103.42.255.68 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.42.255.245	attackspambots	Automatic report - Port Scan Attack	2020-10-13 03:50:52
103.42.255.245	attack	Automatic report - Port Scan Attack	2020-10-12 19:25:19
103.42.255.152	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-11-01 17:00:37
103.42.255.99	attack	postfix	2019-10-11 02:21:32
103.42.255.99	attack	email spam	2019-10-03 17:30:00
103.42.255.104	attackspam	SPF Fail sender not permitted to send mail for @2lmn.com / Sent mail to target address hacked/leaked from abandonia in 2016	2019-09-27 20:12:03
103.42.255.99	attackspam	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 07:53:13
103.42.255.104	attackbots	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 07:52:55
103.42.255.81	attack	Jul 8 10:54:05 our-server-hostname postfix/smtpd[16166]: connect from unknown[103.42.255.81] Jul 8 10:55:43 our-server-hostname postfix/smtpd[16166]: lost connection after MAIL from unknown[103.42.255.81] Jul 8 10:55:43 our-server-hostname postfix/smtpd[16166]: disconnect from unknown[103.42.255.81] Jul 8 12:00:27 our-server-hostname postfix/smtpd[12782]: connect from unknown[103.42.255.81] Jul x@x Jul x@x Jul x@x Jul 8 12:00:33 our-server-hostname postfix/smtpd[12782]: lost connection after RCPT from unknown[103.42.255.81] Jul 8 12:00:33 our-server-hostname postfix/smtpd[12782]: disconnect from unknown[103.42.255.81] Jul 8 15:44:25 our-server-hostname postfix/smtpd[15940]: connect from unknown[103.42.255.81] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul 8 15:44:45 our-server-hostname postfix/smtpd[15940]: lost connection after RCPT from unknown[103.42.255.81] Jul 8 15........ -------------------------------	2019-07-08 17:57:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.255.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25813
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.42.255.68.			IN	A

;; AUTHORITY SECTION:
.			225	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 18:08:00 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 68.255.42.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.255.42.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.99.6.65	attackspam	Dec 22 01:09:07 gw1 sshd[16161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.65 Dec 22 01:09:09 gw1 sshd[16161]: Failed password for invalid user webadmin from 138.99.6.65 port 44790 ssh2 ...	2019-12-22 04:18:03
37.187.60.182	attack	SSH bruteforce	2019-12-22 03:55:08
124.235.171.114	attack	Dec 21 19:46:15 hosting sshd[32245]: Invalid user krysko from 124.235.171.114 port 15715 ...	2019-12-22 04:05:28
217.182.77.186	attackbots	Dec 21 22:42:52 server sshd\[14096\]: Invalid user jack from 217.182.77.186 Dec 21 22:42:52 server sshd\[14096\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.ip-217-182-77.eu Dec 21 22:42:54 server sshd\[14096\]: Failed password for invalid user jack from 217.182.77.186 port 57500 ssh2 Dec 21 22:54:07 server sshd\[16993\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.ip-217-182-77.eu user=root Dec 21 22:54:09 server sshd\[16993\]: Failed password for root from 217.182.77.186 port 39602 ssh2 ...	2019-12-22 04:11:27
63.240.240.74	attack	Dec 21 19:12:29 game-panel sshd[6050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.240.240.74 Dec 21 19:12:31 game-panel sshd[6050]: Failed password for invalid user vahary from 63.240.240.74 port 52873 ssh2 Dec 21 19:18:07 game-panel sshd[6344]: Failed password for daemon from 63.240.240.74 port 55813 ssh2	2019-12-22 03:54:36
185.80.128.2	attackspam	Attempts against Pop3/IMAP	2019-12-22 03:56:50
47.90.62.250	attack	SMB Server BruteForce Attack	2019-12-22 04:08:05
182.135.65.186	attackbots	Dec 21 15:12:04 TORMINT sshd\[17997\]: Invalid user ts3bot1 from 182.135.65.186 Dec 21 15:12:04 TORMINT sshd\[17997\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.135.65.186 Dec 21 15:12:06 TORMINT sshd\[17997\]: Failed password for invalid user ts3bot1 from 182.135.65.186 port 50208 ssh2 ...	2019-12-22 04:21:43
192.99.151.33	attackspambots	Dec 21 20:41:43 MK-Soft-VM7 sshd[15695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.151.33 Dec 21 20:41:44 MK-Soft-VM7 sshd[15695]: Failed password for invalid user 12345admin from 192.99.151.33 port 42508 ssh2 ...	2019-12-22 04:08:28
193.112.16.245	attackbotsspam	$f2bV_matches	2019-12-22 04:15:29
218.106.154.114	attackspam	firewall-block, port(s): 8087/tcp	2019-12-22 04:07:00
118.24.81.234	attackspambots	Invalid user admin from 118.24.81.234 port 35752 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.81.234 Failed password for invalid user admin from 118.24.81.234 port 35752 ssh2 Invalid user wwwrun from 118.24.81.234 port 56228 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.81.234	2019-12-22 04:04:32
210.74.11.97	attackbots	$f2bV_matches	2019-12-22 04:07:21
125.64.94.212	attackbotsspam	Dec 21 19:44:26 debian-2gb-nbg1-2 kernel: \[606622.124258\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=125.64.94.212 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=46262 DPT=1720 WINDOW=65535 RES=0x00 SYN URGP=0	2019-12-22 04:16:04
92.50.38.98	attackbotsspam	2019-12-21 12:43:11 H=(titancpa.com) [92.50.38.98]:57433 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-12-21 12:43:12 H=(titancpa.com) [92.50.38.98]:57433 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-12-21 12:43:12 H=(titancpa.com) [92.50.38.98]:57433 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-12-22 03:56:16

Recently Reported IPs

103.42.255.66	103.42.255.72	103.42.255.70	101.108.191.142
103.42.255.74	103.42.255.78	103.42.255.86	103.42.255.85
103.42.42.41	103.42.40.98	103.42.40.10	103.42.42.53
103.42.68.38	103.42.58.148	103.42.42.49	103.42.85.33
103.42.74.170	103.42.72.234	103.42.85.46	101.108.191.144