158.140.187.242

Basic Info

City: Bogor

Region: Jawa Barat

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
158.140.187.50	attack	C1,WP GET /wp-login.php	2020-03-18 16:22:25
158.140.187.194	attack	[Sat Dec 14 13:27:15.460795 2019] [ssl:info] [pid 27561:tid 139829706716928] [client 158.140.187.194:63419] AH02033: No hostname was provided via SNI for a name based virtual host ...	2019-12-14 17:10:17
158.140.187.209	attackspam	Sniffing for wp-login	2019-11-30 20:58:22
158.140.187.213	attackspam	Oct 16 13:16:23 amit sshd\[29883\]: Invalid user azure from 158.140.187.213 Oct 16 13:16:23 amit sshd\[29883\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.140.187.213 Oct 16 13:16:24 amit sshd\[29883\]: Failed password for invalid user azure from 158.140.187.213 port 49800 ssh2 ...	2019-10-17 01:57:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.140.187.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50676
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;158.140.187.242.		IN	A

;; AUTHORITY SECTION:
.			88	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023060600 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 06 15:36:31 CST 2023
;; MSG SIZE  rcvd: 108

Host info

242.187.140.158.in-addr.arpa domain name pointer host-158.140.187-242.myrepublic.co.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.187.140.158.in-addr.arpa	name = host-158.140.187-242.myrepublic.co.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
69.94.158.99	attackspam	Apr 4 05:54:24 mail.srvfarm.net postfix/smtpd[3108039]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 05:56:32 mail.srvfarm.net postfix/smtpd[3111169]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 06:00:00 mail.srvfarm.net postfix/smtpd[3112533]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 06:04:05 mail.srvfarm.net postfix/smtpd[3125820]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.1.8 : Sender	2020-04-04 15:56:18
175.6.148.219	attackspam	Apr 4 10:12:45 xeon sshd[63734]: Failed password for invalid user xgues from 175.6.148.219 port 37240 ssh2	2020-04-04 16:32:34
216.245.196.222	attackspam	[2020-04-04 04:11:03] NOTICE[12114][C-00001346] chan_sip.c: Call from '' (216.245.196.222:5071) to extension '1011442037695493' rejected because extension not found in context 'public'. [2020-04-04 04:11:03] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-04T04:11:03.474-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1011442037695493",SessionID="0x7f020c0b1098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.245.196.222/5071",ACLName="no_extension_match" [2020-04-04 04:15:10] NOTICE[12114][C-0000134c] chan_sip.c: Call from '' (216.245.196.222:5071) to extension '00442037695493' rejected because extension not found in context 'public'. [2020-04-04 04:15:10] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-04T04:15:10.777-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00442037695493",SessionID="0x7f020c04b958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IP ...	2020-04-04 16:17:02
182.61.133.172	attackspambots	$f2bV_matches	2020-04-04 16:30:30
119.29.107.55	attackbotsspam	Invalid user yb from 119.29.107.55 port 35294	2020-04-04 16:41:23
148.235.82.68	attackspambots	SSH login attempts.	2020-04-04 16:35:43
222.186.180.17	attackspambots	Apr 4 04:07:33 NPSTNNYC01T sshd[14883]: Failed password for root from 222.186.180.17 port 13258 ssh2 Apr 4 04:07:46 NPSTNNYC01T sshd[14883]: Failed password for root from 222.186.180.17 port 13258 ssh2 Apr 4 04:07:46 NPSTNNYC01T sshd[14883]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 13258 ssh2 [preauth] ...	2020-04-04 16:09:10
192.241.201.182	attack	Tried sshing with brute force.	2020-04-04 16:25:07
140.143.130.52	attack	Apr 4 10:44:03 server sshd\[17153\]: Invalid user cl from 140.143.130.52 Apr 4 10:44:03 server sshd\[17153\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.130.52 Apr 4 10:44:05 server sshd\[17153\]: Failed password for invalid user cl from 140.143.130.52 port 58426 ssh2 Apr 4 11:11:49 server sshd\[25058\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.130.52 user=root Apr 4 11:11:51 server sshd\[25058\]: Failed password for root from 140.143.130.52 port 48532 ssh2 ...	2020-04-04 16:37:41
43.242.135.130	attackbotsspam	5x Failed Password	2020-04-04 16:05:41
170.231.83.26	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-04-04 16:01:43
178.165.72.177	attackbotsspam	(sshd) Failed SSH login from 178.165.72.177 (UA/Ukraine/178-165-72-177-kh.maxnet.ua): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 4 09:24:28 ubnt-55d23 sshd[14111]: Invalid user admin from 178.165.72.177 port 37594 Apr 4 09:24:31 ubnt-55d23 sshd[14111]: Failed password for invalid user admin from 178.165.72.177 port 37594 ssh2	2020-04-04 16:17:54
106.12.57.47	attack	Apr 4 07:26:07 tuxlinux sshd[61947]: Invalid user git from 106.12.57.47 port 50616 Apr 4 07:26:07 tuxlinux sshd[61947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.57.47 Apr 4 07:26:07 tuxlinux sshd[61947]: Invalid user git from 106.12.57.47 port 50616 Apr 4 07:26:07 tuxlinux sshd[61947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.57.47 Apr 4 07:26:07 tuxlinux sshd[61947]: Invalid user git from 106.12.57.47 port 50616 Apr 4 07:26:07 tuxlinux sshd[61947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.57.47 Apr 4 07:26:09 tuxlinux sshd[61947]: Failed password for invalid user git from 106.12.57.47 port 50616 ssh2 ...	2020-04-04 16:48:30
122.51.241.12	attack	Apr 4 04:01:04 game-panel sshd[13529]: Failed password for root from 122.51.241.12 port 36600 ssh2 Apr 4 04:03:49 game-panel sshd[13616]: Failed password for root from 122.51.241.12 port 36832 ssh2	2020-04-04 16:16:27
106.12.172.205	attackspambots	Apr 4 10:35:11 * sshd[31351]: Failed password for root from 106.12.172.205 port 47776 ssh2 Apr 4 10:38:02 * sshd[31703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.172.205	2020-04-04 16:47:57

Recently Reported IPs

140.116.124.62	140.116.7.245	216.47.143.105	167.249.105.18
132.248.246.231	158.49.7.12	140.116.84.176	140.116.247.30
14.139.211.147	140.116.64.198	140.116.113.23	140.116.165.22
140.116.20.152	140.117.197.55	140.116.245.157	195.195.38.1
140.116.103.70	140.116.103.33	165.190.52.24	94.134.249.247