Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Kabul

Region: Kabul

Country: Afghanistan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
103.42.255.245 attackspambots
Automatic report - Port Scan Attack
2020-10-13 03:50:52
103.42.255.245 attack
Automatic report - Port Scan Attack
2020-10-12 19:25:19
103.42.217.238 attackspambots
Automatic report - XMLRPC Attack
2020-06-07 03:48:14
103.42.253.234 attack
spam
2020-01-24 16:23:37
103.42.253.238 attack
spam
2020-01-22 16:30:09
103.42.216.202 attackbotsspam
Jan 10 05:54:25  exim[24310]: [1\45] 1ipmJT-0006K6-MP H=(103-42-216-202.fmgmyanmar.com) [103.42.216.202] F= rejected after DATA: This message scored 12.2 spam points.
2020-01-10 15:27:28
103.42.254.240 attackspam
Unauthorized connection attempt detected from IP address 103.42.254.240 to port 8080
2019-12-11 20:35:58
103.42.216.107 attackbotsspam
2019-11-20 15:03:22 H=(103-42-216-107.fmgmyanmar.com) [103.42.216.107]:63629 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.42.216.107)
2019-11-20 15:03:23 unexpected disconnection while reading SMTP command from (103-42-216-107.fmgmyanmar.com) [103.42.216.107]:63629 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-11-20 15:36:53 H=(103-42-216-107.fmgmyanmar.com) [103.42.216.107]:21816 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.42.216.107)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.42.216.107
2019-11-21 01:36:56
103.42.216.102 attack
Autoban   103.42.216.102 AUTH/CONNECT
2019-11-18 18:25:34
103.42.253.238 attack
Nov 18 17:02:14 our-server-hostname postfix/smtpd[22155]: connect from unknown[103.42.253.238]
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov 18 17:02:22 our-server-hostname postfix/smtpd[22155]: lost connection after RCPT from unknown[103.42.253.238]
Nov 18 17:02:22 our-server-hostname postfix/smtpd[22155]: disconnect from unknown[103.42.253.238]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.42.253.238
2019-11-18 18:24:26
103.42.218.190 attackspam
Port 1433 Scan
2019-11-13 20:27:26
103.42.255.152 attack
Honeypot attack, port: 23, PTR: PTR record not found
2019-11-01 17:00:37
103.42.255.99 attack
postfix
2019-10-11 02:21:32
103.42.255.99 attack
email spam
2019-10-03 17:30:00
103.42.219.170 attackbots
Unauthorized connection attempt from IP address 103.42.219.170 on Port 445(SMB)
2019-09-30 03:11:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.2.155
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11717
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.42.2.155.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 09:33:17 CST 2022
;; MSG SIZE  rcvd: 105
Host info
155.2.42.103.in-addr.arpa domain name pointer 103-42-2-155-awcc-mobility-customer.as38742.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
155.2.42.103.in-addr.arpa	name = 103-42-2-155-awcc-mobility-customer.as38742.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
122.116.152.28 attack
Honeypot attack, port: 23, PTR: 122-116-152-28.HINET-IP.hinet.net.
2019-08-25 16:36:57
45.114.182.54 attack
Unauthorized connection attempt from IP address 45.114.182.54 on Port 445(SMB)
2019-08-25 17:31:46
62.197.207.160 attack
Honeypot attack, port: 23, PTR: ttxd160.ttx-net.sk.
2019-08-25 17:33:59
176.100.102.208 attack
Aug 24 23:08:45 tdfoods sshd\[32195\]: Invalid user drive from 176.100.102.208
Aug 24 23:08:45 tdfoods sshd\[32195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.100.102.208
Aug 24 23:08:47 tdfoods sshd\[32195\]: Failed password for invalid user drive from 176.100.102.208 port 17433 ssh2
Aug 24 23:13:09 tdfoods sshd\[343\]: Invalid user admin from 176.100.102.208
Aug 24 23:13:09 tdfoods sshd\[343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.100.102.208
2019-08-25 17:14:37
116.203.155.26 attack
Honeypot attack, port: 23, PTR: static.26.155.203.116.clients.your-server.de.
2019-08-25 17:13:20
