JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.10.231.251

103.10.231.251 was found in our database!

This IP was reported 272 times. Confidence of Abuse is 41%: ?

41%

ISP	National Telecom Public Company Limited
Usage Type	Fixed Line ISP
ASN	AS131090
Domain Name	ntplc.co.th
Country	🇹🇭 Thailand
City	Nakhon Sawan, Nakhon Sawan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.10.231.251

Whois 103.10.231.251

IP Abuse Reports for 103.10.231.251:

This IP address has been reported a total of 272 times from 49 distinct sources. 103.10.231.251 was first reported on October 2nd 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 vtchost.com	2026-07-18 15:34:21 (6 hours ago)	Jul 18 17:34:20 vtchost kernel: [115939.157606] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more Jul 18 17:34:20 vtchost kernel: [115939.157606] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=103.10.231.251 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=3130 DF PROTO=TCP SPT=52491 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 crnpekgoz	2026-07-17 09:31:26 (1 day ago)	[PortScan] Risk=100 ASN=131090 (portscan) Port=445 HoneypotTrap=true Recidivist#3 \| Reported by Ward ... show more [PortScan] Risk=100 ASN=131090 (portscan) Port=445 HoneypotTrap=true Recidivist#3 \| Reported by WardenIPS: https://github.com/msncakma/WardenIPS show less	Port Scan
🇳🇱 BIV	2026-07-12 05:36:51 (6 days ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 445. Automated tiered ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 445. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇺🇸 knock	2026-06-29 14:43:23 (2 weeks ago)	Knock-Knock honeypot brute-force: SMB (4 total hits)	Brute-Force
🇦🇹 urnilxfgbez	2026-06-28 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 IP Analyzer	2026-06-20 14:00:22 (4 weeks ago)	Unauthorized connection attempt from IP address 103.10.231.251 on Port 445(SMB)	Port Scan
🇫🇷 sthoyer.de	2026-06-09 12:56:27 (1 month ago)	Jun 9 14:56:26 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 9 14:56:26 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.10.231.251 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=13401 DF PROTO=TCP SPT=64915 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-06-04 21:06:00 (1 month ago)	Jun 4 23:05:59 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 4 23:05:59 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.10.231.251 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=9928 DF PROTO=TCP SPT=53111 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-06-04 21:04:46 (1 month ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-06-04 19:42:39 (1 month ago)	Jun 4 21:42:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 4 21:42:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.10.231.251 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=30625 DF PROTO=TCP SPT=51468 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-06-03 19:46:06 (1 month ago)	tcp/445	Port Scan
🇬🇧 PeravixGroup	2026-05-25 14:56:11 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇵🇱 nfsec.pl	2026-05-24 15:24:38 (1 month ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan
🇫🇷 vtchost.com	2026-05-20 22:09:05 (1 month ago)	May 21 00:09:05 vtchost kernel: [226315.743742] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more May 21 00:09:05 vtchost kernel: [226315.743742] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=103.10.231.251 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=109 ID=31668 DF PROTO=TCP SPT=51793 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-05-18 05:25:04 (2 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 272 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.78

🇧🇷 177.47.162.201

🇸🇦 2001:16a2:c214:b8b9:ddcf:4adc:ef62:b12a

🇹🇭 203.150.107.244

🇮🇳 104.211.93.193

🇧🇬 91.92.47.140

🇱🇹 81.30.98.47

🇬🇧 51.195.255.48

🇩🇪 213.209.159.228

🇧🇪 198.235.24.181

🇨🇳 182.119.227.226

🇪🇨 181.188.237.220

🇲🇾 47.250.80.158

🇷🇺 188.130.142.106

🇹🇼 123.204.23.57

🇹🇼 111.70.29.151

🇰🇿 89.218.69.66

🇺🇸 52.165.89.126

🇱🇹 45.227.254.170

🇧🇿 45.227.254.154