Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Bandung

Region: West Java

Country: Indonesia

Internet Service Provider: PT Indonesia Comnets Plus

Hostname: unknown

Organization: PT INDONESIA COMNETS PLUS

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt from IP address 124.158.160.34 on Port 445(SMB)
2020-09-11 04:01:25
attackspam
Unauthorized connection attempt from IP address 124.158.160.34 on Port 445(SMB)
2020-09-10 19:39:44
attackbotsspam
Unauthorized connection attempt from IP address 124.158.160.34 on Port 445(SMB)
2020-08-02 08:50:14
attackbotsspam
445/tcp 445/tcp 445/tcp...
[2020-02-08/03-30]12pkt,1pt.(tcp)
2020-03-31 06:35:52
attack
Unauthorized connection attempt from IP address 124.158.160.34 on Port 445(SMB)
2020-03-09 09:34:28
attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-03 15:26:12
attack
Port probing on unauthorized port 445
2020-02-21 17:47:42
attackspam
Unauthorized connection attempt from IP address 124.158.160.34 on Port 445(SMB)
2020-01-04 02:00:06
attackbots
20/1/1@01:01:06: FAIL: Alarm-Network address from=124.158.160.34
...
2020-01-01 14:11:13
attackbotsspam
445/tcp 445/tcp 445/tcp...
[2019-10-26/12-22]29pkt,1pt.(tcp)
2019-12-24 04:19:14
attack
Unauthorized connection attempt from IP address 124.158.160.34 on Port 445(SMB)
2019-11-04 03:38:34
attackbots
Unauthorized connection attempt from IP address 124.158.160.34 on Port 445(SMB)
2019-11-03 21:34:42
attack
Unauthorised access (Oct 22) SRC=124.158.160.34 LEN=52 TOS=0x10 PREC=0x40 TTL=110 ID=20718 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Oct 14) SRC=124.158.160.34 LEN=52 PREC=0x20 TTL=107 ID=7200 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-22 12:49:40
attack
Unauthorized connection attempt from IP address 124.158.160.34 on Port 445(SMB)
2019-10-19 23:38:44
attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-28 22:15:09,437 INFO [amun_request_handler] PortScan Detected on Port: 445 (124.158.160.34)
2019-08-29 10:56:29
attackbotsspam
Unauthorised access (Aug 14) SRC=124.158.160.34 LEN=52 PREC=0x20 TTL=106 ID=2817 DF TCP DPT=445 WINDOW=8192 SYN
2019-08-15 04:21:46
attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-29 09:41:46,470 INFO [shellcode_manager] (124.158.160.34) no match, writing hexdump (3028ec7b5e8f4663b81b67055ec68a2d :2158038) - MS17010 (EternalBlue)
2019-06-29 19:41:02
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.158.160.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2126
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.158.160.34.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 13 21:51:18 +08 2019
;; MSG SIZE  rcvd: 118

Host info
Host 34.160.158.124.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 34.160.158.124.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
222.186.52.39 attack
Unauthorized connection attempt detected from IP address 222.186.52.39 to port 22
2020-03-30 12:31:53
180.164.126.13 attack
Mar 30 06:24:49 ewelt sshd[6832]: Invalid user qql from 180.164.126.13 port 43708
Mar 30 06:24:49 ewelt sshd[6832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.164.126.13
Mar 30 06:24:49 ewelt sshd[6832]: Invalid user qql from 180.164.126.13 port 43708
Mar 30 06:24:51 ewelt sshd[6832]: Failed password for invalid user qql from 180.164.126.13 port 43708 ssh2
...
2020-03-30 12:29:37
2606:4700:3030::681b:bf53 attackbots
Spamvertised Website

http://i9q.cn/4HpseC
203.195.186.176
server_redirect	temporary

http://k7njjrcwnhi4vyc.ru/
104.27.191.83
104.27.190.83
2606:4700:3034::681b:be53
2606:4700:3030::681b:bf53
server_redirect	temporary

http://k7njjrcwnhi4vyc.ru/uNzu2C/

Received: from 217.78.61.143  (HELO 182.22.12.247) (217.78.61.143)
Return-Path: 
From: "vohrals@gxususwhtbucgoyfu.jp" 
Subject: 本物を確認したいあなたにお届けします
X-Mailer: Microsoft Outlook, Build 10.0.2616
2020-03-30 12:22:55
58.246.68.6 attackbotsspam
Invalid user pur from 58.246.68.6 port 4692
2020-03-30 09:45:07
45.125.65.35 attackspam
Mar 30 06:05:40 relay postfix/smtpd\[27242\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 30 06:05:49 relay postfix/smtpd\[20937\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 30 06:14:42 relay postfix/smtpd\[25664\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 30 06:14:48 relay postfix/smtpd\[27381\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 30 06:23:35 relay postfix/smtpd\[27242\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-03-30 12:24:21
116.247.81.99 attackbotsspam
" "
2020-03-30 12:04:26
82.251.159.240 attackbotsspam
Mar 30 06:12:02 ewelt sshd[6195]: Invalid user ooi from 82.251.159.240 port 54400
Mar 30 06:12:02 ewelt sshd[6195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.251.159.240
Mar 30 06:12:02 ewelt sshd[6195]: Invalid user ooi from 82.251.159.240 port 54400
Mar 30 06:12:04 ewelt sshd[6195]: Failed password for invalid user ooi from 82.251.159.240 port 54400 ssh2
...
2020-03-30 12:37:19
149.56.132.202 attack
Mar 30 08:57:04 gw1 sshd[17146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.132.202
Mar 30 08:57:06 gw1 sshd[17146]: Failed password for invalid user isq from 149.56.132.202 port 54510 ssh2
...
2020-03-30 12:00:09
71.6.232.6 attack
scan z
2020-03-30 12:02:59
51.77.111.30 attackbots
03/30/2020-00:11:47.834474 51.77.111.30 Protocol: 6 ET SCAN Potential SSH Scan
2020-03-30 12:13:10
14.244.74.87 attack
Honeypot attack, port: 445, PTR: static.vnpt.vn.
2020-03-30 12:15:03
73.68.9.170 attackspam
SSH Invalid Login
2020-03-30 09:44:50
190.237.2.64 attackbotsspam
IMAP
2020-03-30 12:08:13
124.251.110.148 attackspam
Mar 29 20:56:37 mockhub sshd[10706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.148
Mar 29 20:56:39 mockhub sshd[10706]: Failed password for invalid user jiv from 124.251.110.148 port 39682 ssh2
...
2020-03-30 12:30:43
192.99.70.208 attackbotsspam
Mar 30 05:53:01 eventyay sshd[7108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.70.208
Mar 30 05:53:03 eventyay sshd[7108]: Failed password for invalid user tanaj from 192.99.70.208 port 57942 ssh2
Mar 30 05:57:04 eventyay sshd[7240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.70.208
...
2020-03-30 12:02:05

Recently Reported IPs

140.143.77.85 46.148.21.32 192.168.10.248 154.83.17.56
203.41.236.130 165.227.123.44 54.166.230.72 185.10.68.55
81.17.94.50 119.39.84.75 113.160.244.167 2001:41d0:52:a00::e3d
161.246.95.136 107.173.52.160 185.253.97.242 123.194.33.68
177.94.224.157 107.152.143.143 45.55.206.7 90.143.27.14