103.229.52.185

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
78% Critical
34 reports
29 reporters ยท latest 1 week ago
ISP
CLOUD VIET ONE MEMBER COMPANY LIMITED
Usage Type
Data Center/Web Hosting/Transit
ASN
AS135918
Domain Name
cloudextra.net
Country
๐Ÿ‡ป๐Ÿ‡ณ Viet Nam
City
Ho Chi Minh City, Ho Chi Minh City (HCMC)
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
34 from 29 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 6 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 4 ๐Ÿ‡ซ๐Ÿ‡ท France 3
Most common categories Port Scan 22 Hacking 11 Brute-Force 7 DDoS Attack 2 SQL Injection 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ schematics.cc
Blocked by on honeypot2 [1521/tcp] | SPT: 54829 | TTL: 106 | LEN: 48 | TOS: 0x02 โ€ข Reported by: abuse.terraforge.fun
Port Scan
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡ฎ๐Ÿ‡ฑ Ilop
[v5-99] Firewall dropped 3 unsolicited packet(s) proto=tcp to port(s) 1521 from 103.229.52.185 โ€” WAN scan (automated sensor)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 19 hits on ports [1521] (automated)
Port Scan
๐Ÿ‡ฏ๐Ÿ‡ต jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (1024 distinct dst hosts); SYN-flood-like small-packet flows (1026 small-packet flows)
DDoS Attack Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Suspicious payload (possible command injection); 1521 [1] TCP
Hacking
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: Suspicious payload (possible command injection); 1521 [1] TCP
Hacking
๐Ÿ‡ญ๐Ÿ‡ฐ PingMeMaybe
Blocked by UFW on hk [1521/tcp] Source port: 62185 TTL: 114 Packet length: 48 TOS: 0x02 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ญ๐Ÿ‡ฐ ้น้น
monitor: on ser162528253480 | port: 1521 | ttl: 113 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ฉ FallingGong2833
tcp/1521
Port Scan
๐Ÿ‡จ๐Ÿ‡ญ Elysium Security
Mass port scanning on a whole network
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Ilop
[hp-100] 2 unsolicited packets to honeypot ports 1521 (OCI DShield sensor)
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ณ Mr.Singh
NFT blocked 103.229.52.185 after 6 rejections on 31-Oct-2026.
Port Scan Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 5432/PostgreSQL | Proto: TCP(1) | Flags: all SYN | TTL: 110 | Len: 48B | Win: 8192(1) | F2B/ufw-honeypot@2026-10-27T18:30:54Z
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช reznekcs
Blocked by UFW firewall
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 204.76.203.4
๐Ÿ‡ท๐Ÿ‡บ 185.76.220.117
๐Ÿ‡น๐Ÿ‡ผ 111.251.80.27
๐Ÿ‡ฎ๐Ÿ‡ฉ 103.173.140.185
๐Ÿ‡ญ๐Ÿ‡ฐ 34.150.4.162
๐Ÿ‡ง๐Ÿ‡ช 34.53.147.106
๐Ÿ‡ธ๐Ÿ‡ช 13.48.42.65
๐Ÿ‡ฎ๐Ÿ‡ณ 182.74.206.194
๐Ÿ‡บ๐Ÿ‡ธ 91.230.168.79
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.152
๐Ÿ‡ง๐Ÿ‡ช 34.52.152.34
๐Ÿ‡ญ๐Ÿ‡ฐ 20.24.218.67
๐Ÿ‡บ๐Ÿ‡ฆ 194.36.80.76
๐Ÿ‡บ๐Ÿ‡ธ 49.51.244.147
๐Ÿ‡ฎ๐Ÿ‡น 45.13.70.10
๐Ÿ‡ณ๐Ÿ‡ฑ 193.47.62.69
๐Ÿ‡ฎ๐Ÿ‡น 185.15.170.195
๐Ÿ‡ฉ๐Ÿ‡ช 178.104.103.25
๐Ÿ‡บ๐Ÿ‡ธ 136.23.76.151
๐Ÿ‡ง๐Ÿ‡ฉ 103.132.182.46
feedback