JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.199.18.39

103.199.18.39 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 17%: ?

17%

ISP	GREENCLOUD LIMITED LIABILITY COMPAN
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63734
Domain Name	green.cloud
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.199.18.39

Whois 103.199.18.39

IP Abuse Reports for 103.199.18.39:

This IP address has been reported a total of 51 times from 40 distinct sources. 103.199.18.39 was first reported on February 27th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-04-20 12:07:05 (1 month ago)	Port scan detected on multiple ports	Port Scan
🇺🇸 MrMac	2026-04-19 06:08:43 (1 month ago)	TCP/5901,5903,5905,5907,5908,...(44 ports total, 44 packets) over 7.0 days	Port Scan
🇹🇷 Threat.live	2026-04-18 18:10:07 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 rh24	2026-04-18 18:02:53 (1 month ago)	Port Scan detected from 103.199.18.39 (VN/Vietnam/-).	Port Scan
🇩🇪 mattk	2026-04-18 17:47:40 (1 month ago)	port scan	Port Scan
🇭🇺 DumaNet	2026-03-23 08:02:00 (2 months ago)	Blocked for port scanning. Time: Sat Mar 21. 00:08:45 2026 +0100 IP: 103.199.18.39 (VN/Vietnam/-) ... show more Blocked for port scanning. Time: Sat Mar 21. 00:08:45 2026 +0100 IP: 103.199.18.39 (VN/Vietnam/-) Sample of block hits: Mar 21 00:05:44 vserv kernel: [9330368.486000] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.199.18.39 DST=[removed] LEN=44 TOS=0x00 PREC=0x20 TTL=239 ID=49718 PROTO=TCP SPT=61234 DPT=5926 WINDOW=1025 RES=0x00 SYN URGP=0 Mar 21 00:05:46 vserv kernel: [9330370.591952] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.199.18.39 DST=[removed] LEN=44 TOS=0x00 PREC=0x20 TTL=239 ID=15381 PROTO=TCP SPT=61234 DPT=5903 WINDOW=1025 RES=0x00 SYN URGP=0 Mar 21 00:05:54 vserv kernel: [9330378.687493] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.199.18.39 DST=[removed] LEN=44 TOS=0x00 PREC=0x20 TTL=240 ID=64669 PROTO=TCP SPT=61234 DPT=5968 WINDOW=1025 RES=0x00 SYN URGP=0 Mar 21 00:06:40 vserv kernel: [9330424.386630] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=103.199.18.39 DST=[removed] LEN=44 TOS=0x00 PREC=0x20 TTL=239 ID=53283 PROTO=TCP SPT=61234 DPT=5937 WINDOW=1025 RES show less	Port Scan
🇫🇷 security.rdmc.fr	2026-03-21 05:57:23 (2 months ago)	Port Scan Attack proto:TCP src:61234 dst:5900	Port Scan
🇫🇷 GabrielJST	2026-03-21 05:56:24 (2 months ago)	Port Scan detected from 103.199.18.39 (VN/Vietnam/-).	Port Scan
🇹🇷 rtbh.com.tr	2026-03-21 04:12:10 (2 months ago)	list.rtbh.com.tr report: tcp/5900, tcp/5901, tcp/5902, tcp/5903, tcp/5904, tcp/5906, tcp/5907, tcp/5 ... show more list.rtbh.com.tr report: tcp/5900, tcp/5901, tcp/5902, tcp/5903, tcp/5904, tcp/5906, tcp/5907, tcp/5910, tcp/5911, tcp/5915, tcp/5922, tcp/5925, tcp/5938, tcp/5950, tcp/5952, tcp/5959, tcp/5960, tcp/5961, tcp/5962, tcp/5963, tcp/5987, tcp/5988, tcp/5989, tcp/5998, tcp/5999, tcp/6000 show less	Brute-Force
