Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
1581312078 - 02/10/2020 06:21:18 Host: 180.242.154.16/180.242.154.16 Port: 445 TCP Blocked
2020-05-09 14:25:27
Comments on same subnet:
IP Type Details Datetime
180.242.154.163 attack
07/28/2020-23:49:07.340999 180.242.154.163 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-29 19:33:06
180.242.154.2 attackspam
Unauthorized connection attempt from IP address 180.242.154.2 on Port 445(SMB)
2020-07-15 14:58:53
180.242.154.56 attack
2020-07-05 22:55:01.781871-0500  localhost screensharingd[39611]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 180.242.154.56 :: Type: VNC DES
2020-07-06 12:23:40
180.242.154.145 attackbotsspam
1589545345 - 05/15/2020 14:22:25 Host: 180.242.154.145/180.242.154.145 Port: 445 TCP Blocked
2020-05-16 01:52:32
180.242.154.17 attack
1586145087 - 04/06/2020 05:51:27 Host: 180.242.154.17/180.242.154.17 Port: 445 TCP Blocked
2020-04-06 17:30:16
180.242.154.250 attackspambots
Port scan detected on ports: 8291[TCP], 8728[TCP], 8728[TCP]
2020-03-10 20:34:41
180.242.154.194 attackbotsspam
scan r
2020-03-06 21:51:37
180.242.154.31 attack
20/1/23@19:16:29: FAIL: Alarm-Intrusion address from=180.242.154.31
...
2020-01-24 09:45:01
180.242.154.115 attackspam
Unauthorized connection attempt from IP address 180.242.154.115 on Port 445(SMB)
2020-01-02 03:36:10
180.242.154.25 attackspambots
Unauthorised access (Oct 10) SRC=180.242.154.25 LEN=48 TTL=247 ID=24393 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-10 15:58:01
180.242.154.4 attackspam
Unauthorized connection attempt from IP address 180.242.154.4 on Port 445(SMB)
2019-07-06 23:44:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.242.154.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19616
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;180.242.154.16.			IN	A

;; AUTHORITY SECTION:
.			549	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050900 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 09 14:25:21 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 16.154.242.180.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 16.154.242.180.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
60.191.82.107 attackbots
Sep 30 14:11:15 dev0-dcfr-rnet sshd[1948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.191.82.107
Sep 30 14:11:17 dev0-dcfr-rnet sshd[1948]: Failed password for invalid user user3 from 60.191.82.107 port 28148 ssh2
Sep 30 14:13:30 dev0-dcfr-rnet sshd[1950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.191.82.107
2019-10-01 00:56:11
221.202.150.210 attackspambots
Automated reporting of FTP Brute Force
2019-10-01 00:19:36
222.186.175.155 attackbotsspam
Sep 30 18:23:05 MK-Soft-Root1 sshd[1019]: Failed password for root from 222.186.175.155 port 3690 ssh2
Sep 30 18:23:09 MK-Soft-Root1 sshd[1019]: Failed password for root from 222.186.175.155 port 3690 ssh2
...
2019-10-01 00:35:34
103.224.33.84 attackbotsspam
SPF Fail sender not permitted to send mail for @lombardiplants.it / Sent mail to address hacked/leaked from Dailymotion
2019-10-01 00:21:57
221.226.58.102 attackspam
2019-09-30T15:52:26.082222abusebot-3.cloudsearch.cf sshd\[25005\]: Invalid user fileserver from 221.226.58.102 port 34830
2019-10-01 00:31:14
77.247.109.31 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2019-10-01 01:00:33
197.45.181.224 attack
Telnet/23 MH Probe, BF, Hack -
2019-10-01 00:24:49
107.6.183.166 attackbotsspam
2222/tcp 179/tcp 1723/tcp...
[2019-08-02/09-30]8pkt,8pt.(tcp)
2019-10-01 00:31:37
103.53.44.174 attackbots
445/tcp 445/tcp 445/tcp
[2019-08-09/09-30]3pkt
2019-10-01 00:44:26
217.173.78.146 attackspambots
SMB Server BruteForce Attack
2019-10-01 00:33:12
51.83.69.99 attackspam
51.83.69.99 - - [30/Sep/2019:20:05:32 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2019-10-01 00:53:12
142.93.198.86 attack
2019-09-30T16:23:33.332844abusebot-5.cloudsearch.cf sshd\[6353\]: Invalid user kai from 142.93.198.86 port 43480
2019-10-01 00:26:13
58.22.65.25 attackbotsspam
links to tampered cctv/circuit boards/and wanderer/domain admin/anyone can be a domain admin/usual death threats/google.com/api/reCAPTCHA.NET
2019-10-01 00:51:49
194.102.35.244 attackbotsspam
2019-09-30T11:18:54.3626401495-001 sshd\[51516\]: Failed password for invalid user xe from 194.102.35.244 port 44436 ssh2
2019-09-30T11:32:06.6217911495-001 sshd\[52421\]: Invalid user abc123 from 194.102.35.244 port 51512
2019-09-30T11:32:06.6297441495-001 sshd\[52421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.102.35.244
2019-09-30T11:32:09.2596241495-001 sshd\[52421\]: Failed password for invalid user abc123 from 194.102.35.244 port 51512 ssh2
2019-09-30T11:36:35.8195241495-001 sshd\[52686\]: Invalid user doctor from 194.102.35.244 port 35048
2019-09-30T11:36:35.8230921495-001 sshd\[52686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.102.35.244
...
2019-10-01 01:01:32
1.173.56.213 attackbotsspam
2323/tcp 23/tcp
[2019-09-28/29]2pkt
2019-10-01 01:03:30

Recently Reported IPs

101.109.58.68 183.88.243.172 136.228.128.6 132.145.26.119
85.105.30.229 49.232.161.243 112.103.91.37 42.59.113.99
193.112.60.102 177.10.216.35 66.249.66.72 91.209.59.226
79.124.62.62 5.60.39.5 81.16.124.141 219.250.188.72
54.39.105.63 113.189.215.150 58.27.234.130 95.167.139.66