JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.98.149.56

103.98.149.56 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 100%: ?

100%

ISP	Maxserver Company Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135921
Domain Name	maxserver.com
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.98.149.56

Whois 103.98.149.56

IP Abuse Reports for 103.98.149.56:

This IP address has been reported a total of 119 times from 54 distinct sources. 103.98.149.56 was first reported on May 31st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Da_tschek	2026-06-06 18:49:57 (2 hours ago)	Port scanning	Port Scan Hacking
🇩🇪 phil2k	2026-06-06 11:59:43 (9 hours ago)	Firewall: Within 2026-05-31 22:55:05 - 2026-06-05 17:12:20 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-05-31 22:55:05 - 2026-06-05 17:12:20 CEST(+0200) identified: unallowed access from 103.98.149.56 on port 3389(ms-wbt-server) (1 trial) Fail2ban: Within 2026-05-31 22:55:05 - 2026-06-05 17:12:20 CEST(+0200) banned: 6 times by fail2ban[firewall] show less	Port Scan Brute-Force
🇩🇪 Lazentis	2026-06-06 10:54:25 (10 hours ago)	Unauthorized access attempt to port 3389 (tcp)	Brute-Force SSH
🇩🇪 HoneyPot-FrPri	2026-06-06 10:41:34 (10 hours ago)	1780742493 - 06/06/2026 12:41:33 Host: 103.98.149.56/103.98.149.56 Port: 2323 TCP Blocked ...	Port Scan
🇩🇪 Mailguard-FRD	2026-06-06 10:34:43 (11 hours ago)	1780742082 - 06/06/2026 12:34:42 Host: 103.98.149.56/103.98.149.56 Port: 3389 TCP Blocked ...	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-06 10:34:38 (11 hours ago)	Honeypot [nx-infrastructure]: Unauthorized traffic (19 bytes of payload); 3389 [1] TCP Reported by: ... show more Honeypot [nx-infrastructure]: Unauthorized traffic (19 bytes of payload); 3389 [1] TCP Reported by: Justin F. show less	Port Scan
🇭🇰 pengpeng	2026-06-06 09:36:28 (11 hours ago)	monitor: on ser162528253480 \| port: 3389 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 3389 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 mkey	2026-06-06 08:05:01 (13 hours ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=3389 \| HITS=2 \| IPSET=ADD \| FIRST=2026-06-06 09:58:42 \| LAST=2026-06-06 09:59:05. Last seen 2026-06-06 09:59:05. show less	Port Scan
🇩🇪 IP Analyzer	2026-06-05 23:30:30 (22 hours ago)	Unauthorized connection attempt from IP address 103.98.149.56 on Port 3389(RDP)	Port Scan
🇫🇷 Soncraft	2026-06-05 23:16:13 (22 hours ago)	Blocked by UFW on Jellyfin [3389/tcp] Source port: 59000 TTL: 229 Packet length: 44 TOS: 0x08 This ... show more Blocked by UFW on Jellyfin [3389/tcp] Source port: 59000 TTL: 229 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-06-05 23:11:38 (22 hours ago)	Unauthorized access (tcp/3389/rdp)	Port Scan
🇩🇪 ValtonTahiri	2026-06-05 22:58:28 (22 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=103.98.149.56; proto=TCP; source_port=59000; target_port=3389; flags=SYN show less	Port Scan
🇩🇪 zupan	2026-06-05 22:56:12 (22 hours ago)	Blocked by UFW on vps [3389/tcp] \| SPT: 59000 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [3389/tcp] \| SPT: 59000 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 sthoyer.de	2026-06-05 22:45:52 (22 hours ago)	Jun 6 00:45:51 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 6 00:45:51 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.98.149.56 DST=173.212.223.67 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=56739 PROTO=TCP SPT=59000 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 Andrew	2026-06-05 22:38:57 (22 hours ago)	Blocked by UFW (TCP on port 3389). Source port: 59000 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 3389). Source port: 59000 TTL: 241 Packet length: 40 TOS: 0x00 This report (for 103.98.149.56) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.244.168.123

🇨🇳 183.250.25.11

🇨🇳 106.75.139.82

🇺🇸 104.23.190.163

🇺🇸 216.180.246.120

🇧🇷 205.210.31.220

🇫🇷 146.70.40.68

🇨🇳 119.98.69.109

🇺🇸 98.93.104.4

🇺🇸 74.94.1.61

🇨🇳 60.16.216.55

🇵🇱 31.179.197.26

🇨🇳 27.150.188.148

🇺🇸 198.211.112.71

🇪🇪 196.196.222.203

🇮🇩 160.187.174.22

🇫🇮 147.185.133.2

🇰🇷 112.151.178.49

🇱🇹 81.30.98.144

🇧🇬 79.124.59.78