City: La Crosse
Region: Wisconsin
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 138.49.0.0 - 138.49.255.255
CIDR: 138.49.0.0/16
NetName: UWLAX
NetHandle: NET-138-49-0-0-1
Parent: NET138 (NET-138-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: University of Wisconsin-La Crosse (UNIVER-287-Z)
RegDate: 1990-02-06
Updated: 2025-02-28
Ref: https://rdap.arin.net/registry/ip/138.49.0.0
OrgName: University of Wisconsin-La Crosse
OrgId: UNIVER-287-Z
Address: 1725 State Street
City: La Crosse
StateProv: WI
PostalCode: 54601
Country: US
RegDate: 2024-02-14
Updated: 2024-02-15
Ref: https://rdap.arin.net/registry/entity/UNIVER-287-Z
OrgTechHandle: BORNH19-ARIN
OrgTechName: Bornheimer, Matthew
OrgTechPhone: +1-608-785-5473
OrgTechEmail: mbornheimer@uwlax.edu
OrgTechRef: https://rdap.arin.net/registry/entity/BORNH19-ARIN
OrgAbuseHandle: BORNH19-ARIN
OrgAbuseName: Bornheimer, Matthew
OrgAbusePhone: +1-608-785-5473
OrgAbuseEmail: mbornheimer@uwlax.edu
OrgAbuseRef: https://rdap.arin.net/registry/entity/BORNH19-ARIN
RTechHandle: BORNH19-ARIN
RTechName: Bornheimer, Matthew
RTechPhone: +1-608-785-5473
RTechEmail: mbornheimer@uwlax.edu
RTechRef: https://rdap.arin.net/registry/entity/BORNH19-ARIN
RNOCHandle: BORNH19-ARIN
RNOCName: Bornheimer, Matthew
RNOCPhone: +1-608-785-5473
RNOCEmail: mbornheimer@uwlax.edu
RNOCRef: https://rdap.arin.net/registry/entity/BORNH19-ARIN
RAbuseHandle: BORNH19-ARIN
RAbuseName: Bornheimer, Matthew
RAbusePhone: +1-608-785-5473
RAbuseEmail: mbornheimer@uwlax.edu
RAbuseRef: https://rdap.arin.net/registry/entity/BORNH19-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.49.40.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62322
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.49.40.221. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042700 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 27 18:51:15 CST 2026
;; MSG SIZE rcvd: 106Host 221.40.49.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 221.40.49.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.82.214.218 | attackbotsspam | Mar 19 13:57:01 ns382633 sshd\[4586\]: Invalid user oracle from 222.82.214.218 port 6953 Mar 19 13:57:01 ns382633 sshd\[4586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.82.214.218 Mar 19 13:57:02 ns382633 sshd\[4586\]: Failed password for invalid user oracle from 222.82.214.218 port 6953 ssh2 Mar 19 14:00:17 ns382633 sshd\[5460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.82.214.218 user=root Mar 19 14:00:20 ns382633 sshd\[5460\]: Failed password for root from 222.82.214.218 port 6955 ssh2 |
2020-03-20 01:39:00 |
| 162.243.132.53 | attackbots | scans once in preceeding hours on the ports (in chronological order) 2525 resulting in total of 57 scans from 162.243.0.0/16 block. |
2020-03-20 01:59:01 |
| 123.207.226.219 | attack | Mar 19 18:38:47 lnxmysql61 sshd[24550]: Failed password for root from 123.207.226.219 port 36734 ssh2 Mar 19 18:48:22 lnxmysql61 sshd[25883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.226.219 Mar 19 18:48:24 lnxmysql61 sshd[25883]: Failed password for invalid user redmine from 123.207.226.219 port 36786 ssh2 |
2020-03-20 02:01:54 |
| 198.98.60.141 | attack | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-03-20 01:42:33 |
| 82.194.18.230 | attackbots | Time: Thu Mar 19 09:32:13 2020 -0300 IP: 82.194.18.230 (AZ/Azerbaijan/-) Failures: 20 (WordPressBruteForcePOST) Interval: 3600 seconds Blocked: Permanent Block |
2020-03-20 02:03:51 |
| 122.14.228.229 | attackspam | Mar 19 13:55:34 srv206 sshd[19194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.14.228.229 user=root Mar 19 13:55:36 srv206 sshd[19194]: Failed password for root from 122.14.228.229 port 37028 ssh2 Mar 19 14:00:00 srv206 sshd[19268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.14.228.229 user=root Mar 19 14:00:01 srv206 sshd[19268]: Failed password for root from 122.14.228.229 port 38228 ssh2 ... |
2020-03-20 02:17:16 |
| 111.65.71.3 | attackspam | Unauthorized connection attempt from IP address 111.65.71.3 on Port 445(SMB) |
2020-03-20 01:55:06 |
| 181.49.176.36 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-20 02:05:15 |
| 162.243.128.36 | attackbots | firewall-block, port(s): 5432/tcp |
2020-03-20 02:01:37 |
| 128.14.133.58 | attack | Unauthorized connection attempt detected from IP address 128.14.133.58 |
2020-03-20 01:42:10 |
| 200.105.234.131 | attack | fail2ban -- 200.105.234.131 ... |
2020-03-20 02:15:10 |
| 188.165.24.200 | attack | Mar 19 16:45:57 sigma sshd\[22386\]: Invalid user deploy from 188.165.24.200Mar 19 16:45:59 sigma sshd\[22386\]: Failed password for invalid user deploy from 188.165.24.200 port 51274 ssh2 ... |
2020-03-20 01:45:58 |
| 51.38.235.100 | attack | 2020-03-19 05:47:58 server sshd[97040]: Failed password for invalid user nijian from 51.38.235.100 port 60918 ssh2 |
2020-03-20 02:21:06 |
| 185.148.146.24 | attackspam | 5955/tcp 5500/tcp 7000/tcp... [2020-03-17/19]12pkt,4pt.(tcp) |
2020-03-20 01:57:32 |
| 35.199.73.100 | attackspambots | Mar 19 17:06:10 MainVPS sshd[24457]: Invalid user sistemas from 35.199.73.100 port 42656 Mar 19 17:06:10 MainVPS sshd[24457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.199.73.100 Mar 19 17:06:10 MainVPS sshd[24457]: Invalid user sistemas from 35.199.73.100 port 42656 Mar 19 17:06:13 MainVPS sshd[24457]: Failed password for invalid user sistemas from 35.199.73.100 port 42656 ssh2 Mar 19 17:13:12 MainVPS sshd[5123]: Invalid user system from 35.199.73.100 port 49074 ... |
2020-03-20 02:21:30 |