103.194.242.102

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.194.242.254	attackbots	Dovecot Invalid User Login Attempt.	2020-09-07 01:07:02
103.194.242.254	attackspambots	Dovecot Invalid User Login Attempt.	2020-09-06 16:28:20
103.194.242.254	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-09-06 08:29:04
103.194.242.78	attack	Aug 26 04:40:47 shivevps sshd[24611]: Bad protocol version identification '\024' from 103.194.242.78 port 59582 Aug 26 04:41:19 shivevps sshd[25537]: Bad protocol version identification '\024' from 103.194.242.78 port 60894 Aug 26 04:43:56 shivevps sshd[30268]: Bad protocol version identification '\024' from 103.194.242.78 port 38432 Aug 26 04:44:16 shivevps sshd[30875]: Bad protocol version identification '\024' from 103.194.242.78 port 39199 ...	2020-08-26 14:52:44
103.194.242.254	attackbots	Dovecot Invalid User Login Attempt.	2020-08-14 12:53:06
103.194.242.254	attackbotsspam	proto=tcp . spt=47004 . dpt=25 . Found on Blocklist de (510)	2020-03-10 06:52:35
103.194.242.78	attackspam	email spam	2019-12-19 16:44:49
103.194.242.78	attackspam	Mail sent to address harvested from public web site	2019-11-27 02:34:02
103.194.242.254	attackspam	Absender hat Spam-Falle ausgel?st	2019-11-08 21:31:20
103.194.242.254	attack	postfix (unknown user, SPF fail or relay access denied)	2019-11-05 19:20:42
103.194.242.254	attack	Brute force SMTP login attempts.	2019-09-30 05:58:34
103.194.242.10	attack	Sending SPAM email	2019-08-06 23:06:34
103.194.242.78	attack	C2,WP GET //wp-login.php	2019-07-24 17:11:08

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.194.242.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24357
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.194.242.102.		IN	A

