JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.131.85.173

103.131.85.173 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 63%: ?

63%

ISP	HVT TM AND XNK COMPANY LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS149137
Domain Name	vnnic.vn
Country	🇻🇳 Viet Nam
City	Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.131.85.173

Whois 103.131.85.173

IP Abuse Reports for 103.131.85.173:

This IP address has been reported a total of 119 times from 72 distinct sources. 103.131.85.173 was first reported on January 9th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Phish.gg	2026-09-20 14:41:50 (1 week ago)	Sep 20 14:41:12 obsidian sshd[917541]: Invalid user user from 103.131.85.173 port 44930 Sep 20 14:41 ... show more Sep 20 14:41:12 obsidian sshd[917541]: Invalid user user from 103.131.85.173 port 44930 Sep 20 14:41:48 obsidian sshd[917924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.131.85.173 user=root Sep 20 14:41:50 obsidian sshd[917924]: Failed password for root from 103.131.85.173 port 54438 ssh2 ... show less	Brute-Force SSH
🇷🇺 cnaize	2026-09-20 14:39:43 (1 week ago)	Malicious activity blocked by Meds firewall	Port Scan
🇺🇸 MPL	2026-09-20 13:49:23 (1 week ago)	tcp/23 (2 or more attempts)	Port Scan
🇩🇰 toolbit.online	2026-09-20 13:42:47 (1 week ago)	CrowdSec decision: crowdsecurity/http-cve-2021-42013	Hacking Web App Attack
🇺🇸 NetVexor	2026-09-20 13:37:33 (1 week ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
Anonymous	2026-09-20 13:28:36 (1 week ago)	Sep 20 09:28:36 localhost kernel: [118256014.867901] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Sep 20 09:28:36 localhost kernel: [118256014.867901] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=103.131.85.173 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=42 ID=48241 PROTO=TCP SPT=60417 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 20 09:28:36 localhost kernel: [118256014.867929] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=103.131.85.173 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=42 ID=48241 PROTO=TCP SPT=60417 DPT=23 SEQ=758729878 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 20 09:28:36 localhost kernel: [118256014.874255] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=103.131.85.173 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=42 ID=48241 PROTO=TCP SPT=60417 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 20 09:28:36 localhost kernel: [118256014.874269] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=103.131.85.173 DST=[mungedIP2] LEN=40 TOS=0x00 show less	Port Scan
🇧🇷 chronos	2026-09-20 13:13:29 (1 week ago)	Attempted unauthorized access to Telnet (port 23), likely brute force. \| Port: 23 \| Proto: TCP \| Loc ... show more Attempted unauthorized access to Telnet (port 23), likely brute force. \| Port: 23 \| Proto: TCP \| Location: Vietnam, N/A show less	Hacking Brute-Force Exploited Host Port Scan
🇫🇷 Eldeberen	2026-09-20 12:45:30 (1 week ago)	Vulnerability scan attempt through HTTP protocol	Web App Attack
🇺🇸 LotPhantom	2026-09-20 11:17:42 (1 week ago)	2026-09-20T11:17:36.011945+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-20T11:17:36.011945+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=103.131.85.173 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=45684 PROTO=TCP SPT=7380 DPT=23 WINDOW=28852 RES=0x00 SYN URGP=0 2026-09-20T11:17:42.332999+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=103.131.85.173 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=45684 PROTO=TCP SPT=7380 DPT=23 WINDOW=28852 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-09-20 08:22:15 (1 week ago)	Port Scan Attack proto:TCP src:5332 dst:23	Port Scan
🇯🇵 knock	2026-09-20 06:41:26 (1 week ago)	Knock-Knock honeypot brute-force: Telnet (63 total hits)	Brute-Force
🇳🇱 overture.bar	2026-09-19 11:17:22 (1 week ago)	Blocked by UFW on NsmallFE [23/tcp] \| SPT: 21290 \| TTL: 46 \| LEN: 40 \| TOS: 0x00	Port Scan IoT Targeted
🇺🇸 MPL	2026-09-18 16:51:24 (1 week ago)	tcp/23	Port Scan
🇨🇭 cybsecaoccol	2026-09-18 14:14:39 (1 week ago)	multiple malicious connection attempts on tcp port 23 - sch	DDoS Attack Port Scan Hacking Brute-Force
🇩🇪 faridshykhaliev	2026-06-25 17:53:22 (3 months ago)	2026-03-14T01:42:50.542099+01:00 de.jatixpanel.com sshd[3340836]: Invalid user friend from 103.131.8 ... show more 2026-03-14T01:42:50.542099+01:00 de.jatixpanel.com sshd[3340836]: Invalid user friend from 103.131.85.173 port 39792 2026-03-14T01:49:27.810568+01:00 de.jatixpanel.com sshd[3342968]: Invalid user andre from 103.131.85.173 port 57476 2026-03-14T01:52:21.389885+01:00 de.jatixpanel.com sshd[3343902]: Invalid user wialon from 103.131.85.173 port 60492 2026-03-14T01:55:11.200175+01:00 de.jatixpanel.com sshd[3344831]: Invalid user odoo12 from 103.131.85.173 port 44848 2026-03-14T02:00:31.352622+01:00 de.jatixpanel.com sshd[3346536]: Invalid user student4 from 103.131.85.173 port 37696 ... show less	Brute-Force SSH

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 54.240.9.26

🇺🇸 2602:80d:1007::3b

🇰🇷 220.119.37.141

🇧🇪 185.132.187.84

🇸🇬 159.223.59.82

🇳🇱 77.239.124.71

🇱🇹 77.90.185.20

🇨🇳 223.93.164.218

🇺🇸 65.49.1.236

🇺🇸 20.80.93.123

🇫🇷 205.237.106.81

🇮🇩 163.7.6.41

🇷🇺 85.95.166.40

🇧🇷 45.169.200.254

🇧🇷 2804:14c:bb80:4645:464e:89ea:9baa:b685

🇰🇷 211.62.96.42

🇳🇱 185.223.235.17

🇨🇳 111.48.160.201

🇩🇪 104.248.132.98

🇺🇸 71.6.134.236