🇫🇷 Petre 21_ip	2026-03-21 02:38:21 (2 months ago)	2026-03-21T03:36:17.441145+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-03-21T03:36:17.441145+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=103.199.18.39 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x20 TTL=240 ID=28953 PROTO=TCP SPT=61234 DPT=5915 WINDOW=1025 RES=0x00 SYN URGP=0 2026-03-21T03:36:34.748965+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=103.199.18.39 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x20 TTL=237 ID=18902 PROTO=TCP SPT=61234 DPT=5940 WINDOW=1025 RES=0x00 SYN URGP=0 2026-03-21T03:38:21.234725+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=103.199.18.39 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x20 TTL=240 ID=25643 PROTO=TCP SPT=61234 DPT=6000 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 pearbright	2026-03-20 23:14:51 (2 months ago)	2026-03-20T23:02:30.955279+00:00 mercury.fsmail.org.uk kernel: [10208389.164385] [UFW BLOCK] IN=eth0 ... show more 2026-03-20T23:02:30.955279+00:00 mercury.fsmail.org.uk kernel: [10208389.164385] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=103.199.18.39 DST=37.218.240.130 LEN=44 TOS=0x04 PREC=0x00 TTL=242 ID=34099 PROTO=TCP SPT=61234 DPT=5981 WINDOW=1025 RES=0x00 SYN URGP=0 2026-03-20T23:03:02.335002+00:00 mercury.fsmail.org.uk kernel: [10208420.544790] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=103.199.18.39 DST=37.218.240.130 LEN=44 TOS=0x04 PREC=0x00 TTL=243 ID=4702 PROTO=TCP SPT=61234 DPT=5919 WINDOW=1025 RES=0x00 SYN URGP=0 2026-03-20T23:04:43.223331+00:00 mercury.fsmail.org.uk kernel: [10208521.432764] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=103.199.18.39 DST=37.218.240.130 LEN=44 TOS=0x04 PREC=0x00 TTL=242 ID=24071 PROTO=TCP SPT=61234 DPT=5987 WINDOW=1025 RES=0x00 SYN URGP=0 2026-03-20T23:05:39.772065+00:00 mercury.fsmail.org.uk kernel: [10208577.981661] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8: ... show less	Port Scan
🇺🇸 MPL	2026-03-20 16:57:54 (2 months ago)	tcp port scan (903 or more attempts)	Port Scan
🇺🇸 MPL	2026-03-20 16:36:09 (2 months ago)	tcp port scan (2566 or more attempts)	Port Scan
🇩🇪 ZIME	2026-03-20 11:52:35 (2 months ago)	UFW BLOCK: 5 attempts. Top ports: 5928 (1x), 5900 (1x), 5907 (1x), 5932 (1x), 5927 (1x). Suspected: ... show more UFW BLOCK: 5 attempts. Top ports: 5928 (1x), 5900 (1x), 5907 (1x), 5932 (1x), 5927 (1x). Suspected: Port 5900 (1x): VNC Brute-Force > (autogenerated by skyupload.net) show less	Port Scan Hacking Brute-Force
🇩🇪 ZIME	2026-03-20 11:22:27 (2 months ago)	UFW BLOCK: 9 attempts. Top ports: 5903 (1x), 5906 (1x), 5931 (1x), 5918 (1x), 5992 (1x), 5947 (1x), ... show more UFW BLOCK: 9 attempts. Top ports: 5903 (1x), 5906 (1x), 5931 (1x), 5918 (1x), 5992 (1x), 5947 (1x), 5967 (1x), 5952 (1x), 5995 (1x). Suspected: Port scanning / brute-force > (autogenerated by skyupload.net) show less	Port Scan

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.176.16.100

🇲🇽 187.141.71.166

🇩🇪 151.243.11.248

🇺🇸 85.239.249.222

🇺🇸 68.41.187.55

🇺🇸 66.132.224.17

🇧🇷 45.162.8.14

🇩🇪 18.192.171.218

🇨🇳 202.106.54.126

🇨🇱 186.103.169.12

🇭🇰 152.32.175.179

🇬🇧 149.34.191.39

🇧🇩 123.49.60.158

🇵🇰 116.71.136.125

🇺🇦 31.43.158.89

🇺🇸 207.241.173.57

🇪🇸 185.93.182.136

🇫🇷 173.249.0.223

🇺🇸 162.216.150.122

🇧🇷 50.6.138.200