202.138.242.22

Basic Info

City: Bandung

Region: West Java

Country: Indonesia

Internet Service Provider: PT Melvar Lintasnusa

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	IP: 202.138.242.22 ASN: AS9657 Melsa-i-net AS Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 12/10/2019 6:06:23 AM UTC	2019-10-12 19:27:31
attackspam	proto=tcp . spt=55919 . dpt=25 . (Found on Blocklist de Oct 03) (497)	2019-10-05 02:03:34

Type

Details

Datetime

attackbots

IP: 202.138.242.22
ASN: AS9657 Melsa-i-net AS
Port: Simple Mail Transfer 25
Found in one or more Blacklists
Date: 12/10/2019 6:06:23 AM UTC

2019-10-12 19:27:31

attackspam

proto=tcp  .  spt=55919  .  dpt=25  .     (Found on   Blocklist de  Oct 03)     (497)

2019-10-05 02:03:34

Comments on same subnet:

IP	Type	Details	Datetime
202.138.242.111	attack	Telnetd brute force attack detected by fail2ban	2020-06-01 07:18:38
202.138.242.37	attack	1588363984 - 05/01/2020 22:13:04 Host: 202.138.242.37/202.138.242.37 Port: 445 TCP Blocked	2020-05-02 06:50:18
202.138.242.21	attack	2020-04-05T02:01:49.009163struts4.enskede.local sshd\[27803\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.21 user=root 2020-04-05T02:01:51.378143struts4.enskede.local sshd\[27803\]: Failed password for root from 202.138.242.21 port 39604 ssh2 2020-04-05T02:04:48.606620struts4.enskede.local sshd\[27872\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.21 user=root 2020-04-05T02:04:51.540384struts4.enskede.local sshd\[27872\]: Failed password for root from 202.138.242.21 port 51584 ssh2 2020-04-05T02:06:27.282474struts4.enskede.local sshd\[27914\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.21 user=root ...	2020-04-05 08:23:26
202.138.242.47	attack	Unauthorized SSH connection attempt	2019-11-08 21:20:11
202.138.242.101	attack	postfix (unknown user, SPF fail or relay access denied)	2019-10-02 07:18:29
202.138.242.6	attackspambots	Mail sent to address hacked/leaked from atari.st	2019-09-16 01:53:53
202.138.242.121	attackbots	Aug 22 22:27:14 dedicated sshd[10267]: Invalid user rso from 202.138.242.121 port 44700	2019-08-23 09:45:45
202.138.242.121	attack	Aug 18 14:14:56 XXX sshd[12187]: Invalid user testphp from 202.138.242.121 port 35348	2019-08-19 02:23:21
202.138.242.121	attackspambots	Aug 15 02:09:59 web9 sshd\[26350\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121 user=mysql Aug 15 02:10:00 web9 sshd\[26350\]: Failed password for mysql from 202.138.242.121 port 43046 ssh2 Aug 15 02:15:44 web9 sshd\[27399\]: Invalid user omsagent from 202.138.242.121 Aug 15 02:15:44 web9 sshd\[27399\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121 Aug 15 02:15:46 web9 sshd\[27399\]: Failed password for invalid user omsagent from 202.138.242.121 port 36398 ssh2	2019-08-15 20:22:52
202.138.242.121	attackspam	$f2bV_matches	2019-08-14 18:07:42
202.138.242.6	attack	Unauthorized connection attempt from IP address 202.138.242.6 on Port 25(SMTP)	2019-08-12 10:43:30
202.138.242.121	attackbots	2019-07-15T08:23:28.942435lon01.zurich-datacenter.net sshd\[22264\]: Invalid user odbc from 202.138.242.121 port 46070 2019-07-15T08:23:28.946718lon01.zurich-datacenter.net sshd\[22264\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121 2019-07-15T08:23:30.935706lon01.zurich-datacenter.net sshd\[22264\]: Failed password for invalid user odbc from 202.138.242.121 port 46070 ssh2 2019-07-15T08:29:17.459106lon01.zurich-datacenter.net sshd\[22360\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121 user=root 2019-07-15T08:29:19.693844lon01.zurich-datacenter.net sshd\[22360\]: Failed password for root from 202.138.242.121 port 45104 ssh2 ...	2019-07-15 15:06:34
202.138.242.121	attackspam	2019-07-13T16:49:51.179215abusebot-4.cloudsearch.cf sshd\[9858\]: Invalid user oracle from 202.138.242.121 port 44994	2019-07-14 01:06:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.138.242.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49638
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.138.242.22.			IN	A

;; AUTHORITY SECTION:
.			202	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100401 1800 900 604800 86400

