JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.30.75.85

103.30.75.85 was found in our database!

This IP was reported 159 times. Confidence of Abuse is 27%: ?

27%

ISP	KEEP SECURE MANAGED SERVICES
Usage Type	Data Center/Web Hosting/Transit
ASN	AS146943
Domain Name	keepsecure.in
Country	🇮🇳 India
City	Panvel, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.30.75.85

Whois 103.30.75.85

IP Abuse Reports for 103.30.75.85:

This IP address has been reported a total of 159 times from 74 distinct sources. 103.30.75.85 was first reported on December 28th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:10 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-14 01:33:49 (1 month ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/103.30.75.85	Brute-Force
🇩🇪 Michal Piechowski	2026-04-13 10:35:28 (1 month ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 tentwentyfour	2026-04-13 10:35:08 (1 month ago)	Blocked for probing SSH accounts	Brute-Force SSH
Anonymous	2026-04-13 10:35:04 (1 month ago)	2026-04-13T12:33:32.241508+02:00 svr10 sshd[3886085]: Connection closed by 103.30.75.85 port 52582 2 ... show more 2026-04-13T12:33:32.241508+02:00 svr10 sshd[3886085]: Connection closed by 103.30.75.85 port 52582 2026-04-13T12:34:44.060062+02:00 svr10 sshd[3886298]: Unable to negotiate with 103.30.75.85 port 38980: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2026-04-13T12:35:03.921392+02:00 svr10 sshd[3886357]: Unable to negotiate with 103.30.75.85 port 44002: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... show less	Brute-Force SSH
🇮🇹 eliosbrocchi	2026-04-13 05:24:50 (1 month ago)	2026-04-13T07:23:31.469672+02:00 thunderchild sshd[126522]: refused connect from 103.30.75.85 (103.3 ... show more 2026-04-13T07:23:31.469672+02:00 thunderchild sshd[126522]: refused connect from 103.30.75.85 (103.30.75.85) 2026-04-13T07:24:49.589738+02:00 thunderchild sshd[126585]: refused connect from 103.30.75.85 (103.30.75.85) 2026-04-13T07:24:49.590350+02:00 thunderchild sshd[126586]: refused connect from 103.30.75.85 (103.30.75.85) 2026-04-13T07:24:49.600490+02:00 thunderchild sshd[126589]: refused connect from 103.30.75.85 (103.30.75.85) 2026-04-13T07:24:49.632691+02:00 thunderchild sshd[126621]: refused connect from 103.30.75.85 (103.30.75.85) ... show less	VPN IP
🇦🇺 vftable	2026-04-13 04:33:40 (1 month ago)	2026-04-13T04:33:35.841294+00:00 kyana sshd[331003]: Unable to negotiate with 103.30.75.85 port 3520 ... show more 2026-04-13T04:33:35.841294+00:00 kyana sshd[331003]: Unable to negotiate with 103.30.75.85 port 35206: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2026-04-13T04:33:37.835136+00:00 kyana sshd[331005]: Unable to negotiate with 103.30.75.85 port 39202: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2026-04-13T04:33:40.115722+00:00 kyana sshd[331007]: Unable to negotiate with 103.30.75.85 port 43208: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-13 00:36:35 (1 month ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/103.30.75.85	SSH
🇹🇷 Threat.live	2026-04-12 17:05:12 (1 month ago)	Brute Force, tcp/22	Brute-Force
🇦🇺 foobax	2026-04-11 04:54:25 (1 month ago)	closed the connection from port 37620	SSH Port Scan
Anonymous	2026-04-10 12:45:33 (1 month ago)	2026-04-10T08:41:39.835861zeus sshd[1370315]: Invalid user admin from 103.30.75.85 port 48754 2026-0 ... show more 2026-04-10T08:41:39.835861zeus sshd[1370315]: Invalid user admin from 103.30.75.85 port 48754 2026-04-10T08:43:35.968987zeus sshd[1370347]: Invalid user test from 103.30.75.85 port 39242 2026-04-10T08:45:33.153077zeus sshd[1370398]: Invalid user oracle from 103.30.75.85 port 57902 ... show less	Brute-Force SSH
🇫🇮 FlamingMojo	2026-04-10 08:12:35 (1 month ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-04-10T08:12:34Z	Brute-Force SSH
🇫🇷 adnscom.net	2026-04-09 22:54:43 (1 month ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇩🇪 Herrminator	2026-04-09 08:40:03 (1 month ago)	2026-04-09 10:36:54 ssh-honeypotd[7]: Did not receive identification string from 103.30.75.85:51392 ... show more 2026-04-09 10:36:54 ssh-honeypotd[7]: Did not receive identification string from 103.30.75.85:51392 (target: 172.18.0.3:22): Socket error: disconnected 2026-04-09 10:37:09 ssh-honeypotd[7]: Did not receive identification string from 103.30.75.85:39570 (target: 172.18.0.3:22): kex error : no match for method kex algos: server [curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256], client [diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1] 2026-04-09 10:37:09 ssh-honeypotd[7]: Did not receive identification string from 103.30.75.85:39854 (target: 172.18.0.3:22): kex error : no match for method kex algos: server [curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512, ... show less	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-04-09 02:05:03 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,ice02,wa01]	Brute-Force SSH

Showing 1 to 15 of 159 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 138.59.174.163

🇮🇶 65.20.179.251

🇰🇷 58.224.62.29

🇺🇸 20.168.0.135

🇷🇼 197.243.14.52

🇭🇳 186.33.20.57

🇺🇸 147.185.132.28

🇮🇪 128.251.36.118

🇬🇧 89.37.172.141

🇺🇸 71.6.233.240

🇺🇸 54.235.57.254

🇲🇾 47.254.213.105

🇸🇬 47.79.51.87

🇩🇪 46.101.178.110

🇱🇹 45.227.254.170

🇨🇳 218.72.35.163

🇵🇾 181.122.99.197

🇷🇺 178.176.219.18

🇳🇱 172.94.9.157

🇺🇸 162.216.150.114