103.42.1.101 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Afghanistan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.42.162.30	attackbots	Sep 1 13:27:22 shivevps sshd[27916]: Bad protocol version identification '\024' from 103.42.162.30 port 50060 ...	2020-09-02 03:57:47
103.42.124.205	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-06-22 01:05:47
103.42.172.167	attackspambots	firewall-block, port(s): 445/tcp	2020-05-04 00:46:12
103.42.172.167	attackspam	Unauthorized connection attempt from IP address 103.42.172.167 on Port 445(SMB)	2020-04-24 22:14:10
103.42.115.118	attack	Wed, 25 Mar 2020 02:48:26 -0400 Received: from traffic-manage.photon-5.eth01.trafficpollutioncontrol.online ([103.42.115.118]:2625) From: "Tech Smart Card" India Multi-function Universal Smart Adapter Card box spam	2020-03-26 14:36:58
103.42.158.73	attack	Mar 1 14:16:53 debian-2gb-nbg1-2 kernel: \[5327800.230257\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.42.158.73 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x20 TTL=44 ID=42309 PROTO=TCP SPT=52104 DPT=23 WINDOW=53392 RES=0x00 SYN URGP=0	2020-03-02 05:07:17
103.42.172.167	attack	20/2/21@23:45:21: FAIL: Alarm-Intrusion address from=103.42.172.167 ...	2020-02-22 19:11:22
103.42.16.254	attack	Host Scan	2019-12-26 17:28:24
103.42.173.80	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 19-12-2019 15:05:15.	2019-12-20 02:36:48
103.42.127.35	attackspam	1576252666 - 12/13/2019 16:57:46 Host: 103.42.127.35/103.42.127.35 Port: 445 TCP Blocked	2019-12-14 01:44:07
103.42.127.223	attackbots	2019-12-04T07:28:34.5313711240 sshd\[29848\]: Invalid user avanthi from 103.42.127.223 port 61951 2019-12-04T07:28:40.5487051240 sshd\[29848\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.42.127.223 2019-12-04T07:28:42.2632631240 sshd\[29848\]: Failed password for invalid user avanthi from 103.42.127.223 port 61951 ssh2 ...	2019-12-04 16:39:18
103.42.126.254	attack	Automatic report - Banned IP Access	2019-10-25 21:31:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49456
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.42.1.101.			IN	A

;; AUTHORITY SECTION:
.			247	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022501 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 02:24:43 CST 2022
;; MSG SIZE  rcvd: 105

Host info

101.1.42.103.in-addr.arpa domain name pointer 103-42-1-101-awcc-mobility-customer.as38742.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
101.1.42.103.in-addr.arpa	name = 103-42-1-101-awcc-mobility-customer.as38742.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
5.133.62.101	attackspam	Wordpress Admin Login attack	2019-12-27 13:26:54
119.90.43.106	attackspam	$f2bV_matches	2019-12-27 13:29:09
3.17.79.75	attackbots	[FriDec2705:56:31.1318172019][:error][pid16742:tid47392718698240][client3.17.79.75:57988][client3.17.79.75]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof"rx$\^w3c-\\|systran\\\\\\\\$\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"237"][id"331039"][rev"1"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent$Python-urllib$.DisablethisruleifyouusePython-urllib."][severity"CRITICAL"][hostname"inerta.eu"][uri"/robots.txt"][unique_id"XgWO-8ms6nr0J@hykI7eVwAAAJA"][FriDec2705:56:31.5406052019][:error][pid16586:tid47392718698240][client3.17.79.75:52524][client3.17.79.75]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof"rx$\^w3c-\\|systran\\\\\\\\$\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"237"][id"331039"][rev"1"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent$Python-urllib$.DisablethisruleifyouusePython-url	2019-12-27 13:44:38
51.68.82.218	attack	$f2bV_matches	2019-12-27 13:43:20
51.75.18.212	attack	Fail2Ban - SSH Bruteforce Attempt	2019-12-27 13:19:35
111.67.199.200	attack	Dec 27 06:26:54 [host] sshd[3129]: Invalid user moon6 from 111.67.199.200 Dec 27 06:26:54 [host] sshd[3129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.199.200 Dec 27 06:26:57 [host] sshd[3129]: Failed password for invalid user moon6 from 111.67.199.200 port 60500 ssh2	2019-12-27 13:45:11
93.39.116.254	attackbotsspam	Invalid user weiping from 93.39.116.254 port 57935	2019-12-27 13:10:19
222.186.190.92	attackbotsspam	Dec 27 06:14:31 MK-Soft-VM4 sshd[15496]: Failed password for root from 222.186.190.92 port 19612 ssh2 Dec 27 06:14:38 MK-Soft-VM4 sshd[15496]: Failed password for root from 222.186.190.92 port 19612 ssh2 ...	2019-12-27 13:18:16
120.201.124.158	attackspambots	Dec 27 05:23:38 game-panel sshd[27075]: Failed password for news from 120.201.124.158 port 42824 ssh2 Dec 27 05:27:11 game-panel sshd[27240]: Failed password for root from 120.201.124.158 port 53432 ssh2	2019-12-27 13:37:23
138.219.228.96	attackbots	Dec 27 00:13:45 plusreed sshd[3023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.219.228.96 user=root Dec 27 00:13:48 plusreed sshd[3023]: Failed password for root from 138.219.228.96 port 50588 ssh2 ...	2019-12-27 13:40:57
173.210.1.162	attackspam	Dec 27 05:53:57 lnxmysql61 sshd[8550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.210.1.162 Dec 27 05:53:59 lnxmysql61 sshd[8550]: Failed password for invalid user iarocci from 173.210.1.162 port 18799 ssh2 Dec 27 05:57:10 lnxmysql61 sshd[9067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.210.1.162	2019-12-27 13:23:29
116.113.95.146	attack	Port scan detected on ports: 1433[TCP], 1433[TCP], 65529[TCP]	2019-12-27 13:47:53
77.138.254.154	attackspambots	Dec 27 05:40:45 zeus sshd[30824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.138.254.154 Dec 27 05:40:47 zeus sshd[30824]: Failed password for invalid user pck from 77.138.254.154 port 59326 ssh2 Dec 27 05:44:47 zeus sshd[30999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.138.254.154 Dec 27 05:44:49 zeus sshd[30999]: Failed password for invalid user kirkeng from 77.138.254.154 port 33398 ssh2	2019-12-27 13:46:13
2001:8f8:1825:228f:a9e7:98b7:c2f3:abcc	attackbots	Sniffing for wp-login	2019-12-27 13:40:07
129.204.210.40	attackspambots	Dec 27 07:33:23 server sshd\[14610\]: Invalid user gedman from 129.204.210.40 Dec 27 07:33:23 server sshd\[14610\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.210.40 Dec 27 07:33:25 server sshd\[14610\]: Failed password for invalid user gedman from 129.204.210.40 port 60792 ssh2 Dec 27 07:57:30 server sshd\[19594\]: Invalid user mromer from 129.204.210.40 Dec 27 07:57:30 server sshd\[19594\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.210.40 ...	2019-12-27 13:11:49

Recently Reported IPs

103.41.96.6	103.42.1.3	103.42.1.22	103.42.1.17
103.41.98.137	103.41.99.249	103.41.98.203	103.41.98.41
103.41.99.130	103.42.1.8	103.42.125.45	103.42.126.148
103.42.126.46	103.42.126.48	103.42.127.112	103.42.126.236
103.42.127.5	103.42.127.237	103.42.126.76	103.43.0.50