Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Kabul

Region: Kabul

Country: Afghanistan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
103.42.255.245 attackspambots
Automatic report - Port Scan Attack
2020-10-13 03:50:52
103.42.255.245 attack
Automatic report - Port Scan Attack
2020-10-12 19:25:19
103.42.217.238 attackspambots
Automatic report - XMLRPC Attack
2020-06-07 03:48:14
103.42.253.234 attack
spam
2020-01-24 16:23:37
103.42.253.238 attack
spam
2020-01-22 16:30:09
103.42.216.202 attackbotsspam
Jan 10 05:54:25  exim[24310]: [1\45] 1ipmJT-0006K6-MP H=(103-42-216-202.fmgmyanmar.com) [103.42.216.202] F= rejected after DATA: This message scored 12.2 spam points.
2020-01-10 15:27:28
103.42.254.240 attackspam
Unauthorized connection attempt detected from IP address 103.42.254.240 to port 8080
2019-12-11 20:35:58
103.42.216.107 attackbotsspam
2019-11-20 15:03:22 H=(103-42-216-107.fmgmyanmar.com) [103.42.216.107]:63629 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.42.216.107)
2019-11-20 15:03:23 unexpected disconnection while reading SMTP command from (103-42-216-107.fmgmyanmar.com) [103.42.216.107]:63629 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-11-20 15:36:53 H=(103-42-216-107.fmgmyanmar.com) [103.42.216.107]:21816 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.42.216.107)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.42.216.107
2019-11-21 01:36:56
103.42.216.102 attack
Autoban   103.42.216.102 AUTH/CONNECT
2019-11-18 18:25:34
103.42.253.238 attack
Nov 18 17:02:14 our-server-hostname postfix/smtpd[22155]: connect from unknown[103.42.253.238]
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov 18 17:02:22 our-server-hostname postfix/smtpd[22155]: lost connection after RCPT from unknown[103.42.253.238]
Nov 18 17:02:22 our-server-hostname postfix/smtpd[22155]: disconnect from unknown[103.42.253.238]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.42.253.238
2019-11-18 18:24:26
103.42.218.190 attackspam
Port 1433 Scan
2019-11-13 20:27:26
103.42.255.152 attack
Honeypot attack, port: 23, PTR: PTR record not found
2019-11-01 17:00:37
103.42.255.99 attack
postfix
2019-10-11 02:21:32
103.42.255.99 attack
email spam
2019-10-03 17:30:00
103.42.219.170 attackbots
Unauthorized connection attempt from IP address 103.42.219.170 on Port 445(SMB)
2019-09-30 03:11:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.2.155
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11717
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.42.2.155.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 09:33:17 CST 2022
;; MSG SIZE  rcvd: 105
Host info
155.2.42.103.in-addr.arpa domain name pointer 103-42-2-155-awcc-mobility-customer.as38742.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
155.2.42.103.in-addr.arpa	name = 103-42-2-155-awcc-mobility-customer.as38742.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
178.128.144.227 attackbots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-10T09:02:09Z and 2020-07-10T09:07:44Z
2020-07-10 17:25:29
192.35.168.195 attackspambots
Icarus honeypot on github
2020-07-10 17:16:16
185.220.103.9 attack
Too many connections or unauthorized access detected from Arctic banned ip
2020-07-10 16:48:08
209.126.8.99 attackbots
$f2bV_matches
2020-07-10 17:21:31
139.59.67.82 attackbotsspam
Jul 10 12:02:18 lukav-desktop sshd\[7746\]: Invalid user sean from 139.59.67.82
Jul 10 12:02:18 lukav-desktop sshd\[7746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.67.82
Jul 10 12:02:20 lukav-desktop sshd\[7746\]: Failed password for invalid user sean from 139.59.67.82 port 41318 ssh2
Jul 10 12:05:16 lukav-desktop sshd\[16737\]: Invalid user henry from 139.59.67.82
Jul 10 12:05:16 lukav-desktop sshd\[16737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.67.82
2020-07-10 17:24:36
223.71.167.164 attackbots
 TCP (SYN) 223.71.167.164:41837 -> port 8069, len 44
2020-07-10 17:20:30
178.252.189.162 attack
Unauthorized connection attempt detected from IP address 178.252.189.162 to port 1433
2020-07-10 17:19:33
165.227.117.250 attackspam
07/09/2020-23:52:18.442180 165.227.117.250 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-10 16:38:45
185.234.219.227 attackspambots
2020-07-10T02:05:46.372903linuxbox-skyline auth[804309]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=impressora rhost=185.234.219.227
...
2020-07-10 16:44:36
18.27.197.252 attack
Jul 10 09:43:35 inter-technics sshd[32513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.27.197.252  user=sshd
Jul 10 09:43:37 inter-technics sshd[32513]: Failed password for sshd from 18.27.197.252 port 41718 ssh2
Jul 10 09:43:39 inter-technics sshd[32513]: Failed password for sshd from 18.27.197.252 port 41718 ssh2
Jul 10 09:43:35 inter-technics sshd[32513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.27.197.252  user=sshd
Jul 10 09:43:37 inter-technics sshd[32513]: Failed password for sshd from 18.27.197.252 port 41718 ssh2
Jul 10 09:43:39 inter-technics sshd[32513]: Failed password for sshd from 18.27.197.252 port 41718 ssh2
Jul 10 09:43:35 inter-technics sshd[32513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.27.197.252  user=sshd
Jul 10 09:43:37 inter-technics sshd[32513]: Failed password for sshd from 18.27.197.252 port 41718 ssh2
Jul 10 09
...
2020-07-10 17:25:06
49.234.47.124 attackspam
Jul 10 06:03:42 haigwepa sshd[7447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.47.124 
Jul 10 06:03:43 haigwepa sshd[7447]: Failed password for invalid user pico from 49.234.47.124 port 34442 ssh2
...
2020-07-10 17:22:54
189.43.102.34 attack
Jul 10 08:57:17 ns382633 sshd\[28826\]: Invalid user cafe from 189.43.102.34 port 4786
Jul 10 08:57:17 ns382633 sshd\[28826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.43.102.34
Jul 10 08:57:20 ns382633 sshd\[28826\]: Failed password for invalid user cafe from 189.43.102.34 port 4786 ssh2
Jul 10 09:08:06 ns382633 sshd\[30807\]: Invalid user speech-dispatcher from 189.43.102.34 port 54974
Jul 10 09:08:06 ns382633 sshd\[30807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.43.102.34
2020-07-10 16:40:10
113.254.74.69 attackbots
SSH fail RA
2020-07-10 17:02:02
148.72.209.9 attack
Automatic report - WordPress Brute Force
2020-07-10 17:22:02
117.50.48.238 attack
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-07-10 16:58:46

Recently Reported IPs

103.44.97.149 103.44.250.150 103.44.13.133 103.47.218.32
103.45.144.194 103.47.238.117 103.47.12.30 103.44.54.156
103.45.142.225 103.48.181.17 103.5.113.101 103.50.158.21
103.48.105.81 103.56.197.18 103.56.254.176 103.50.7.126
103.56.30.13 103.53.44.30 103.52.254.65 103.54.99.152