Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Bengaluru

Region: Karnataka

Country: India

Internet Service Provider: TelexAir Telecom Pvt Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt from IP address 103.42.75.66 on Port 445(SMB)
2020-03-06 22:57:58
attackspam
Unauthorized connection attempt from IP address 103.42.75.66 on Port 445(SMB)
2020-02-06 01:24:55
attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-21 11:24:40,746 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.42.75.66)
2019-09-22 03:58:31
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.42.75.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34110
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.42.75.66.			IN	A

;; AUTHORITY SECTION:
.			276	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092100 1800 900 604800 86400

;; Query time: 880 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 22 03:58:50 CST 2019
;; MSG SIZE  rcvd: 116

Host info
Host 66.75.42.103.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.75.42.103.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
170.80.48.15 attackbots
Unauthorized connection attempt detected from IP address 170.80.48.15 to port 2220 [J]
2020-01-19 22:05:02
120.70.99.15 attackbotsspam
Unauthorized connection attempt detected from IP address 120.70.99.15 to port 2220 [J]
2020-01-19 22:16:30
109.194.54.126 attackbotsspam
Invalid user service from 109.194.54.126 port 42108
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.194.54.126
Failed password for invalid user service from 109.194.54.126 port 42108 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.194.54.126  user=root
Failed password for root from 109.194.54.126 port 43504 ssh2
2020-01-19 22:17:11
46.191.172.49 attackbots
2020-01-19T07:46:08.0671461495-001 sshd[54610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.191.172.49
2020-01-19T07:46:08.0579811495-001 sshd[54610]: Invalid user system from 46.191.172.49 port 38664
2020-01-19T07:46:09.5230061495-001 sshd[54610]: Failed password for invalid user system from 46.191.172.49 port 38664 ssh2
2020-01-19T08:46:42.2515921495-001 sshd[56972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.191.172.49  user=root
2020-01-19T08:46:44.2591121495-001 sshd[56972]: Failed password for root from 46.191.172.49 port 38970 ssh2
2020-01-19T08:49:03.2710001495-001 sshd[57046]: Invalid user student from 46.191.172.49 port 50269
2020-01-19T08:49:03.2779531495-001 sshd[57046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.191.172.49
2020-01-19T08:49:03.2710001495-001 sshd[57046]: Invalid user student from 46.191.172.49 port 50269
2020-01-19T0
...
2020-01-19 22:06:55
198.50.177.42 attackspambots
Unauthorized connection attempt detected from IP address 198.50.177.42 to port 2220 [J]
2020-01-19 21:48:49
202.102.79.232 attackspambots
Invalid user he from 202.102.79.232 port 26579
2020-01-19 21:48:28
178.62.9.122 attack
xmlrpc attack
2020-01-19 22:00:34
13.89.34.149 attack
Web Server Attack
2020-01-19 22:03:23
118.24.158.42 attack
2020-01-19T14:06:25.078030shield sshd\[16495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.158.42  user=root
2020-01-19T14:06:27.490265shield sshd\[16495\]: Failed password for root from 118.24.158.42 port 59854 ssh2
2020-01-19T14:08:58.772066shield sshd\[17376\]: Invalid user homepage from 118.24.158.42 port 50128
2020-01-19T14:08:58.779658shield sshd\[17376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.158.42
2020-01-19T14:09:00.529886shield sshd\[17376\]: Failed password for invalid user homepage from 118.24.158.42 port 50128 ssh2
2020-01-19 22:18:45
112.118.162.110 attackbotsspam
Honeypot attack, port: 5555, PTR: n112118162110.netvigator.com.
2020-01-19 22:27:01
178.89.233.131 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-19 22:27:29
79.106.1.104 attackbots
Jan 19 13:58:16 debian-2gb-nbg1-2 kernel: \[1697984.466024\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=79.106.1.104 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=5749 PROTO=TCP SPT=8491 DPT=8000 WINDOW=1825 RES=0x00 SYN URGP=0
2020-01-19 22:28:16
40.126.120.73 attackspambots
ssh intrusion attempt
2020-01-19 22:06:05
81.95.226.55 attackbots
Automatic report - SSH Brute-Force Attack
2020-01-19 22:12:08
180.125.252.230 attackspambots
Jan 19 13:58:15 grey postfix/smtpd\[19375\]: NOQUEUE: reject: RCPT from unknown\[180.125.252.230\]: 554 5.7.1 Service unavailable\; Client host \[180.125.252.230\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=180.125.252.230\; from=\ to=\ proto=ESMTP helo=\
...
2020-01-19 22:29:09

Recently Reported IPs

193.140.153.142 104.236.176.175 150.182.47.135 222.25.46.183
178.221.251.196 36.65.181.165 61.0.250.66 144.39.214.212
221.37.160.245 249.166.238.222 50.63.248.170 241.206.243.159
177.152.91.191 151.79.200.185 151.235.240.250 166.183.99.167
187.125.101.11 119.5.226.44 190.168.89.174 183.151.148.162