103.42.1.3 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Afghanistan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.42.162.30	attackbots	Sep 1 13:27:22 shivevps sshd[27916]: Bad protocol version identification '\024' from 103.42.162.30 port 50060 ...	2020-09-02 03:57:47
103.42.124.205	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-06-22 01:05:47
103.42.172.167	attackspambots	firewall-block, port(s): 445/tcp	2020-05-04 00:46:12
103.42.172.167	attackspam	Unauthorized connection attempt from IP address 103.42.172.167 on Port 445(SMB)	2020-04-24 22:14:10
103.42.115.118	attack	Wed, 25 Mar 2020 02:48:26 -0400 Received: from traffic-manage.photon-5.eth01.trafficpollutioncontrol.online ([103.42.115.118]:2625) From: "Tech Smart Card" India Multi-function Universal Smart Adapter Card box spam	2020-03-26 14:36:58
103.42.158.73	attack	Mar 1 14:16:53 debian-2gb-nbg1-2 kernel: \[5327800.230257\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.42.158.73 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x20 TTL=44 ID=42309 PROTO=TCP SPT=52104 DPT=23 WINDOW=53392 RES=0x00 SYN URGP=0	2020-03-02 05:07:17
103.42.172.167	attack	20/2/21@23:45:21: FAIL: Alarm-Intrusion address from=103.42.172.167 ...	2020-02-22 19:11:22
103.42.16.254	attack	Host Scan	2019-12-26 17:28:24
103.42.173.80	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 19-12-2019 15:05:15.	2019-12-20 02:36:48
103.42.127.35	attackspam	1576252666 - 12/13/2019 16:57:46 Host: 103.42.127.35/103.42.127.35 Port: 445 TCP Blocked	2019-12-14 01:44:07
103.42.127.223	attackbots	2019-12-04T07:28:34.5313711240 sshd\[29848\]: Invalid user avanthi from 103.42.127.223 port 61951 2019-12-04T07:28:40.5487051240 sshd\[29848\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.42.127.223 2019-12-04T07:28:42.2632631240 sshd\[29848\]: Failed password for invalid user avanthi from 103.42.127.223 port 61951 ssh2 ...	2019-12-04 16:39:18
103.42.126.254	attack	Automatic report - Banned IP Access	2019-10-25 21:31:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.1.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54207
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.42.1.3.			IN	A

;; AUTHORITY SECTION:
.			328	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022501 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 02:24:43 CST 2022
;; MSG SIZE  rcvd: 103

Host info

3.1.42.103.in-addr.arpa domain name pointer 103-42-1-3-awcc-mobility-customer.as38742.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
3.1.42.103.in-addr.arpa	name = 103-42-1-3-awcc-mobility-customer.as38742.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
84.51.53.129	attackbots	Port probing on unauthorized port 23	2020-02-14 05:04:56
61.177.172.128	attackspambots	Feb 13 22:14:01 mail sshd\[26452\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Feb 13 22:14:03 mail sshd\[26452\]: Failed password for root from 61.177.172.128 port 17722 ssh2 Feb 13 22:14:19 mail sshd\[26454\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root ...	2020-02-14 05:19:33
201.131.24.118	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 05:24:49
195.138.74.134	attackspam	Unauthorized connection attempt detected from IP address 195.138.74.134 to port 445	2020-02-14 05:15:27
103.74.120.201	attackspambots	WordPress login Brute force / Web App Attack on client site.	2020-02-14 05:06:57
185.176.27.254	attack	02/13/2020-16:21:12.482869 185.176.27.254 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-02-14 05:21:48
171.226.174.77	attackbots	Telnetd brute force attack detected by fail2ban	2020-02-14 05:14:04
222.29.159.167	attack	Feb 13 22:28:31 plex sshd[20771]: Invalid user sahlit from 222.29.159.167 port 33473	2020-02-14 05:38:57
200.94.192.233	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 05:39:30
139.219.100.94	attack	$f2bV_matches	2020-02-14 05:33:53
5.74.118.129	attackbots	Unauthorised access (Feb 13) SRC=5.74.118.129 LEN=40 TTL=52 ID=44815 TCP DPT=23 WINDOW=51005 SYN	2020-02-14 05:31:40
51.38.80.104	attackspambots	Feb 13 15:51:41 plusreed sshd[11191]: Invalid user sledgep from 51.38.80.104 ...	2020-02-14 05:16:57
192.241.239.135	attackspam	Fail2Ban Ban Triggered	2020-02-14 05:32:24
201.183.225.114	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 05:09:58
52.77.77.225	attackbots	Feb 13 10:29:19 web9 sshd\[5053\]: Invalid user sanguin from 52.77.77.225 Feb 13 10:29:19 web9 sshd\[5053\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.77.77.225 Feb 13 10:29:20 web9 sshd\[5053\]: Failed password for invalid user sanguin from 52.77.77.225 port 35618 ssh2 Feb 13 10:30:58 web9 sshd\[5285\]: Invalid user ralf from 52.77.77.225 Feb 13 10:30:58 web9 sshd\[5285\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.77.77.225	2020-02-14 05:28:51

Recently Reported IPs

103.42.1.101	103.42.1.22	103.42.1.17	103.41.98.137
103.41.99.249	103.41.98.203	103.41.98.41	103.41.99.130
103.42.1.8	103.42.125.45	103.42.126.148	103.42.126.46
103.42.126.48	103.42.127.112	103.42.126.236	103.42.127.5
103.42.127.237	103.42.126.76	103.43.0.50	103.43.0.34