180.242.181.254

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
180.242.181.111	attack	Port probing on unauthorized port 445	2020-09-04 21:16:58
180.242.181.111	attack	Port probing on unauthorized port 445	2020-09-04 12:55:16
180.242.181.111	attackspam	Port probing on unauthorized port 445	2020-09-04 05:25:34
180.242.181.217	attackspam	1597031437 - 08/10/2020 05:50:37 Host: 180.242.181.217/180.242.181.217 Port: 445 TCP Blocked	2020-08-10 17:30:19
180.242.181.71	attackspambots	Unauthorized connection attempt from IP address 180.242.181.71 on Port 445(SMB)	2020-07-23 06:11:16
180.242.181.219	attackspambots	TCP (SYN) 180.242.181.219:27529 -> port 23, len 44	2020-07-11 18:20:17
180.242.181.63	attackbots	Unauthorised access (Jun 19) SRC=180.242.181.63 LEN=44 TTL=54 ID=51534 TCP DPT=8080 WINDOW=18712 SYN	2020-06-19 17:30:48
180.242.181.225	attackspam	firewall-block, port(s): 445/tcp	2020-05-11 17:43:32
180.242.181.124	attackspam	1588564264 - 05/04/2020 05:51:04 Host: 180.242.181.124/180.242.181.124 Port: 445 TCP Blocked	2020-05-04 18:27:16
180.242.181.17	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-20 18:56:32
180.242.181.46	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 14-02-2020 04:55:09.	2020-02-14 16:35:18
180.242.181.163	attackspambots	unauthorized connection attempt	2020-02-07 18:18:14
180.242.181.214	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-02 01:59:32
180.242.181.91	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-13 14:18:20
180.242.181.168	attackbots	Unauthorized connection attempt from IP address 180.242.181.168 on Port 445(SMB)	2020-01-03 19:44:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.242.181.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39296
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;180.242.181.254.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022501 1800 900 604800 86400

;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 26 03:33:08 CST 2025
;; MSG SIZE  rcvd: 108

Host info

Host 254.181.242.180.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 254.181.242.180.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
75.134.197.67	attack	port scan and connect, tcp 8080 (http-proxy)	2019-11-15 13:42:04
202.190.50.63	attackspambots	Automatic report - Port Scan Attack	2019-11-15 13:45:26
181.123.9.68	attackbots	Nov 14 18:51:39 eddieflores sshd\[29104\]: Invalid user maddie from 181.123.9.68 Nov 14 18:51:39 eddieflores sshd\[29104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.9.68 Nov 14 18:51:42 eddieflores sshd\[29104\]: Failed password for invalid user maddie from 181.123.9.68 port 50284 ssh2 Nov 14 18:58:52 eddieflores sshd\[29662\]: Invalid user galarpe from 181.123.9.68 Nov 14 18:58:52 eddieflores sshd\[29662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.9.68	2019-11-15 13:54:21
185.176.27.246	attackspambots	185.176.27.246 was recorded 92 times by 20 hosts attempting to connect to the following ports: 65491,65476,65483,65494,65492,65480,65495,65465,65496,65449,65474,65498,65453,65462,65479,65487,65493,65473,65484,65452,65477,65478,65482,65499,65490,65468,65488,65481,65497,65456,65454,65485,65486,65463,65450,65455,65470,65451. Incident counter (4h, 24h, all-time): 92, 414, 6663	2019-11-15 13:25:22
51.75.18.35	attackbots	Nov 14 19:30:09 kapalua sshd\[3638\]: Invalid user divhumas from 51.75.18.35 Nov 14 19:30:09 kapalua sshd\[3638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.ip-51-75-18.eu Nov 14 19:30:11 kapalua sshd\[3638\]: Failed password for invalid user divhumas from 51.75.18.35 port 39167 ssh2 Nov 14 19:34:05 kapalua sshd\[3981\]: Invalid user hanrahan from 51.75.18.35 Nov 14 19:34:05 kapalua sshd\[3981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.ip-51-75-18.eu	2019-11-15 13:56:46
14.165.153.236	attackbots	Automatic report - Port Scan Attack	2019-11-15 13:42:57
111.13.139.225	attackbots	Nov 14 19:24:16 sachi sshd\[12303\]: Invalid user wu@123 from 111.13.139.225 Nov 14 19:24:16 sachi sshd\[12303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.13.139.225 Nov 14 19:24:17 sachi sshd\[12303\]: Failed password for invalid user wu@123 from 111.13.139.225 port 47174 ssh2 Nov 14 19:29:08 sachi sshd\[12697\]: Invalid user jewelle from 111.13.139.225 Nov 14 19:29:08 sachi sshd\[12697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.13.139.225	2019-11-15 13:42:22
119.160.234.46	attackspambots	Unauthorised access (Nov 15) SRC=119.160.234.46 LEN=40 TTL=240 ID=50412 TCP DPT=1433 WINDOW=1024 SYN	2019-11-15 13:49:09
51.77.194.241	attackspambots	Nov 15 06:26:11 vps691689 sshd[13750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.194.241 Nov 15 06:26:13 vps691689 sshd[13750]: Failed password for invalid user ftpuser from 51.77.194.241 port 36980 ssh2 ...	2019-11-15 13:54:45
111.207.49.186	attack	Nov 14 19:31:41 php1 sshd\[12279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.207.49.186 user=backup Nov 14 19:31:43 php1 sshd\[12279\]: Failed password for backup from 111.207.49.186 port 57782 ssh2 Nov 14 19:36:33 php1 sshd\[12662\]: Invalid user wwwrun from 111.207.49.186 Nov 14 19:36:33 php1 sshd\[12662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.207.49.186 Nov 14 19:36:35 php1 sshd\[12662\]: Failed password for invalid user wwwrun from 111.207.49.186 port 36656 ssh2	2019-11-15 13:47:41
104.248.16.130	attackbotsspam	Automatic report - XMLRPC Attack	2019-11-15 13:19:34
159.89.13.0	attack	Nov 15 07:16:44 sauna sshd[233017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.13.0 Nov 15 07:16:46 sauna sshd[233017]: Failed password for invalid user server from 159.89.13.0 port 60004 ssh2 ...	2019-11-15 13:30:01
79.149.61.89	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/79.149.61.89/ ES - 1H : (58) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ES NAME ASN : ASN3352 IP : 79.149.61.89 CIDR : 79.149.0.0/16 PREFIX COUNT : 662 UNIQUE IP COUNT : 10540800 ATTACKS DETECTED ASN3352 : 1H - 2 3H - 3 6H - 7 12H - 14 24H - 24 DateTime : 2019-11-15 05:59:05 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-15 13:44:27
71.171.36.165	attackbotsspam	Unauthorized IMAP connection attempt	2019-11-15 13:48:33
203.147.76.175	attackbotsspam	Autoban 203.147.76.175 AUTH/CONNECT	2019-11-15 13:39:01

Recently Reported IPs

61.130.10.88	124.115.45.77	46.136.150.9	21.57.95.1
235.226.4.209	209.219.98.120	69.94.139.228	193.32.31.128
28.189.110.185	248.191.206.41	144.141.89.230	61.235.107.82
118.59.65.103	165.69.107.218	173.87.204.155	29.18.98.255
45.20.195.188	60.221.104.109	14.28.21.73	187.208.120.223