Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
103.42.255.245 attackspambots
Automatic report - Port Scan Attack
2020-10-13 03:50:52
103.42.255.245 attack
Automatic report - Port Scan Attack
2020-10-12 19:25:19
103.42.255.152 attack
Honeypot attack, port: 23, PTR: PTR record not found
2019-11-01 17:00:37
103.42.255.99 attack
postfix
2019-10-11 02:21:32
103.42.255.99 attack
email spam
2019-10-03 17:30:00
103.42.255.104 attackspam
SPF Fail sender not permitted to send mail for @2lmn.com / Sent mail to target address hacked/leaked from abandonia in 2016
2019-09-27 20:12:03
103.42.255.99 attackspam
"Account brute force using dictionary attack against Exchange Online"
2019-08-06 07:53:13
103.42.255.104 attackbots
"Account brute force using dictionary attack against Exchange Online"
2019-08-06 07:52:55
103.42.255.81 attack
Jul  8 10:54:05 our-server-hostname postfix/smtpd[16166]: connect from unknown[103.42.255.81]
Jul  8 10:55:43 our-server-hostname postfix/smtpd[16166]: lost connection after MAIL from unknown[103.42.255.81]
Jul  8 10:55:43 our-server-hostname postfix/smtpd[16166]: disconnect from unknown[103.42.255.81]
Jul  8 12:00:27 our-server-hostname postfix/smtpd[12782]: connect from unknown[103.42.255.81]
Jul x@x
Jul x@x
Jul x@x
Jul  8 12:00:33 our-server-hostname postfix/smtpd[12782]: lost connection after RCPT from unknown[103.42.255.81]
Jul  8 12:00:33 our-server-hostname postfix/smtpd[12782]: disconnect from unknown[103.42.255.81]
Jul  8 15:44:25 our-server-hostname postfix/smtpd[15940]: connect from unknown[103.42.255.81]
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul  8 15:44:45 our-server-hostname postfix/smtpd[15940]: lost connection after RCPT from unknown[103.42.255.81]
Jul  8 15........
-------------------------------
2019-07-08 17:57:11
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.255.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.42.255.66.			IN	A

;; AUTHORITY SECTION:
.			225	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 18:08:00 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 66.255.42.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.255.42.103.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.134.232.118 attackspambots
Unauthorized connection attempt from IP address 185.134.232.118 on Port 445(SMB)
2020-09-20 06:30:33
65.49.20.72 attackbotsspam
Found on   CINS badguys     / proto=17  .  srcport=45231  .  dstport=443  .     (2306)
2020-09-20 06:28:32
37.34.245.237 attack
Found on   CINS badguys     / proto=6  .  srcport=64414  .  dstport=23  .     (2304)
2020-09-20 06:34:09
104.206.128.34 attackspambots
 TCP (SYN) 104.206.128.34:56046 -> port 23, len 44
2020-09-20 06:33:39
45.129.33.16 attackspam
ET DROP Dshield Block Listed Source group 1 - port: 18022 proto: tcp cat: Misc Attackbytes: 60
2020-09-20 06:30:09
164.132.47.139 attackbots
Sep 20 00:22:11 vm2 sshd[19242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.47.139
Sep 20 00:22:12 vm2 sshd[19242]: Failed password for invalid user ubuntu from 164.132.47.139 port 32918 ssh2
...
2020-09-20 06:54:22
85.209.0.135 attackspam
port scan and connect, tcp 3128 (squid-http)
2020-09-20 06:26:28
162.243.145.195 attack
162.243.145.195 - - \[19/Sep/2020:22:59:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 8786 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[19/Sep/2020:22:59:20 +0200\] "POST /wp-login.php HTTP/1.0" 200 8612 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[19/Sep/2020:22:59:22 +0200\] "POST /wp-login.php HTTP/1.0" 200 8607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-20 06:39:46
117.207.214.144 attackbotsspam
1600534877 - 09/19/2020 19:01:17 Host: 117.207.214.144/117.207.214.144 Port: 445 TCP Blocked
...
2020-09-20 06:58:14
116.49.143.229 attack
Brute-force attempt banned
2020-09-20 06:44:52
183.178.39.97 attackbotsspam
Unauthorized connection attempt from IP address 183.178.39.97 on Port 445(SMB)
2020-09-20 06:23:58
111.72.194.75 attack
Sep 19 20:44:14 srv01 postfix/smtpd\[6186\]: warning: unknown\[111.72.194.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 19 20:44:26 srv01 postfix/smtpd\[6186\]: warning: unknown\[111.72.194.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 19 20:44:42 srv01 postfix/smtpd\[6186\]: warning: unknown\[111.72.194.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 19 20:45:01 srv01 postfix/smtpd\[6186\]: warning: unknown\[111.72.194.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 19 20:45:12 srv01 postfix/smtpd\[6186\]: warning: unknown\[111.72.194.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-20 06:53:45
211.112.18.37 attackbots
Invalid user sebastien from 211.112.18.37 port 52902
2020-09-20 06:42:32
223.17.86.235 attack
Sep 19 19:00:58 sip sshd[17219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.86.235
Sep 19 19:00:59 sip sshd[17221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.86.235
Sep 19 19:01:01 sip sshd[17219]: Failed password for invalid user netman from 223.17.86.235 port 41258 ssh2
2020-09-20 06:55:46
223.17.129.97 attackspambots
Brute-force attempt banned
2020-09-20 06:36:21

Recently Reported IPs

103.42.254.96 103.42.255.68 103.42.255.72 103.42.255.70
101.108.191.142 103.42.255.74 103.42.255.78 103.42.255.86
103.42.255.85 103.42.42.41 103.42.40.98 103.42.40.10
103.42.42.53 103.42.68.38 103.42.58.148 103.42.42.49
103.42.85.33 103.42.74.170 103.42.72.234 103.42.85.46