Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
103.181.161.12 has a threat confidence score of 60%. This IP address from India (AS138245, Xpress Net Solution) has been observed in 2 honeypot sessions targeting HTTP, HTTPS protocols. Detected attack patterns include http boaform admin formlogin auth attempt. First observed on April 2, 2026, most recently active April 6, 2026.
HTTP GET request to /boaform/admin/formLogin with username and psd parameters, indicating an authentication attempt against a Boa-based router or embedded device administrative login endpoint.
Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.