Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Ketanon

Region: East Java

Country: Indonesia

Internet Service Provider: Esia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
103.148.25.102 attack
mother fucker if i find you i'll fucking kil you stay away from my twitch account bitch
2022-07-03 07:14:39
103.148.20.34 attackbotsspam
Sep  4 14:26:31 [host] sshd[20144]: Invalid user c
Sep  4 14:26:31 [host] sshd[20144]: pam_unix(sshd:
Sep  4 14:26:33 [host] sshd[20144]: Failed passwor
2020-09-05 02:57:24
103.148.20.34 attackspambots
$f2bV_matches
2020-09-04 18:24:35
103.148.207.117 attack
Port probing on unauthorized port 445
2020-08-25 00:46:48
103.148.21.201 attackbotsspam
Unauthorized connection attempt from IP address 103.148.21.201 on Port 445(SMB)
2020-08-19 02:49:28
103.148.23.225 attack
spam
2020-08-17 13:39:10
103.148.20.60 attack
Attempts against non-existent wp-login
2020-08-05 23:04:15
103.148.21.22 attackbotsspam
Host Scan
2020-07-24 17:47:01
103.148.211.1 attack
port scan and connect, tcp 1433 (ms-sql-s)
2020-07-19 03:57:25
103.148.235.3 attack
xmlrpc attack
2020-07-05 06:02:11
103.148.21.157 attackbotsspam
Automatic report - XMLRPC Attack
2020-07-01 02:10:21
103.148.211.1 attackspam
Icarus honeypot on github
2020-06-14 00:07:21
103.148.210.58 attack
20 attempts against mh-ssh on train
2020-05-24 12:12:31
103.148.21.50 attackspam
Automatic report - Banned IP Access
2020-05-15 02:50:35
103.148.20.219 attackbotsspam
PHI,WP GET /wp-login.php
2020-04-14 21:12:44
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.148.2.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37840
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.148.2.254.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 15:51:33 CST 2022
;; MSG SIZE  rcvd: 106
Host info
254.2.148.103.in-addr.arpa domain name pointer ns1.prisma.net.id.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
254.2.148.103.in-addr.arpa	name = ns1.prisma.net.id.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
181.30.26.40 attackspam
(sshd) Failed SSH login from 181.30.26.40 (40-26-30-181.fibertel.com.ar): 5 in the last 3600 secs
2019-07-10 05:46:29
172.245.221.54 attack
coming from http://site.ru requested http://*domain*.com/wp-includes/js/thickbox/ex_liner.php

Date: 2019-07-09 07:03:36

Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4
2019-07-10 06:20:36
102.130.64.30 attackbots
Unauthorized IMAP connection attempt
2019-07-10 05:54:05
117.204.230.234 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-09 13:17:07,114 INFO [amun_request_handler] PortScan Detected on Port: 445 (117.204.230.234)
2019-07-10 06:19:32
92.46.223.98 attackspam
2019-07-09T23:55:29.600901stark.klein-stark.info sshd\[14974\]: Invalid user 120.77.211.25 from 92.46.223.98 port 55670
2019-07-09T23:55:29.606097stark.klein-stark.info sshd\[14974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.46.223.98
2019-07-09T23:55:31.951113stark.klein-stark.info sshd\[14974\]: Failed password for invalid user 120.77.211.25 from 92.46.223.98 port 55670 ssh2
...
2019-07-10 06:18:54
95.160.17.142 attackbotsspam
proto=tcp  .  spt=57111  .  dpt=25  .     (listed on Blocklist de  Jul 08)     (387)
2019-07-10 06:04:07
106.110.232.202 attackbots
$f2bV_matches
2019-07-10 05:42:56
37.120.150.152 attackbotsspam
Jul  9 15:17:07 srv1 postfix/smtpd[10447]: connect from piranha.procars-m5-pl.com[37.120.150.152]
Jul x@x
Jul  9 15:17:13 srv1 postfix/smtpd[10447]: disconnect from piranha.procars-m5-pl.com[37.120.150.152]
Jul  9 15:21:11 srv1 postfix/smtpd[10554]: connect from piranha.procars-m5-pl.com[37.120.150.152]
Jul x@x
Jul  9 15:21:17 srv1 postfix/smtpd[10554]: disconnect from piranha.procars-m5-pl.com[37.120.150.152]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=37.120.150.152
2019-07-10 05:51:57
105.67.0.167 attackbots
Hit on /wp-login.php
2019-07-10 05:39:19
78.85.16.96 attackspam
proto=tcp  .  spt=43158  .  dpt=25  .     (listed on     Github Combined on 3 lists )     (395)
2019-07-10 05:51:23
80.87.94.211 attackbotsspam
Unauthorized connection attempt from IP address 80.87.94.211 on Port 445(SMB)
2019-07-10 06:07:18
43.227.254.179 attackspam
19/7/9@09:25:00: FAIL: IoT-SSH address from=43.227.254.179
...
2019-07-10 05:50:49
69.125.3.217 attack
DDoS on port 53 UDP
2019-07-10 05:43:43
193.106.31.114 attackspam
Jul  9 13:24:04   TCP Attack: SRC=193.106.31.114 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=246  PROTO=TCP SPT=45848 DPT=5035 WINDOW=1024 RES=0x00 SYN URGP=0
2019-07-10 05:48:15
142.93.26.245 attackbots
Jul  8 07:39:32 svapp01 sshd[5804]: Failed password for invalid user sui from 142.93.26.245 port 43768 ssh2
Jul  8 07:39:32 svapp01 sshd[5804]: Received disconnect from 142.93.26.245: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=142.93.26.245
2019-07-10 06:23:12

Recently Reported IPs

103.148.191.63 82.195.147.121 103.148.90.142 103.149.149.12
103.149.159.221 103.162.47.231 103.163.110.11 103.163.139.5
103.163.210.117 103.163.210.121 103.164.246.166 103.164.81.66
103.167.112.147 103.167.114.14 103.167.248.53 103.167.248.61
103.167.248.62 103.167.248.65 103.168.21.200 103.169.142.250