;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 05 02:03:30 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 22.242.138.202.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 22.242.138.202.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
35.154.103.207	attack	Oct 6 22:34:18 DNS-2 sshd[15279]: User r.r from 35.154.103.207 not allowed because not listed in AllowUsers Oct 6 22:34:18 DNS-2 sshd[15279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.154.103.207 user=r.r Oct 6 22:34:19 DNS-2 sshd[15279]: Failed password for invalid user r.r from 35.154.103.207 port 35219 ssh2 Oct 6 22:34:19 DNS-2 sshd[15279]: Received disconnect from 35.154.103.207 port 35219:11: Bye Bye [preauth] Oct 6 22:34:19 DNS-2 sshd[15279]: Disconnected from 35.154.103.207 port 35219 [preauth] Oct 6 22:40:33 DNS-2 sshd[15649]: User r.r from 35.154.103.207 not allowed because not listed in AllowUsers Oct 6 22:40:33 DNS-2 sshd[15649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.154.103.207 user=r.r Oct 6 22:40:35 DNS-2 ssh .... truncated .... Oct 6 22:34:18 DNS-2 sshd[15279]: User r.r from 35.154.103.207 not allowed because not listed in AllowUsers Oct 6 2........ -------------------------------	2019-10-10 15:47:34
109.158.236.168	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/109.158.236.168/ GB - 1H : (76) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GB NAME ASN : ASN2856 IP : 109.158.236.168 CIDR : 109.144.0.0/12 PREFIX COUNT : 292 UNIQUE IP COUNT : 10658560 WYKRYTE ATAKI Z ASN2856 : 1H - 3 3H - 4 6H - 6 12H - 8 24H - 11 DateTime : 2019-10-10 05:49:52 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-10 15:51:53
81.28.107.30	attackbots	2019-10-10T05:50:07.943493stark.klein-stark.info postfix/smtpd\[5417\]: NOQUEUE: reject: RCPT from longing.stop-snore-de.com\[81.28.107.30\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ ...	2019-10-10 15:41:59
111.92.240.170	attack	Oct 9 20:53:55 eddieflores sshd\[16504\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.92.240.170 user=root Oct 9 20:53:57 eddieflores sshd\[16504\]: Failed password for root from 111.92.240.170 port 49612 ssh2 Oct 9 20:58:20 eddieflores sshd\[16846\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.92.240.170 user=root Oct 9 20:58:21 eddieflores sshd\[16846\]: Failed password for root from 111.92.240.170 port 32984 ssh2 Oct 9 21:02:41 eddieflores sshd\[17208\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.92.240.170 user=root	2019-10-10 15:17:04
106.53.94.190	attackspambots	SSH invalid-user multiple login try	2019-10-10 15:35:31
46.105.124.52	attack	Oct 10 08:58:47 SilenceServices sshd[8384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.124.52 Oct 10 08:58:49 SilenceServices sshd[8384]: Failed password for invalid user Huawei@123 from 46.105.124.52 port 58799 ssh2 Oct 10 09:04:24 SilenceServices sshd[9915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.124.52	2019-10-10 15:47:21
91.210.59.145	attackspam	xmlrpc attack	2019-10-10 15:27:14
178.60.38.58	attackspambots	Oct 10 07:39:29 sauna sshd[69905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.60.38.58 Oct 10 07:39:31 sauna sshd[69905]: Failed password for invalid user Gerard_123 from 178.60.38.58 port 47069 ssh2 ...	2019-10-10 15:22:38
51.38.125.51	attackspambots	Oct 10 05:42:24 rotator sshd\[3337\]: Invalid user !QAZ@WSX3edc from 51.38.125.51Oct 10 05:42:26 rotator sshd\[3337\]: Failed password for invalid user !QAZ@WSX3edc from 51.38.125.51 port 46344 ssh2Oct 10 05:46:35 rotator sshd\[4191\]: Invalid user Pa$$word@2019 from 51.38.125.51Oct 10 05:46:37 rotator sshd\[4191\]: Failed password for invalid user Pa$$word@2019 from 51.38.125.51 port 58590 ssh2Oct 10 05:50:36 rotator sshd\[5112\]: Invalid user ZXCVBNM!@\#$%\^\& from 51.38.125.51Oct 10 05:50:39 rotator sshd\[5112\]: Failed password for invalid user ZXCVBNM!@\#$%\^\& from 51.38.125.51 port 42596 ssh2 ...	2019-10-10 15:20:12
213.32.65.111	attackbots	2019-10-10T03:49:53.421896abusebot-2.cloudsearch.cf sshd\[11184\]: Invalid user Admin@2010 from 213.32.65.111 port 56992	2019-10-10 15:52:45
192.227.136.67	attackbotsspam	Oct 10 09:01:32 vps01 sshd[16523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.136.67 Oct 10 09:01:35 vps01 sshd[16523]: Failed password for invalid user C3nt0s2019 from 192.227.136.67 port 43306 ssh2	2019-10-10 15:18:31
103.111.86.255	attack	Oct 10 07:53:08 v22018076622670303 sshd\[1607\]: Invalid user Start@2017 from 103.111.86.255 port 42462 Oct 10 07:53:08 v22018076622670303 sshd\[1607\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.111.86.255 Oct 10 07:53:10 v22018076622670303 sshd\[1607\]: Failed password for invalid user Start@2017 from 103.111.86.255 port 42462 ssh2 ...	2019-10-10 15:43:58
60.29.241.2	attack	Oct 10 07:06:10 www sshd\[109735\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 user=root Oct 10 07:06:12 www sshd\[109735\]: Failed password for root from 60.29.241.2 port 19164 ssh2 Oct 10 07:10:06 www sshd\[109996\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 user=root ...	2019-10-10 15:24:12
202.51.74.189	attack	Oct 10 07:20:00 venus sshd\[14595\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.74.189 user=root Oct 10 07:20:02 venus sshd\[14595\]: Failed password for root from 202.51.74.189 port 36256 ssh2 Oct 10 07:25:05 venus sshd\[14691\]: Invalid user 123 from 202.51.74.189 port 48282 ...	2019-10-10 15:38:33
123.7.118.185	attack	firewall-block, port(s): 1433/tcp	2019-10-10 15:42:22

Recently Reported IPs

217.167.52.199	2.150.40.158	176.157.63.119	103.111.10.254
39.82.146.243	66.192.216.16	209.171.227.231	201.211.144.76
27.121.233.65	74.253.240.29	177.204.219.226	66.10.21.109
112.173.196.53	104.199.138.81	183.53.178.221	126.179.43.144
190.79.92.207	162.105.0.153	69.13.85.58	178.211.45.18