140.0.66.245 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT. First Media TBK

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	2020-07-16 08:43:31.116203-0500 localhost smtpd[93618]: NOQUEUE: reject: RCPT from unknown[140.0.66.245]: 554 5.7.1 Service unavailable; Client host [140.0.66.245] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/140.0.66.245; from= to= proto=ESMTP helo=	2020-07-17 00:11:11

Type

Details

Datetime

attack

2020-07-16 08:43:31.116203-0500  localhost smtpd[93618]: NOQUEUE: reject: RCPT from unknown[140.0.66.245]: 554 5.7.1 Service unavailable; Client host [140.0.66.245] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/140.0.66.245; from= to= proto=ESMTP helo=

2020-07-17 00:11:11

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.0.66.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.0.66.245.			IN	A

;; AUTHORITY SECTION:
.			244	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071601 1800 900 604800 86400

;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 17 00:11:04 CST 2020
;; MSG SIZE  rcvd: 116

Host info

245.66.0.140.in-addr.arpa domain name pointer fm-dyn-140-0-66-245.fast.net.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
245.66.0.140.in-addr.arpa	name = fm-dyn-140-0-66-245.fast.net.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
144.217.248.6	attackspam	Port Scan: TCP/445	2019-09-10 17:46:00
58.49.13.254	attackspam	Sep 10 10:58:16 SilenceServices sshd[23410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.49.13.254 Sep 10 10:58:18 SilenceServices sshd[23410]: Failed password for invalid user qwe123 from 58.49.13.254 port 35971 ssh2 Sep 10 11:02:24 SilenceServices sshd[25003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.49.13.254	2019-09-10 17:11:07
78.87.194.65	attack	Port Scan: TCP/23	2019-09-10 17:30:04
104.248.148.34	attack	2019-09-10T08:55:33.402275abusebot-8.cloudsearch.cf sshd\[23044\]: Invalid user developer from 104.248.148.34 port 37844	2019-09-10 17:18:16
169.47.60.66	attackbotsspam	Port Scan: TCP/445	2019-09-10 17:25:45
66.199.44.52	attackbotsspam	Port Scan: UDP/49153	2019-09-10 17:54:59
91.66.209.174	attackspam	Sep 10 10:29:28 nextcloud sshd\[20000\]: Invalid user 111111 from 91.66.209.174 Sep 10 10:29:28 nextcloud sshd\[20000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.66.209.174 Sep 10 10:29:31 nextcloud sshd\[20000\]: Failed password for invalid user 111111 from 91.66.209.174 port 51900 ssh2 ...	2019-09-10 17:07:34
174.79.56.106	attackspambots	Port Scan: UDP/137	2019-09-10 17:41:33
71.11.80.218	attackbots	Port Scan: UDP/137	2019-09-10 17:54:12
157.245.4.171	attackspambots	Sep 9 22:59:20 hiderm sshd\[27559\]: Invalid user guest from 157.245.4.171 Sep 9 22:59:20 hiderm sshd\[27559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.4.171 Sep 9 22:59:22 hiderm sshd\[27559\]: Failed password for invalid user guest from 157.245.4.171 port 45200 ssh2 Sep 9 23:05:28 hiderm sshd\[28167\]: Invalid user sammy from 157.245.4.171 Sep 9 23:05:28 hiderm sshd\[28167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.4.171	2019-09-10 17:12:11
63.175.159.27	attack	Sep 10 03:35:18 MK-Soft-VM6 sshd\[16175\]: Invalid user postgres from 63.175.159.27 port 33478 Sep 10 03:35:18 MK-Soft-VM6 sshd\[16175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.175.159.27 Sep 10 03:35:20 MK-Soft-VM6 sshd\[16175\]: Failed password for invalid user postgres from 63.175.159.27 port 33478 ssh2 ...	2019-09-10 17:03:35
84.220.40.205	attackbotsspam	Port Scan: TCP/5555	2019-09-10 17:29:28
162.243.58.222	attack	Sep 10 04:54:50 ny01 sshd[10475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.58.222 Sep 10 04:54:52 ny01 sshd[10475]: Failed password for invalid user ftp_user from 162.243.58.222 port 47264 ssh2 Sep 10 05:00:38 ny01 sshd[11994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.58.222	2019-09-10 17:05:39
196.52.43.64	attack	Port Scan: TCP/139	2019-09-10 17:38:48
138.99.109.134	attackbots	Port Scan: TCP/34567	2019-09-10 17:46:55

Recently Reported IPs

156.96.156.142	219.135.139.130	185.220.34.249	179.188.7.181
51.195.148.121	35.158.98.178	126.200.60.190	182.61.26.155
104.244.78.107	79.131.122.141	47.240.168.184	225.97.255.78
157.245.43.135	94.177.201.50	167.89.88.111	79.143.181.249
92.38.148.51	2001:41d0:8:d1e0::	91.200.160.180	35.214.132.157