Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Pontianak

Region: West Kalimantan

Country: Indonesia

Internet Service Provider: PT Telkom Indonesia

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
20/5/13@17:04:55: FAIL: Alarm-Network address from=180.242.234.142
20/5/13@17:04:55: FAIL: Alarm-Network address from=180.242.234.142
...
2020-05-14 09:00:46
Comments on same subnet:
IP Type Details Datetime
180.242.234.162 attack
denied winbox/dude connect from 180.242.234.162

almost everyday attack


Basic Info

City: Pontianak

Region: West Kalimantan

Country: Indonesia

Internet Service Provider: Esia
2021-04-04 23:28:54
180.242.234.6 attack
Unauthorized connection attempt from IP address 180.242.234.6 on Port 445(SMB)
2020-09-08 04:03:57
180.242.234.6 attack
Unauthorized connection attempt from IP address 180.242.234.6 on Port 445(SMB)
2020-09-07 19:39:33
180.242.234.11 attackspambots
20/7/15@23:54:04: FAIL: Alarm-Network address from=180.242.234.11
20/7/15@23:54:04: FAIL: Alarm-Network address from=180.242.234.11
...
2020-07-16 14:03:51
180.242.234.40 attackspam
20/6/25@23:50:54: FAIL: Alarm-Network address from=180.242.234.40
...
2020-06-26 17:40:33
180.242.234.160 attack
Unauthorized connection attempt from IP address 180.242.234.160 on Port 445(SMB)
2020-06-05 23:23:37
180.242.234.53 attackbots
"Unauthorized connection attempt on SSHD detected"
2020-05-14 14:05:27
180.242.234.100 attackspam
20/4/27@00:47:13: FAIL: Alarm-Network address from=180.242.234.100
20/4/27@00:47:13: FAIL: Alarm-Network address from=180.242.234.100
...
2020-04-27 16:16:05
180.242.234.65 attack
Unauthorised access (Apr 24) SRC=180.242.234.65 LEN=52 TTL=117 ID=6444 DF TCP DPT=445 WINDOW=8192 SYN
2020-04-24 16:13:10
180.242.234.91 attackbots
1585022392 - 03/24/2020 04:59:52 Host: 180.242.234.91/180.242.234.91 Port: 445 TCP Blocked
2020-03-24 12:18:16
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.242.234.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13852
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;180.242.234.142.		IN	A

;; AUTHORITY SECTION:
.			567	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051302 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 14 09:00:41 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 142.234.242.180.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 142.234.242.180.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
164.52.24.182 attack
Unauthorized connection attempt detected from IP address 164.52.24.182 to port 5222 [T]
2020-08-24 23:18:00
111.74.11.85 attack
$f2bV_matches
2020-08-24 22:53:48
212.70.149.83 attackspambots
2020-08-24 17:53:22 dovecot_login authenticator failed for \(User\) \[212.70.149.83\]: 535 Incorrect authentication data \(set_id=stats1@org.ua\)2020-08-24 17:53:49 dovecot_login authenticator failed for \(User\) \[212.70.149.83\]: 535 Incorrect authentication data \(set_id=statistik@org.ua\)2020-08-24 17:54:16 dovecot_login authenticator failed for \(User\) \[212.70.149.83\]: 535 Incorrect authentication data \(set_id=static-m@org.ua\)
...
2020-08-24 22:54:48
103.113.156.141 attackbots
Port Scan
...
2020-08-24 22:51:11
46.214.192.199 attack
Automatic report - XMLRPC Attack
2020-08-24 22:48:20
134.209.12.115 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-24 23:23:50
129.211.81.193 attackspam
Aug 24 13:56:12 *** sshd[630]: Invalid user cot from 129.211.81.193
2020-08-24 23:23:20
103.31.47.58 attackspam
Aug 24 12:52:39 vps-51d81928 sshd[55740]: Invalid user volker from 103.31.47.58 port 59202
Aug 24 12:52:39 vps-51d81928 sshd[55740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.47.58 
Aug 24 12:52:39 vps-51d81928 sshd[55740]: Invalid user volker from 103.31.47.58 port 59202
Aug 24 12:52:41 vps-51d81928 sshd[55740]: Failed password for invalid user volker from 103.31.47.58 port 59202 ssh2
Aug 24 12:57:11 vps-51d81928 sshd[55851]: Invalid user mosquitto from 103.31.47.58 port 38818
...
2020-08-24 23:26:18
117.247.73.113 attackbotsspam
Aug 24 13:50:31 marvibiene sshd[11401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.247.73.113 
Aug 24 13:50:33 marvibiene sshd[11401]: Failed password for invalid user robert from 117.247.73.113 port 52039 ssh2
2020-08-24 22:50:46
185.176.27.38 attack
[H1.VM1] Blocked by UFW
2020-08-24 23:11:39
116.58.247.168 attackbots
Registration form abuse
2020-08-24 22:53:28
185.220.100.254 attackspam
(imapd) Failed IMAP login from 185.220.100.254 (DE/Germany/tor-exit-3.zbau.f3netze.de): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 24 16:19:56 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.220.100.254, lip=5.63.12.44, TLS, session=
2020-08-24 23:25:52
118.126.93.16 attackbots
SSH_scan
2020-08-24 22:43:41
195.176.3.24 attack
(imapd) Failed IMAP login from 195.176.3.24 (CH/Switzerland/tor5e3.digitale-gesellschaft.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 24 16:20:03 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=195.176.3.24, lip=5.63.12.44, TLS, session=<5qzGL56t+Z/DsAMY>
2020-08-24 23:18:19
138.99.6.184 attackbots
Aug 24 16:11:17 minden010 sshd[7147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184
Aug 24 16:11:18 minden010 sshd[7147]: Failed password for invalid user restore from 138.99.6.184 port 60036 ssh2
Aug 24 16:15:57 minden010 sshd[7701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184
...
2020-08-24 23:20:34

Recently Reported IPs

128.199.84.248 37.24.234.85 117.30.124.199 101.224.207.165
36.157.151.11 107.107.144.43 131.161.219.242 111.37.17.181
190.190.44.105 125.99.211.44 83.69.119.98 94.223.136.246
211.177.225.55 47.113.87.53 52.26.93.100 187.74.217.137
46.15.3.41 118.70.81.249 71.221.110.249 81.247.65.239