103.94.1.68 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.94.120.227	attackbots	Port Scan: TCP/443	2020-10-12 02:22:06
103.94.120.227	attackspam	Port Scan: TCP/443	2020-10-11 18:12:15
103.94.121.206	attackbotsspam	20/9/12@12:58:28: FAIL: Alarm-Network address from=103.94.121.206 ...	2020-09-13 21:51:35
103.94.121.206	attackspam	20/9/12@12:58:28: FAIL: Alarm-Network address from=103.94.121.206 ...	2020-09-13 13:45:54
103.94.121.206	attack	20/9/12@12:58:28: FAIL: Alarm-Network address from=103.94.121.206 ...	2020-09-13 05:29:33
103.94.125.254	attackspambots	Aug 26 04:52:53 shivevps sshd[3849]: Bad protocol version identification '\024' from 103.94.125.254 port 58743 Aug 26 04:52:58 shivevps sshd[4410]: Bad protocol version identification '\024' from 103.94.125.254 port 58766 Aug 26 04:54:46 shivevps sshd[7972]: Bad protocol version identification '\024' from 103.94.125.254 port 59371 ...	2020-08-26 12:54:54
103.94.127.66	attackbotsspam	Attempted connection to port 80.	2020-08-24 21:23:30
103.94.135.216	attack	103.94.135.216 - - [24/Jun/2020:11:16:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1885 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.94.135.216 - - [24/Jun/2020:11:16:43 +0100] "POST /wp-login.php HTTP/1.1" 200 1868 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.94.135.216 - - [24/Jun/2020:11:16:45 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-24 18:28:45
103.94.171.218	attackbotsspam	Honeypot attack, port: 445, PTR: ip-171-218.balifiber.id.	2020-04-29 02:28:21
103.94.180.253	attack	Attack, like DDOS, Brute-Force, Port Scan, Hack, etc.	2020-04-22 15:16:28
103.94.194.173	attackbotsspam	Automatic report - Port Scan Attack	2020-04-17 17:18:39
103.94.192.88	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 05-04-2020 13:40:08.	2020-04-06 02:44:22
103.94.120.54	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-30 16:03:21
103.94.135.216	attack	103.94.135.216 - - \[26/Mar/2020:14:59:01 +0100\] "POST /wp-login.php HTTP/1.0" 200 6997 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 103.94.135.216 - - \[26/Mar/2020:14:59:03 +0100\] "POST /wp-login.php HTTP/1.0" 200 7009 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 103.94.135.216 - - \[26/Mar/2020:14:59:04 +0100\] "POST /wp-login.php HTTP/1.0" 200 7001 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-03-26 23:52:46
103.94.135.216	attackspambots	103.94.135.216 - - [25/Mar/2020:07:00:17 +0100] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.94.135.216 - - [25/Mar/2020:07:00:20 +0100] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.94.135.216 - - [25/Mar/2020:07:00:22 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-03-25 15:43:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.94.1.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.94.1.68.			IN	A

;; AUTHORITY SECTION:
.			569	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 00:34:31 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 68.1.94.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.1.94.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.232.111.165	attack	Sep 27 20:11:49 vps639187 sshd\[8009\]: Invalid user testdev from 49.232.111.165 port 43698 Sep 27 20:11:49 vps639187 sshd\[8009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.111.165 Sep 27 20:11:51 vps639187 sshd\[8009\]: Failed password for invalid user testdev from 49.232.111.165 port 43698 ssh2 ...	2020-09-28 06:56:45
218.92.0.250	attackbotsspam	Sep 28 00:41:37 ovpn sshd\[22383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root Sep 28 00:41:39 ovpn sshd\[22383\]: Failed password for root from 218.92.0.250 port 48010 ssh2 Sep 28 00:41:42 ovpn sshd\[22383\]: Failed password for root from 218.92.0.250 port 48010 ssh2 Sep 28 00:42:03 ovpn sshd\[22473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root Sep 28 00:42:04 ovpn sshd\[22473\]: Failed password for root from 218.92.0.250 port 15361 ssh2	2020-09-28 06:50:47
129.211.171.24	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-27T21:56:05Z and 2020-09-27T22:02:58Z	2020-09-28 06:42:38
178.173.159.83	attack	Listed on zen-spamhaus also barracudaCentral and abuseat.org / proto=6 . srcport=45596 . dstport=80 . (2671)	2020-09-28 06:39:31
195.154.209.94	attackbotsspam	"sipvicious";tag=3533393765393339313363340131313132383233333235	2020-09-28 06:45:51
113.170.225.97	attack	Automatic report - Port Scan Attack	2020-09-28 06:52:14
104.248.230.153	attackbots	SSH Brute-Force attacks	2020-09-28 06:27:42
222.186.180.130	attackbots	Sep 28 00:40:55 MainVPS sshd[2132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root Sep 28 00:40:57 MainVPS sshd[2132]: Failed password for root from 222.186.180.130 port 49224 ssh2 Sep 28 00:41:02 MainVPS sshd[2518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root Sep 28 00:41:04 MainVPS sshd[2518]: Failed password for root from 222.186.180.130 port 23156 ssh2 Sep 28 00:41:10 MainVPS sshd[2999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root Sep 28 00:41:12 MainVPS sshd[2999]: Failed password for root from 222.186.180.130 port 46099 ssh2 ...	2020-09-28 06:48:45
54.187.176.230	attack	8080/tcp 6380/tcp... [2020-09-26]7pkt,3pt.(tcp)	2020-09-28 06:48:13
121.122.81.161	attackspam	"Unauthorized connection attempt on SSHD detected"	2020-09-28 06:55:51
168.63.16.141	attack	Invalid user 125 from 168.63.16.141 port 39366	2020-09-28 06:51:06
192.241.218.53	attackspambots	Sep 27 12:58:11 markkoudstaal sshd[27986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.218.53 Sep 27 12:58:13 markkoudstaal sshd[27986]: Failed password for invalid user ubuntu from 192.241.218.53 port 39054 ssh2 Sep 27 13:07:58 markkoudstaal sshd[30697]: Failed password for root from 192.241.218.53 port 47248 ssh2 ...	2020-09-28 06:49:11
182.116.97.36	attackbotsspam	23/tcp [2020-09-26]1pkt	2020-09-28 06:42:02
70.24.111.151	attack	5555/tcp [2020-09-26]1pkt	2020-09-28 06:37:02
36.88.234.37	attack	Automatic report - Port Scan Attack	2020-09-28 06:51:50

Recently Reported IPs

103.94.112.117	103.94.112.114	103.94.112.13	95.191.50.222
103.94.120.26	103.94.120.154	103.94.112.46	103.94.121.130
103.20.187.100	103.94.112.44	103.94.112.50	103.94.121.186
103.94.121.122	103.94.112.90	103.94.112.147	103.94.121.66
103.94.122.2	103.94.122.14	103.94.122.110	103.94.122.242