;; AUTHORITY SECTION:
.			169	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 23:16:46 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 102.242.194.103.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 102.242.194.103.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.83.76.36	attackbotsspam	Jul 17 19:46:30 SilenceServices sshd[6361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.76.36 Jul 17 19:46:32 SilenceServices sshd[6361]: Failed password for invalid user testuser from 51.83.76.36 port 46316 ssh2 Jul 17 19:52:40 SilenceServices sshd[10392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.76.36	2019-07-18 02:16:02
148.70.223.53	attack	Jul 17 18:50:42 microserver sshd[49410]: Invalid user ab from 148.70.223.53 port 49436 Jul 17 18:50:42 microserver sshd[49410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.223.53 Jul 17 18:50:43 microserver sshd[49410]: Failed password for invalid user ab from 148.70.223.53 port 49436 ssh2 Jul 17 18:57:38 microserver sshd[50216]: Invalid user cs from 148.70.223.53 port 47252 Jul 17 18:57:38 microserver sshd[50216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.223.53 Jul 17 19:11:32 microserver sshd[52284]: Invalid user admin from 148.70.223.53 port 42888 Jul 17 19:11:32 microserver sshd[52284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.223.53 Jul 17 19:11:34 microserver sshd[52284]: Failed password for invalid user admin from 148.70.223.53 port 42888 ssh2 Jul 17 19:18:40 microserver sshd[53118]: Invalid user navneet from 148.70.223.53 port 40708 Jul 17 19:18	2019-07-18 02:31:05
37.59.100.22	attack	2019-07-17T18:08:50.708997abusebot-4.cloudsearch.cf sshd\[4329\]: Invalid user demo from 37.59.100.22 port 55060	2019-07-18 02:32:21
121.8.124.244	attackbots	2019-07-17T18:48:51.288794abusebot-4.cloudsearch.cf sshd\[4488\]: Invalid user user from 121.8.124.244 port 20513	2019-07-18 02:49:42
202.75.251.13	attackbots	[Wed Jul 17 23:36:38.276389 2019] [:error] [pid 30098:tid 139622348687104] [client 202.75.251.13:8123] [client 202.75.251.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/phpMyAdmin"] [unique_id "XS9OlsPY4htdTqmEocAAcwAAABY"], referer: http://103.27.207.197/phpMyAdmin ...	2019-07-18 02:32:38
217.125.110.139	attackbots	Jul 17 20:04:14 mail sshd\[25692\]: Invalid user fluffy from 217.125.110.139 port 33516 Jul 17 20:04:14 mail sshd\[25692\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.125.110.139 Jul 17 20:04:16 mail sshd\[25692\]: Failed password for invalid user fluffy from 217.125.110.139 port 33516 ssh2 Jul 17 20:09:05 mail sshd\[26457\]: Invalid user smbguest from 217.125.110.139 port 39248 Jul 17 20:09:05 mail sshd\[26457\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.125.110.139	2019-07-18 02:21:43
144.217.15.161	attackspam	Jul 17 20:32:21 SilenceServices sshd[2891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.15.161 Jul 17 20:32:22 SilenceServices sshd[2891]: Failed password for invalid user denis from 144.217.15.161 port 45974 ssh2 Jul 17 20:38:42 SilenceServices sshd[6429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.15.161	2019-07-18 02:55:15
165.22.248.215	attack	Jul 17 19:40:53 ubuntu-2gb-nbg1-dc3-1 sshd[27664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.248.215 Jul 17 19:40:55 ubuntu-2gb-nbg1-dc3-1 sshd[27664]: Failed password for invalid user teamspeak from 165.22.248.215 port 46582 ssh2 ...	2019-07-18 02:11:58
159.65.131.134	attackspam	Invalid user antonella from 159.65.131.134 port 37574 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.131.134 Failed password for invalid user antonella from 159.65.131.134 port 37574 ssh2 Invalid user elvira from 159.65.131.134 port 36284 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.131.134	2019-07-18 02:45:29
104.206.128.22	attack	Unauthorized connection attempt from IP address 104.206.128.22 on Port 3306(MYSQL)	2019-07-18 02:55:48
188.166.87.238	attack	Jul 17 19:29:59 debian sshd\[799\]: Invalid user peter from 188.166.87.238 port 59130 Jul 17 19:29:59 debian sshd\[799\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.87.238 ...	2019-07-18 02:35:21
216.245.196.206	attack	\[2019-07-17 14:00:29\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '216.245.196.206:50995' - Wrong password \[2019-07-17 14:00:29\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-17T14:00:29.298-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="40",SessionID="0x7f06f811a3c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.245.196.206/50995",Challenge="7584768d",ReceivedChallenge="7584768d",ReceivedHash="f05bd1d09941b5f13650c5baf4a14622" \[2019-07-17 14:00:29\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '216.245.196.206:54352' - Wrong password \[2019-07-17 14:00:29\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-17T14:00:29.592-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="500",SessionID="0x7f06f85ff978",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.2	2019-07-18 02:09:56
192.241.175.250	attack	Jul 17 20:24:48 vps691689 sshd[20843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.175.250 Jul 17 20:24:50 vps691689 sshd[20843]: Failed password for invalid user job from 192.241.175.250 port 53194 ssh2 Jul 17 20:32:44 vps691689 sshd[20927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.175.250 ...	2019-07-18 02:44:22
104.236.81.204	attackbotsspam	Jul 17 18:37:22 [munged] sshd[9553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.81.204 user=root Jul 17 18:37:24 [munged] sshd[9553]: Failed password for root from 104.236.81.204 port 38980 ssh2	2019-07-18 02:18:13
120.132.31.120	attackspambots	$f2bV_matches	2019-07-18 02:45:59

Recently Reported IPs

103.126.217.33	103.194.242.214	103.194.242.106	103.194.242.230
103.194.242.227	103.194.243.217	103.194.243.193	103.194.243.177
103.194.244.94	103.126.217.41	103.194.244.97	103.194.243.65
228.169.65.106	103.194.244.138	103.194.244.121	103.194.248.102
103.194.248.140	103.194.248.114	103.194.248.103	103.194.248.118