Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: Universitas Negeri Surabaya

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 09:34:29,745 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.242.125.242)
2019-07-18 21:57:42
Comments on same subnet:
IP Type Details Datetime
103.242.125.243 attackspam
Nov 24 07:28:19  exim[3114]: [1\29] 1iYlNa-0000oE-0R H=(lucanatractors.it) [103.242.125.243] F= rejected after DATA: This message scored 103.5 spam points.
2019-11-24 15:20:07
103.242.125.243 attack
"Account brute force using dictionary attack against Exchange Online"
2019-08-06 07:21:15
103.242.125.243 attack
proto=tcp  .  spt=60261  .  dpt=25  .     (listed on Blocklist de  Jul 27)     (134)
2019-07-28 11:05:26
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.242.125.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 742
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.242.125.242.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 18 21:57:29 CST 2019
;; MSG SIZE  rcvd: 119
Host info
Host 242.125.242.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 242.125.242.103.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.13.43.212 attackbotsspam
2020-09-29T01:51:13.049844abusebot-3.cloudsearch.cf sshd[24678]: Invalid user ubuntu from 106.13.43.212 port 48140
2020-09-29T01:51:13.055945abusebot-3.cloudsearch.cf sshd[24678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.212
2020-09-29T01:51:13.049844abusebot-3.cloudsearch.cf sshd[24678]: Invalid user ubuntu from 106.13.43.212 port 48140
2020-09-29T01:51:14.988016abusebot-3.cloudsearch.cf sshd[24678]: Failed password for invalid user ubuntu from 106.13.43.212 port 48140 ssh2
2020-09-29T01:58:20.337973abusebot-3.cloudsearch.cf sshd[24921]: Invalid user wink from 106.13.43.212 port 47002
2020-09-29T01:58:20.343436abusebot-3.cloudsearch.cf sshd[24921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.212
2020-09-29T01:58:20.337973abusebot-3.cloudsearch.cf sshd[24921]: Invalid user wink from 106.13.43.212 port 47002
2020-09-29T01:58:22.225742abusebot-3.cloudsearch.cf sshd[24921]: Faile
...
2020-09-29 23:59:15
188.49.82.211 attackbots
Automatic report - Port Scan Attack
2020-09-29 23:50:59
185.124.228.184 attackspambots
20/9/28@21:47:34: FAIL: Alarm-Network address from=185.124.228.184
...
2020-09-30 00:01:08
36.92.7.159 attack
SSH Brute Force
2020-09-29 23:56:56
186.147.129.110 attackbotsspam
(sshd) Failed SSH login from 186.147.129.110 (CO/Colombia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 10:40:22 jbs1 sshd[29984]: Invalid user ftp2 from 186.147.129.110
Sep 29 10:40:22 jbs1 sshd[29984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.147.129.110 
Sep 29 10:40:24 jbs1 sshd[29984]: Failed password for invalid user ftp2 from 186.147.129.110 port 49514 ssh2
Sep 29 10:52:57 jbs1 sshd[2440]: Invalid user franz from 186.147.129.110
Sep 29 10:52:57 jbs1 sshd[2440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.147.129.110
2020-09-29 23:33:09
42.194.211.37 attackbotsspam
Tried sshing with brute force.
2020-09-29 23:27:13
174.217.1.127 attackspam
Brute forcing email accounts
2020-09-29 23:31:47
128.199.153.148 attack
$f2bV_matches
2020-09-29 23:44:51
165.232.47.211 attackspambots
Sep 28 23:40:40 nextcloud sshd\[30861\]: Invalid user monitoring from 165.232.47.211
Sep 28 23:40:40 nextcloud sshd\[30861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.232.47.211
Sep 28 23:40:42 nextcloud sshd\[30861\]: Failed password for invalid user monitoring from 165.232.47.211 port 48184 ssh2
2020-09-29 23:46:59
132.232.4.33 attack
Invalid user tecnici from 132.232.4.33 port 60218
2020-09-29 23:36:02
222.186.15.115 attackbotsspam
Sep 29 17:43:59 dev0-dcde-rnet sshd[24028]: Failed password for root from 222.186.15.115 port 41124 ssh2
Sep 29 17:44:09 dev0-dcde-rnet sshd[24031]: Failed password for root from 222.186.15.115 port 55463 ssh2
2020-09-29 23:47:58
167.71.254.95 attack
SSH Brute Force
2020-09-29 23:51:20
180.176.214.37 attackspambots
Sep 29 15:46:15 scw-gallant-ride sshd[10603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.176.214.37
2020-09-29 23:57:29
110.49.71.242 attackbotsspam
Sep 29 08:43:44 santamaria sshd\[23029\]: Invalid user solr from 110.49.71.242
Sep 29 08:43:44 santamaria sshd\[23029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.242
Sep 29 08:43:46 santamaria sshd\[23029\]: Failed password for invalid user solr from 110.49.71.242 port 36004 ssh2
...
2020-09-29 23:25:35
104.41.45.235 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 00:04:43

Recently Reported IPs

110.240.142.142 183.196.148.51 92.50.91.242 47.30.251.239
112.114.234.156 92.32.222.172 195.29.9.70 171.124.31.195
41.38.127.75 123.24.12.152 92.253.35.14 107.148.101.94
186.203.155.49 103.77.230.10 95.90.135.38 206.189.223.174
163.47.37.74 212.48.157.141 117.240.189.218 92.223.130.252