Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: Hong Kong Broadband Network Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
Bruteforce on SSH Honeypot
2019-09-29 17:58:51
attack
Sep 26 23:11:36 pl2server sshd[17525]: Invalid user Spacenet from 103.243.1.34
Sep 26 23:11:38 pl2server sshd[17525]: Failed password for invalid user Spacenet from 103.243.1.34 port 5130 ssh2
Sep 26 23:11:38 pl2server sshd[17525]: Connection closed by 103.243.1.34 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.243.1.34
2019-09-27 05:23:58
Comments on same subnet:
IP Type Details Datetime
103.243.164.251 attackspam
Sep 29 11:17:14 OPSO sshd\[13581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.243.164.251  user=root
Sep 29 11:17:16 OPSO sshd\[13581\]: Failed password for root from 103.243.164.251 port 35664 ssh2
Sep 29 11:21:13 OPSO sshd\[14080\]: Invalid user oracle from 103.243.164.251 port 44114
Sep 29 11:21:13 OPSO sshd\[14080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.243.164.251
Sep 29 11:21:15 OPSO sshd\[14080\]: Failed password for invalid user oracle from 103.243.164.251 port 44114 ssh2
2020-09-29 17:25:36
103.243.128.121 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-17 00:38:56
103.243.128.121 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-16 16:53:27
103.243.185.138 attackspam
SMB Server BruteForce Attack
2020-07-07 01:12:21
103.243.185.138 attackbots
Unauthorized connection attempt from IP address 103.243.185.138 on Port 445(SMB)
2020-06-03 04:04:25
103.243.141.144 attackspam
May 13 23:05:16 debian-2gb-nbg1-2 kernel: \[11662773.273528\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.243.141.144 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57596 PROTO=TCP SPT=52095 DPT=3390 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-14 08:39:11
103.243.141.144 attack
nft/Honeypot/3389/73e86
2020-05-08 20:52:45
103.243.141.144 attackspambots
3389/tcp 3389/tcp
[2020-04-16/05-03]2pkt
2020-05-04 09:09:34
103.243.114.58 attackbots
Unauthorized connection attempt from IP address 103.243.114.58 on Port 445(SMB)
2020-04-22 23:28:48
103.243.141.144 attack
Unauthorized connection attempt from IP address 103.243.141.144 on Port 3389(RDP)
2020-04-01 00:27:17
103.243.141.144 attack
Mar 31 12:50:58 debian-2gb-nbg1-2 kernel: \[7910912.034706\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.243.141.144 DST=195.201.40.59 LEN=40 TOS=0x18 PREC=0xA0 TTL=239 ID=17653 PROTO=TCP SPT=55883 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-31 18:53:29
103.243.177.66 attack
[Tue Mar 10 20:49:49 2020] - Syn Flood From IP: 103.243.177.66 Port: 61093
2020-03-23 23:16:07
103.243.185.24 attackspambots
Honeypot attack, port: 445, PTR: qcpl-24-185.243.103.qcplnet.com.
2020-02-28 15:38:00
103.243.143.145 attackbotsspam
Unauthorised access (Feb 25) SRC=103.243.143.145 LEN=48 TTL=109 ID=21796 DF TCP DPT=445 WINDOW=8192 SYN
2020-02-26 07:53:47
103.243.164.254 attackbots
Unauthorized connection attempt detected from IP address 103.243.164.254 to port 2220 [J]
2020-02-02 06:58:08
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.243.1.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45924
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.243.1.34.			IN	A

;; AUTHORITY SECTION:
.			244	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092603 1800 900 604800 86400

;; Query time: 142 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 27 05:23:55 CST 2019
;; MSG SIZE  rcvd: 116
Host info
34.1.243.103.in-addr.arpa domain name pointer 103243001034.static.hkbn.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.1.243.103.in-addr.arpa	name = 103243001034.static.hkbn.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
36.66.242.2 attackbots
Unauthorized connection attempt from IP address 36.66.242.2 on Port 445(SMB)
2019-12-24 19:58:43
148.72.210.28 attack
Automatic report - Banned IP Access
2019-12-24 19:30:09
5.160.237.82 attackspam
Unauthorized connection attempt from IP address 5.160.237.82 on Port 445(SMB)
2019-12-24 19:34:05
45.136.108.121 attackbotsspam
Port scan
2019-12-24 19:44:44
202.166.207.211 attackbotsspam
Unauthorized connection attempt from IP address 202.166.207.211 on Port 445(SMB)
2019-12-24 19:41:44
64.139.79.35 attackbots
Absender hat Spam-Falle ausgel?st
2019-12-24 19:58:09
222.252.144.45 attack
Unauthorized connection attempt from IP address 222.252.144.45 on Port 445(SMB)
2019-12-24 19:28:47
218.92.0.208 attack
Dec 24 12:41:11 eventyay sshd[17121]: Failed password for root from 218.92.0.208 port 58575 ssh2
Dec 24 12:44:23 eventyay sshd[17158]: Failed password for root from 218.92.0.208 port 30300 ssh2
...
2019-12-24 19:53:16
90.102.193.193 attackspambots
Unauthorized connection attempt from IP address 90.102.193.193 on Port 445(SMB)
2019-12-24 19:37:20
35.203.155.125 attackspam
WordPress login Brute force / Web App Attack on client site.
2019-12-24 19:30:58
176.113.70.50 attackspam
24.12.2019 11:14:59 Connection to port 1900 blocked by firewall
2019-12-24 19:29:27
51.38.71.36 attackspam
Dec 24 07:16:32 localhost sshd\[26382\]: Invalid user xp from 51.38.71.36 port 42950
Dec 24 07:16:32 localhost sshd\[26382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.71.36
Dec 24 07:16:34 localhost sshd\[26382\]: Failed password for invalid user xp from 51.38.71.36 port 42950 ssh2
...
2019-12-24 19:24:01
122.116.201.108 attack
Automatic report - Port Scan Attack
2019-12-24 19:50:54
14.248.104.206 attackspambots
Unauthorized connection attempt from IP address 14.248.104.206 on Port 445(SMB)
2019-12-24 19:26:03
104.41.7.30 attackbots
RDP Bruteforce
2019-12-24 19:39:26

Recently Reported IPs

35.224.226.239 93.189.101.5 139.218.224.79 5.88.195.212
197.210.181.220 18.207.218.200 1.228.84.128 175.19.218.230
124.165.12.40 122.137.13.74 63.81.90.112 174.86.189.139
193.93.194.93 91.172.192.89 53.157.199.220 25.188.220.30
183.151.175.39 21.81.253.220 67.122.42.158 5.62.155.88