IP address

Search at other sites:
--103.180.125.44
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DataPlane VNC RFB
103.180.125.44 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-02-06 15:10:00.686000
Was present on blacklist at: 2025-01-30 19:10, 2025-01-30 23:10, 2025-01-31 03:10, 2025-01-31 07:10, 2025-01-31 11:10, 2025-01-31 15:10, 2025-01-31 19:10, 2025-01-31 23:10, 2025-02-01 03:10, 2025-02-01 07:10, 2025-02-01 11:10, 2025-02-01 15:10, 2025-02-01 19:10, 2025-02-01 23:10, 2025-02-02 03:10, 2025-02-02 07:10, 2025-02-02 11:10, 2025-02-02 15:10, 2025-02-02 19:10, 2025-02-02 23:10, 2025-02-03 03:10, 2025-02-03 07:10, 2025-02-03 11:10, 2025-02-03 15:10, 2025-02-03 19:10, 2025-02-03 23:10, 2025-02-04 03:10, 2025-02-04 07:10, 2025-02-04 11:10, 2025-02-04 15:10, 2025-02-04 19:10, 2025-02-04 23:10, 2025-02-05 03:10, 2025-02-05 07:10, 2025-02-05 11:10, 2025-02-05 15:10, 2025-02-05 19:10, 2025-02-05 23:10, 2025-02-06 03:10, 2025-02-06 07:10, 2025-02-06 11:10, 2025-02-06 15:10
OTX pulses
[679cd01ecde3753e8da43f62] 2025-01-31 13:29:02.350000 | VNC honeypot logs for 2025/01/31
Author name:jnazario
Pulse modified:2025-01-31 13:29:02.350000
Indicator created:2025-01-31 13:29:03
Indicator role:None
Indicator title:
Indicator expiration:2025-03-02 13:00:00
[679e21cf001b0e7a78676342] 2025-02-01 13:29:51.127000 | VNC honeypot logs for 2025/02/01
Author name:jnazario
Pulse modified:2025-02-01 13:29:51.127000
Indicator created:2025-02-01 13:29:52
Indicator role:None
Indicator title:
Indicator expiration:2025-03-03 13:00:00
[679f74998ce3d6782a5f1d6c] 2025-02-02 13:35:21.405000 | VNC honeypot logs for 2025/02/02
Author name:jnazario
Pulse modified:2025-02-02 13:35:21.405000
Indicator created:2025-02-02 13:35:22
Indicator role:None
Indicator title:
Indicator expiration:2025-03-04 13:00:00
[67a0c2da8ef1d09af30e6c98] 2025-02-03 13:21:30.172000 | VNC honeypot logs for 2025/02/03
Author name:jnazario
Pulse modified:2025-02-03 13:21:30.172000
Indicator created:2025-02-03 13:21:31
Indicator role:None
Indicator title:
Indicator expiration:2025-03-05 13:00:00
[67ab4f7694d4e4acfe72c308] 2025-02-11 13:24:06.961000 | VNC honeypot logs for 2025/02/11
Author name:jnazario
Pulse modified:2025-02-11 13:24:06.961000
Indicator created:2025-02-11 13:24:07
Indicator role:None
Indicator title:
Indicator expiration:2025-03-13 13:00:00
[67aca5ba0a1cf4f63dc5fb23] 2025-02-12 13:44:26.346000 | VNC honeypot logs for 2025/02/12
Author name:jnazario
Pulse modified:2025-02-12 13:44:26.346000
Indicator created:2025-02-12 13:44:27
Indicator role:None
Indicator title:
Indicator expiration:2025-03-14 13:00:00
Origin AS
AS141968 - IDNIC-IKADA-AS-ID IDNIC-IKADA-AS-ID
BGP Prefix
103.180.125.0/24
geo
Indonesia
🕑 Asia/Jakarta
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
103.180.124.0 - 103.180.125.255
last_activity
2025-02-12 16:34:16.956000
reserved_range
0
Shodan's InternetDB
Open ports: 21, 22, 25, 53, 80, 110, 443, 465, 587, 993, 995, 3306, 8090
Tags: self-signed, database, starttls
CPEs: cpe:/a:postfix:postfix, cpe:/a:mariadb:mariadb, cpe:/a:openbsd:openssh:7.4, cpe:/a:pureftpd:pure-ftpd
ts_added
2025-01-30 19:10:48.717000
ts_last_update
2025-03-14 19:10:50.381000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses