103.239.142.11
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ESS ESS ONLINE
- Usage Type
- Fixed Line ISP
- ASN
- AS59162
- Domain Name
- essessonline.in
- Country
- 🇮🇳 India
- City
- Sardhana, Uttar Pradesh
Abuse Reports
Total reports
421 from
82 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| 🇫🇮 dnsbd.tech |
nftables: Port scan (TCP:445) [srv2]
|
Port Scan Hacking | |
| 🇭🇰 mutebot.net |
SRC=103.239.142.11, PROTO=TCP, SPT=60174, DPT=445
|
Port Scan | |
| 🇫🇷 AmStaff |
Honeypot: SMB exploitation attempts. Targeted ports: SMB.
|
Port Scan Hacking | |
| 🇫🇷 vtchost.com |
portscan on honeypot system
...
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 7 Dionaea events.
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇺🇸 drewf.ink |
[04:23] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12) - no SMB2 support signaled
|
Hacking | |
| 🇺🇸 drewf.ink |
[03:14] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12) - no SMB2 support signaled
|
Hacking | |
| 🇩🇪 jann |
Honeypot: connection to unused port 445 at 2026-11-11 12:54:16 UTC. No service runs there, any connection is unsolicited scanning.
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇨🇦 Luhte |
Unsolicited TCP connection from 103.239.142.11 to port 0 at 2026-11-11T02:31:57Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇩🇪 Coinetic AI Security |
Connection to a trap port: 1 attempts on port 445, 2026-11-10 07:08 - 07:08 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
|
Port Scan Hacking | |
| 🇪🇸 DXC-0 |
Multiple attacks on Honeypot servers
|
Web Spam Brute-Force Web App Attack Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 3 hits on ports [445] (automated)
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown