Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Cambodia

Internet Service Provider: Cambodian Singmeng Telemedia Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Dovecot Invalid User Login Attempt.
2020-07-25 03:26:19
attack
Registration form abuse
2020-06-19 04:50:42
attackspam
2020-02-27 08:24:45 H=(tlh-cpa.com) [103.242.14.68]:56717 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2020-02-27 08:24:46 H=(tlh-cpa.com) [103.242.14.68]:56717 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBLCSS)
2020-02-27 08:24:47 H=(tlh-cpa.com) [103.242.14.68]:56717 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2020-02-28 01:44:12
attack
spam
2020-01-24 14:10:27
attackspambots
email spam
2019-12-19 17:09:14
attack
Autoban   103.242.14.68 AUTH/CONNECT
2019-11-18 18:56:59
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.242.14.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62339
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.242.14.68.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 19 16:56:27 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 68.14.242.103.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 68.14.242.103.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
133.130.89.210 attackspam
Oct 20 10:23:37 hpm sshd\[17897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v133-130-89-210.a01e.g.tyo1.static.cnode.io  user=root
Oct 20 10:23:38 hpm sshd\[17897\]: Failed password for root from 133.130.89.210 port 56476 ssh2
Oct 20 10:27:56 hpm sshd\[18262\]: Invalid user kaleb from 133.130.89.210
Oct 20 10:27:56 hpm sshd\[18262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v133-130-89-210.a01e.g.tyo1.static.cnode.io
Oct 20 10:27:58 hpm sshd\[18262\]: Failed password for invalid user kaleb from 133.130.89.210 port 39576 ssh2
2019-10-21 04:51:46
107.175.214.83 attack
Honeypot attack, port: 445, PTR: 107-175-214-83-host.colocrossing.com.
2019-10-21 05:06:04
222.186.175.220 attack
2019-10-20T23:21:54.1438931240 sshd\[9702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220  user=root
2019-10-20T23:21:56.3635741240 sshd\[9702\]: Failed password for root from 222.186.175.220 port 35266 ssh2
2019-10-20T23:22:00.4501681240 sshd\[9702\]: Failed password for root from 222.186.175.220 port 35266 ssh2
...
2019-10-21 05:22:25
157.245.230.224 attackspambots
157.245.230.224 - - [21/Oct/2019:00:28:04 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2019-10-21 04:47:46
222.186.173.142 attack
2019-10-18 10:45:06 -> 2019-10-20 17:24:14 : 76 login attempts (222.186.173.142)
2019-10-21 05:05:02
165.22.91.111 attackspam
Honeypot attack, port: 139, PTR: min-do-de-10-07-33685-x-prod.binaryedge.ninja.
2019-10-21 04:52:59
139.199.82.171 attackspam
Oct 21 02:10:57 areeb-Workstation sshd[4913]: Failed password for root from 139.199.82.171 port 38966 ssh2
...
2019-10-21 04:50:11
113.106.8.55 attackspam
Oct 20 11:12:17 tdfoods sshd\[26115\]: Invalid user master!@\# from 113.106.8.55
Oct 20 11:12:17 tdfoods sshd\[26115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.106.8.55
Oct 20 11:12:19 tdfoods sshd\[26115\]: Failed password for invalid user master!@\# from 113.106.8.55 port 43834 ssh2
Oct 20 11:16:29 tdfoods sshd\[26434\]: Invalid user 123qweasdzxc from 113.106.8.55
Oct 20 11:16:29 tdfoods sshd\[26434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.106.8.55
2019-10-21 05:19:27
170.238.46.6 attackspam
Oct 20 22:27:38 lnxmail61 sshd[24974]: Failed password for root from 170.238.46.6 port 40126 ssh2
Oct 20 22:27:38 lnxmail61 sshd[24974]: Failed password for root from 170.238.46.6 port 40126 ssh2
2019-10-21 05:09:40
185.40.12.55 attackspambots
" "
2019-10-21 04:57:38
209.18.47.62 attackbotsspam
[DoS attack: TCP- or UDP-based Port Scan] from 209.18.47.62, port 53	1	Sun Oct 20 14:22:31
[DoS attack: TCP- or UDP-based Port Scan] from 209.18.47.62, port 53	1	Sun Oct 20 13:19:11
2019-10-21 04:57:23
106.12.178.127 attack
Oct 20 16:41:02 xtremcommunity sshd\[718292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.178.127  user=root
Oct 20 16:41:04 xtremcommunity sshd\[718292\]: Failed password for root from 106.12.178.127 port 43248 ssh2
Oct 20 16:45:38 xtremcommunity sshd\[718378\]: Invalid user julianne from 106.12.178.127 port 53384
Oct 20 16:45:38 xtremcommunity sshd\[718378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.178.127
Oct 20 16:45:40 xtremcommunity sshd\[718378\]: Failed password for invalid user julianne from 106.12.178.127 port 53384 ssh2
...
2019-10-21 04:58:02
139.155.45.196 attackspambots
Oct 16 12:35:43 mail sshd[18193]: Failed password for invalid user abdellaue from 139.155.45.196 port 38122 ssh2
Oct 16 12:35:43 mail sshd[18193]: Received disconnect from 139.155.45.196: 11: Bye Bye [preauth]
Oct 16 12:43:11 mail sshd[19551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.45.196  user=r.r
Oct 16 12:43:13 mail sshd[19551]: Failed password for r.r from 139.155.45.196 port 33534 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.155.45.196
2019-10-21 05:08:32
222.186.175.161 attackbotsspam
2019-10-20T20:51:49.629076shield sshd\[29762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161  user=root
2019-10-20T20:51:51.718456shield sshd\[29762\]: Failed password for root from 222.186.175.161 port 36448 ssh2
2019-10-20T20:51:55.934565shield sshd\[29762\]: Failed password for root from 222.186.175.161 port 36448 ssh2
2019-10-20T20:52:00.170429shield sshd\[29762\]: Failed password for root from 222.186.175.161 port 36448 ssh2
2019-10-20T20:52:04.953470shield sshd\[29762\]: Failed password for root from 222.186.175.161 port 36448 ssh2
2019-10-21 04:52:45
142.44.211.229 attackspam
Oct 20 22:53:35 meumeu sshd[9399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.211.229 
Oct 20 22:53:36 meumeu sshd[9399]: Failed password for invalid user only1234 from 142.44.211.229 port 35844 ssh2
Oct 20 22:57:16 meumeu sshd[10004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.211.229 
...
2019-10-21 05:00:32

Recently Reported IPs

36.66.171.205 59.28.2.101 45.247.177.15 14.231.39.207
189.22.10.115 85.100.122.24 166.62.38.222 113.172.11.199
165.22.26.231 109.87.141.136 112.186.77.78 151.105.100.195
61.207.33.183 193.68.19.105 163.172.74.71 125.161.57.184
178.234.42.132 206.214.2.66 5.133.66.194 182.103.24.142