49.234.13.249 attack
Aug 24 22:30:22 kapalua sshd\[25133\]: Invalid user victorien from 49.234.13.249
Aug 24 22:30:22 kapalua sshd\[25133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.13.249
Aug 24 22:30:24 kapalua sshd\[25133\]: Failed password for invalid user victorien from 49.234.13.249 port 51074 ssh2
Aug 24 22:35:54 kapalua sshd\[25667\]: Invalid user vitaly from 49.234.13.249
Aug 24 22:35:54 kapalua sshd\[25667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.13.249
2019-08-25 16:48:45
106.51.80.198 attack
Aug 25 08:26:25 ip-172-31-1-72 sshd\[10633\]: Invalid user russ from 106.51.80.198
Aug 25 08:26:25 ip-172-31-1-72 sshd\[10633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198
Aug 25 08:26:27 ip-172-31-1-72 sshd\[10633\]: Failed password for invalid user russ from 106.51.80.198 port 50334 ssh2
Aug 25 08:30:48 ip-172-31-1-72 sshd\[10721\]: Invalid user mickael from 106.51.80.198
Aug 25 08:30:48 ip-172-31-1-72 sshd\[10721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198
2019-08-25 17:02:35
123.201.158.194 attackspam
Aug 24 22:38:59 eddieflores sshd\[11376\]: Invalid user kk from 123.201.158.194
Aug 24 22:38:59 eddieflores sshd\[11376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.201.158.194
Aug 24 22:39:00 eddieflores sshd\[11376\]: Failed password for invalid user kk from 123.201.158.194 port 41718 ssh2
Aug 24 22:40:17 eddieflores sshd\[11552\]: Invalid user jaime from 123.201.158.194
Aug 24 22:40:17 eddieflores sshd\[11552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.201.158.194
2019-08-25 16:47:18
193.106.29.106 attackbotsspam
Port scan on 3 port(s): 9893 9894 9898
2019-08-25 17:29:53
42.7.17.177 attackbotsspam
Unauthorised access (Aug 25) SRC=42.7.17.177 LEN=40 TTL=49 ID=27578 TCP DPT=8080 WINDOW=10742 SYN
2019-08-25 17:28:38
60.191.23.58 attackbotsspam
Unauthorized connection attempt from IP address 60.191.23.58 on Port 25(SMTP)
2019-08-25 16:57:43
192.95.8.77 attackspam
Honeypot attack, port: 445, PTR: ip77.ip-192-95-8.net.
2019-08-25 16:56:22
207.154.192.152 attack
Aug 24 22:48:02 friendsofhawaii sshd\[28641\]: Invalid user testing from 207.154.192.152
Aug 24 22:48:02 friendsofhawaii sshd\[28641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.192.152
Aug 24 22:48:04 friendsofhawaii sshd\[28641\]: Failed password for invalid user testing from 207.154.192.152 port 45630 ssh2
Aug 24 22:53:20 friendsofhawaii sshd\[29150\]: Invalid user vncuser from 207.154.192.152
Aug 24 22:53:20 friendsofhawaii sshd\[29150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.192.152
2019-08-25 17:05:42
37.59.37.69 attackspambots
Aug 24 22:18:12 web1 sshd\[8594\]: Invalid user 123456 from 37.59.37.69
Aug 24 22:18:12 web1 sshd\[8594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.37.69
Aug 24 22:18:14 web1 sshd\[8594\]: Failed password for invalid user 123456 from 37.59.37.69 port 34324 ssh2
Aug 24 22:22:56 web1 sshd\[8979\]: Invalid user 123456 from 37.59.37.69
Aug 24 22:22:56 web1 sshd\[8979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.37.69
2019-08-25 16:38:58
119.29.246.165 attackspambots
Aug 24 21:59:12 sachi sshd\[24696\]: Invalid user testuser from 119.29.246.165
Aug 24 21:59:12 sachi sshd\[24696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.246.165
Aug 24 21:59:14 sachi sshd\[24696\]: Failed password for invalid user testuser from 119.29.246.165 port 35616 ssh2
Aug 24 22:04:13 sachi sshd\[25175\]: Invalid user allison from 119.29.246.165
Aug 24 22:04:13 sachi sshd\[25175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.246.165
2019-08-25 16:46:58

Recently Reported IPs

103.44.97.149 103.44.250.150 103.44.13.133 103.47.218.32
103.45.144.194 103.47.238.117 103.47.12.30 103.44.54.156
103.45.142.225 103.48.181.17 103.5.113.101 103.50.158.21
103.48.105.81 103.56.197.18 103.56.254.176 103.50.7.126
103.56.30.13 103.53.44.30 103.52.254.65 103.54.99.152