66.96.237.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT. Eka Mas Republik

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Feb 10 04:48:37 IngegnereFirenze sshd[18979]: Did not receive identification string from 66.96.237.142 port 59589 ...	2020-02-10 20:51:55

Comments on same subnet:

IP	Type	Details	Datetime
66.96.237.28	spambotsattack	Wordpress malicious attack	2024-03-13 11:31:45
66.96.237.69	attack	Unauthorized connection attempt from IP address 66.96.237.69 on Port 445(SMB)	2020-09-01 19:32:51
66.96.237.96	attack	Port scan on 1 port(s): 8291	2020-03-11 13:51:52
66.96.237.91	attackspam	unauthorized connection attempt	2020-02-04 17:47:12
66.96.237.133	attackbotsspam	Honeypot attack, port: 445, PTR: host-66-96-237-133.myrepublic.co.id.	2019-12-24 19:39:50
66.96.237.159	attackspambots	Unauthorized connection attempt from IP address 66.96.237.159 on Port 445(SMB)	2019-11-13 22:19:37
66.96.237.85	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 02-10-2019 04:50:27.	2019-10-02 15:33:23
66.96.237.137	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-09-01 18:26:45
66.96.237.145	attackbotsspam	[SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08050931)	2019-08-05 18:51:26
66.96.237.133	attack	19/7/29@02:45:20: FAIL: Alarm-Intrusion address from=66.96.237.133 ...	2019-07-29 20:13:11
66.96.237.58	attackspam	Automatic report - Web App Attack	2019-06-24 03:52:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.96.237.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14670
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.96.237.142.			IN	A

;; AUTHORITY SECTION:
.			271	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021000 1800 900 604800 86400

;; Query time: 171 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 20:51:50 CST 2020
;; MSG SIZE  rcvd: 117

Host info

142.237.96.66.in-addr.arpa domain name pointer host-66-96-237-142.myrepublic.co.id.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.237.96.66.in-addr.arpa	name = host-66-96-237-142.myrepublic.co.id.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.163.113.85	attackbotsspam	445/tcp 445/tcp 445/tcp... [2019-07-01/08-27]16pkt,1pt.(tcp)	2019-08-28 12:08:01
49.88.112.73	attackspambots	2019-08-28T04:03:55.745252abusebot-3.cloudsearch.cf sshd\[27820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.73 user=root	2019-08-28 12:04:55
125.227.220.138	attack	SMB Server BruteForce Attack	2019-08-28 12:22:39
173.255.221.25	attackspambots	Received: from nkxw.hongyaxian.top (173.255.221.25) Date: Mon, 26 Aug 2019 07:18:48 +0200 Return-Path: b_____8@hongyaxian.top From: Sunglasses Outlet Reply-to: Sunglasses Outlet Subject: Sunglasses Clearance Up To 80% OFF! Message-ID: <5_____e@localhost> X-Mailer: Email Sending System Check out the best deals from your favorite stores! Today's Special Deals Sunglasses Clearance Hot Sale! sunglasses Summer Sunglasses HotSale! All 80% Off Select Sunglasses Styles Expires Soon! Get Deal See More Deals facebooktwitterg+ pinterest To stop receiving these emails unsubscribe Some of these deals feature products with limited quantities. Prices and quantities may be subject to change by retailers at their discretion. Disclaimer: The CAN-SPAM Act of 2003 establishes requirements for those who send commercial email, spells out penalties for spammers and companies whose products are advertised in spam if they violate the law, and gives	2019-08-28 12:18:10
70.39.21.131	attack	5431/tcp 5431/tcp [2019-07-04/08-27]2pkt	2019-08-28 12:31:15
218.147.235.170	attackbotsspam	Aug 27 22:18:22 web2 sshd[19427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.147.235.170 Aug 27 22:18:24 web2 sshd[19427]: Failed password for invalid user NetLinx from 218.147.235.170 port 35841 ssh2	2019-08-28 12:23:12
159.192.137.24	attackspam	445/tcp 445/tcp 445/tcp... [2019-07-08/08-27]11pkt,1pt.(tcp)	2019-08-28 12:02:45
81.24.82.33	attackbotsspam	proto=tcp . spt=57075 . dpt=25 . (listed on Blocklist de Aug 27) (241)	2019-08-28 11:57:15
183.99.77.161	attackbotsspam	Aug 28 05:25:22 ArkNodeAT sshd\[18457\]: Invalid user localhost from 183.99.77.161 Aug 28 05:25:22 ArkNodeAT sshd\[18457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.99.77.161 Aug 28 05:25:24 ArkNodeAT sshd\[18457\]: Failed password for invalid user localhost from 183.99.77.161 port 23493 ssh2	2019-08-28 12:00:33
220.167.89.23	attackspam	445/tcp 445/tcp 445/tcp... [2019-06-27/08-27]14pkt,1pt.(tcp)	2019-08-28 12:03:38
118.130.42.218	attackbots	445/tcp 445/tcp 445/tcp... [2019-06-27/08-27]14pkt,1pt.(tcp)	2019-08-28 12:20:09
194.4.100.6	attackspam	445/tcp 445/tcp 445/tcp... [2019-07-11/08-27]9pkt,1pt.(tcp)	2019-08-28 11:50:46
41.224.59.78	attackbotsspam	Aug 28 00:15:50 tuxlinux sshd[3258]: Invalid user spotlight from 41.224.59.78 port 46206 Aug 28 00:15:50 tuxlinux sshd[3258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.224.59.78 Aug 28 00:15:50 tuxlinux sshd[3258]: Invalid user spotlight from 41.224.59.78 port 46206 Aug 28 00:15:50 tuxlinux sshd[3258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.224.59.78 Aug 28 00:15:50 tuxlinux sshd[3258]: Invalid user spotlight from 41.224.59.78 port 46206 Aug 28 00:15:50 tuxlinux sshd[3258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.224.59.78 Aug 28 00:15:52 tuxlinux sshd[3258]: Failed password for invalid user spotlight from 41.224.59.78 port 46206 ssh2 ...	2019-08-28 12:00:14
23.228.100.114	attackbots	445/tcp 445/tcp 445/tcp... [2019-06-29/08-27]13pkt,1pt.(tcp)	2019-08-28 12:19:26
103.236.132.174	attackspambots	445/tcp 445/tcp 445/tcp... [2019-07-12/08-27]4pkt,1pt.(tcp)	2019-08-28 12:28:28

Recently Reported IPs

159.0.252.195	36.79.60.70	35.200.206.240	49.207.5.243
183.91.3.214	213.178.54.106	92.152.108.38	111.241.111.78
36.69.195.213	192.248.9.141	177.189.209.143	34.239.179.6
191.243.242.92	87.255.81.5	1.64.60.183	176.27.109.44
123.19.170.68	122.176.61.125	122.53.238.198	122.53.135.203