140.249.54.36 - IPInfo

Basic Info

City: unknown

Region: Shandong

Country: China

Internet Service Provider: ChinaNet Shandong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt detected from IP address 140.249.54.36 to port 6380 [J]	2020-01-27 06:34:11
attack	Unauthorized connection attempt detected from IP address 140.249.54.36 to port 7002 [J]	2020-01-21 02:36:34
attackbots	Unauthorized connection attempt detected from IP address 140.249.54.36 to port 1433 [J]	2020-01-17 07:27:50

Type

Details

Datetime

attackspam

Unauthorized connection attempt detected from IP address 140.249.54.36 to port 6380 [J]

2020-01-27 06:34:11

attack

Unauthorized connection attempt detected from IP address 140.249.54.36 to port 7002 [J]

2020-01-21 02:36:34

attackbots

Unauthorized connection attempt detected from IP address 140.249.54.36 to port 1433 [J]

2020-01-17 07:27:50

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.249.54.36
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41830
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.249.54.36.			IN	A

;; AUTHORITY SECTION:
.			523	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011602 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 17 07:27:47 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 36.54.249.140.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 36.54.249.140.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.96.82.122	attackbots	firewall-block, port(s): 23/tcp	2019-10-12 17:07:28
132.232.112.25	attackspam	Oct 12 08:51:47 venus sshd\[13851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.112.25 user=root Oct 12 08:51:49 venus sshd\[13851\]: Failed password for root from 132.232.112.25 port 58864 ssh2 Oct 12 08:57:38 venus sshd\[13957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.112.25 user=root ...	2019-10-12 17:01:05
45.112.199.154	attackbots	Unauthorized connection attempt from IP address 45.112.199.154 on Port 445(SMB)	2019-10-12 17:01:49
14.226.92.104	attackspam	Unauthorized connection attempt from IP address 14.226.92.104 on Port 445(SMB)	2019-10-12 17:04:05
14.139.245.173	attack	Oct 12 08:00:22 tuxlinux sshd[4985]: Invalid user admin from 14.139.245.173 port 53528 Oct 12 08:00:22 tuxlinux sshd[4985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.245.173 Oct 12 08:00:22 tuxlinux sshd[4985]: Invalid user admin from 14.139.245.173 port 53528 Oct 12 08:00:22 tuxlinux sshd[4985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.245.173 Oct 12 08:00:22 tuxlinux sshd[4985]: Invalid user admin from 14.139.245.173 port 53528 Oct 12 08:00:22 tuxlinux sshd[4985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.245.173 Oct 12 08:00:24 tuxlinux sshd[4985]: Failed password for invalid user admin from 14.139.245.173 port 53528 ssh2 ...	2019-10-12 17:23:06
125.117.145.41	attackspam	SSH invalid-user multiple login try	2019-10-12 17:18:01
42.2.227.226	attackbotsspam	Netgear DGN Device Remote Command Execution Vulnerability	2019-10-12 17:16:55
117.159.26.136	attack	port scan and connect, tcp 1433 (ms-sql-s)	2019-10-12 17:11:21
164.132.54.215	attackbots	Mar 2 20:23:04 vtv3 sshd\[28551\]: Invalid user umesh from 164.132.54.215 port 37248 Mar 2 20:23:04 vtv3 sshd\[28551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.54.215 Mar 2 20:23:06 vtv3 sshd\[28551\]: Failed password for invalid user umesh from 164.132.54.215 port 37248 ssh2 Mar 2 20:29:27 vtv3 sshd\[31052\]: Invalid user support from 164.132.54.215 port 43510 Mar 2 20:29:27 vtv3 sshd\[31052\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.54.215 Mar 9 01:27:55 vtv3 sshd\[14863\]: Invalid user odoo from 164.132.54.215 port 48590 Mar 9 01:27:55 vtv3 sshd\[14863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.54.215 Mar 9 01:27:57 vtv3 sshd\[14863\]: Failed password for invalid user odoo from 164.132.54.215 port 48590 ssh2 Mar 9 01:33:47 vtv3 sshd\[17231\]: Invalid user mcserver from 164.132.54.215 port 51522 Mar 9 01:33:47 vtv3 sshd\[17	2019-10-12 16:52:11
112.133.251.124	attackspambots	Unauthorized connection attempt from IP address 112.133.251.124 on Port 445(SMB)	2019-10-12 16:51:04
220.164.2.134	attackbotsspam	Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS, session=\ Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\<REMOVED.dehenrik@REMOVED.de\>, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS, session=\ Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS, session=\<71Z3WrCU06XcpAKG\>	2019-10-12 17:02:25
201.116.19.37	attackbotsspam	Unauthorized connection attempt from IP address 201.116.19.37 on Port 445(SMB)	2019-10-12 16:57:06
222.186.175.216	attackbotsspam	Oct 12 11:19:27 dcd-gentoo sshd[21003]: User root from 222.186.175.216 not allowed because none of user's groups are listed in AllowGroups Oct 12 11:19:31 dcd-gentoo sshd[21003]: error: PAM: Authentication failure for illegal user root from 222.186.175.216 Oct 12 11:19:27 dcd-gentoo sshd[21003]: User root from 222.186.175.216 not allowed because none of user's groups are listed in AllowGroups Oct 12 11:19:31 dcd-gentoo sshd[21003]: error: PAM: Authentication failure for illegal user root from 222.186.175.216 Oct 12 11:19:27 dcd-gentoo sshd[21003]: User root from 222.186.175.216 not allowed because none of user's groups are listed in AllowGroups Oct 12 11:19:31 dcd-gentoo sshd[21003]: error: PAM: Authentication failure for illegal user root from 222.186.175.216 Oct 12 11:19:31 dcd-gentoo sshd[21003]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.216 port 48938 ssh2 ...	2019-10-12 17:21:10
31.154.84.141	attackspam	Automatic report - Port Scan Attack	2019-10-12 17:03:31
103.84.110.133	attackspam	Port 1433 Scan	2019-10-12 16:47:33

Recently Reported IPs

81.105.90.164	123.170.86.13	139.93.5.225	59.129.36.117
118.71.67.250	118.71.7.19	37.151.144.179	77.219.136.177
115.224.232.66	113.128.105.119	90.95.254.199	113.118.189.33
113.87.163.4	113.22.159.143	31.165.81.182	113.0.10.96
111.20.101.32	107.115.59.236	5.34.100.139	106.14.136.156