for invalid user luca from 10 ... show more 2026-06-03T05:35:06.026706+02:00 CORE-0 sshd[1014066]: Failed password for invalid user luca from 103.49.239.217 port 60936 ssh2 2026-06-03T05:35:07.099199+02:00 CORE-0 sshd[1014066]: Disconnected from invalid user luca 103.49.239.217 port 60936 [preauth] 2026-06-03T05:35:28.466119+02:00 CORE-0 sshd[1029525]: Invalid user braun from 103.49.239.217 port 47012 2026-06-03T05:35:28.469802+02:00 CORE-0 sshd[1029525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.239.217 2026-06-03T05:35:29.872805+02:00 CORE-0 sshd[1029525]: Failed password for invalid user braun from 103.49.239.217 port 47012 ssh2 ... show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2026-06-03 03:16:23 (1 day ago)	ID: 3819173628 \| PORT: 2187 \| https://103-49-239-217.scanthe.net	Port Scan
🇬🇧 andypiper	2026-06-03 01:00:34 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 licen777	2026-06-03 00:16:07 (1 day ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T00:13:23Z and 2026-06-0 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T00:13:23Z and 2026-06-03T00:16:07Z show less	Brute-Force SSH
🇧🇷 W8C Dev	2026-06-02 18:33:10 (1 day ago)	Jun 2 15:12:24 vidsell sshd[3644902]: Disconnected from authenticating user root 103.49.239.217 por ... show more Jun 2 15:12:24 vidsell sshd[3644902]: Disconnected from authenticating user root 103.49.239.217 port 49316 [preauth] Jun 2 15:33:10 vidsell sshd[3645866]: Disconnected from authenticating user root 103.49.239.217 port 51796 [preauth] ... show less	Brute-Force SSH
🇮🇹 Progetto1	2026-06-02 18:20:02 (1 day ago)	SSH - Failed Auth	Brute-Force Exploited Host SSH
🇩🇪 ghostwarriors	2026-06-02 12:50:10 (2 days ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
🇺🇸 bigscoots.com	2026-06-02 12:28:34 (2 days ago)	(sshd) Failed SSH login from 103.49.239.217 (ID/Indonesia/ip103-49-239-217.cloudhost.web.id): 5 in t ... show more (sshd) Failed SSH login from 103.49.239.217 (ID/Indonesia/ip103-49-239-217.cloudhost.web.id): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 2 07:23:30 14370 sshd[16821]: Invalid user kontakt from 103.49.239.217 port 37762 Jun 2 07:23:33 14370 sshd[16821]: Failed password for invalid user kontakt from 103.49.239.217 port 37762 ssh2 Jun 2 07:27:58 14370 sshd[19338]: Invalid user ekonomi from 103.49.239.217 port 55604 Jun 2 07:28:00 14370 sshd[19338]: Failed password for invalid user ekonomi from 103.49.239.217 port 55604 ssh2 Jun 2 07:28:24 14370 sshd[19660]: Invalid user ee from 103.49.239.217 port 53248 show less	Brute-Force SSH

Showing 1 to 15 of 370 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 196.202.50.26

🇺🇸 192.250.227.24

🇮🇳 122.175.36.92

🇸🇬 66.90.98.90

🇳🇱 195.178.110.30

🇩🇪 191.101.92.164

🇦🇿 188.253.209.97

🇺🇸 166.1.60.230

🇸🇬 152.42.160.174

🇵🇰 59.103.250.143

🇩🇪 49.13.222.98

🇸🇳 41.82.212.193

🇩🇪 213.209.159.56

🇺🇸 162.216.150.7

🇺🇸 143.42.1.213

🇺🇸 137.184.254.224

🇯🇵 118.194.236.118

🇿🇦 102.129.56.106

🇬🇧 81.19.222.43

🇺🇸 40.124.173.31