This IP address has been reported a total of
46
times from
39 distinct
sources.
103.99.38.117 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Hong Kong
with 7
reports;
Thailand
with 2
reports;
Australia
with 1
report.
The most common categories in these recent reports were:
Port Scan
11
times;
Brute-Force
4
times;
Web App Attack
2
times;
Hacking
2
times;
Bad Web Bot
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
30434/tcp,30445/tcp,30444/tcp,30437/tcp,30446/tcp,30447/tcp,30441/tcp,30436/tcp,30448/tcp,30440/tcp, ...
show more30434/tcp,30445/tcp,30444/tcp,30437/tcp,30446/tcp,30447/tcp,30441/tcp,30436/tcp,30448/tcp,30440/tcp,30449/tcp,30439/tcp (12 or more attempts)
show less
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipify.org:443
show less
Open Proxy
Port Scan
Anonymous
2026-09-27 23:05:00 warning[4434105]: host unknown[103.99.38.117]: unauthorized access att ...
show more2026-09-27 23:05:00 warning[4434105]: host unknown[103.99.38.117]: unauthorized access attempted: tcp/3446
show less
Port Scan
Brute-Force
Anonymous
261/tcp,256/tcp,257/tcp,247/tcp,248/tcp,254/tcp,246/tcp,258/tcp,250/tcp,259/tcp,249/tcp,251/tcp,253/ ...
show more261/tcp,256/tcp,257/tcp,247/tcp,248/tcp,254/tcp,246/tcp,258/tcp,250/tcp,259/tcp,249/tcp,251/tcp,253/tcp (13 or more attempts)
show less
Honeypot hit: HTTP/1.1 request on 5985
POST /wsman?PSVersion=5.1.19041.1
User-Agent: Microsoft WinR ...
show moreHoneypot hit: HTTP/1.1 request on 5985
POST /wsman?PSVersion=5.1.19041.1
User-Agent: Microsoft WinRM Client; 5985 [1] TCP
show less
Honeypot hit: HTTP/1.1 request on 5985
POST /wsman?PSVersion=5.1.19041.1
User-Agent: Microsoft WinR ...
show moreHoneypot hit: HTTP/1.1 request on 5985
POST /wsman?PSVersion=5.1.19041.1
User-Agent: Microsoft WinRM Client; 5985 [1] TCP
show less
