JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.116.39.28

103.116.39.28 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 83%: ?

83%

ISP	DIGITAL NETWORK CLOUD COMPANY LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS140810
Hostname(s)	Administration
Domain Name	dncloud.net
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.116.39.28

Whois 103.116.39.28

IP Abuse Reports for 103.116.39.28:

This IP address has been reported a total of 16 times from 15 distinct sources. 103.116.39.28 was first reported on August 31st 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ByeByte API	2026-08-31 23:48:30 (7 minutes ago)	byebyte.space auth: TCP packet to port 3389 (RDP) at 2026-08-31T23:48:30Z. Source port 46723. TCP fl ... show more byebyte.space auth: TCP packet to port 3389 (RDP) at 2026-08-31T23:48:30Z. Source port 46723. TCP flags: SYN. Packet: 40B, TTL 239, window 1024, IP id 10051. Single packet, dropped at firewall. p0f: 16 hops. show less	Port Scan
🇫🇮 iamxorum	2026-08-31 23:42:58 (13 minutes ago)	Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-08-31T23:42:57.27 ... show more Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-08-31T23:42:57.274774+00:00 XRM-01 kernel: [136460.628465] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=103.116.39.28 DST=REDACTED LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=8919 PROTO=TCP SPT=46723 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 Tsumugi Kotobuki	2026-08-31 22:56:13 (1 hour ago)	Port Scan on Honeypot \| Ports: 3389/RDP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 238 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 3389/RDP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 238 \| Len: 44B \| Win: 1024(1) \| rDNS: Administration \| F2B/ufw-honeypot@2026-08-31T22:56:12Z show less	Port Scan Hacking
🇩🇪 DasDuo	2026-08-31 22:35:07 (1 hour ago)	Attempt on port 3389 (RDP) - potential remote access / brute-force attempt. Blocked by firewall (uns ... show more Attempt on port 3389 (RDP) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection). show less	Port Scan Hacking Brute-Force
🇺🇸 micropedro	2026-08-31 21:54:55 (2 hours ago)	3 incidents: port scanning. First: 2026-08-31 17:54, Last: 2026-08-31 17:54 UTC. Triggers: port-trap ... show more 3 incidents: port scanning. First: 2026-08-31 17:54, Last: 2026-08-31 17:54 UTC. Triggers: port-trap,non-public-port,firewall-tcp. show less	Port Scan
🇩🇪 Fahreddin Ergin	2026-08-31 21:40:36 (2 hours ago)	Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)	Brute-Force SSH Port Scan
🇫🇷 Entalpi.net	2026-08-31 21:01:10 (2 hours ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇨🇿 kronos	2026-08-31 20:53:48 (3 hours ago)	IDS: FlowIntel scan-like source \| SID:9900001 \| session_sigs:45 \| alerts5m:45	Port Scan
🇺🇸 xmission.com	2026-08-31 20:30:29 (3 hours ago)	Blocked by UFW (TCP on 3389) Source port: 46723 TTL: 243 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 3389) Source port: 46723 TTL: 243 Packet length: 40 TOS: 0x08 This report (for 103.116.39.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇦🇺 PetePK	2026-08-31 20:29:03 (3 hours ago)	Probed 1 time(s): TCP/3389	Port Scan
🇺🇸 xmission.com	2026-08-31 20:10:41 (3 hours ago)	Blocked by UFW (TCP on 3389) Source port: 46723 TTL: 242 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 3389) Source port: 46723 TTL: 242 Packet length: 40 TOS: 0x08 This report (for 103.116.39.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 LotPhantom	2026-08-31 19:40:32 (4 hours ago)	2026-08-31T19:36:29.303169+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-08-31T19:36:29.303169+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=103.116.39.28 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=26493 PROTO=TCP SPT=44959 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-31T19:40:31.488875+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=103.116.39.28 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=42120 PROTO=TCP SPT=45101 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇨🇭 Elysium Security	2026-08-31 19:34:16 (4 hours ago)	Mass port scanning on a whole network	Port Scan
🇺🇸 NetVexor	2026-08-31 19:32:24 (4 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇵🇱 mkey	2026-08-31 19:20:01 (4 hours ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=3389 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-31 21:18:53 \| LAST=2026-08-31 21:19:10. Last seen 2026-08-31 21:19:10. show less	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 116.110.214.9

🇵🇱 83.168.107.148

🇳🇱 45.148.10.157

🇨🇳 123.116.232.244

🇺🇸 71.6.134.231

🇺🇸 143.198.113.254

🇱🇹 62.60.130.201

🇧🇷 205.210.31.199

🇧🇷 191.34.223.234

🇲🇽 189.204.230.91

🇺🇸 165.162.41.36

🇩🇪 89.117.104.18

🇩🇪 79.216.174.9

🇸🇬 8.219.137.119

🇨🇳 203.57.235.233

🇺🇸 147.185.132.19

🇷🇴 92.118.39.49

🇻🇳 58.186.20.101

🇬🇧 193.163.125.106

🇨🇳 175.6.146.164