City: Lubbock
Region: Texas
Country: United States
Internet Service Provider: RTC Communications LLC
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 40.128.0.0 - 40.133.31.255
CIDR: 40.128.0.0/14, 40.132.0.0/16, 40.133.0.0/19
NetName: WINDSTREAM-COMM
NetHandle: NET-40-128-0-0-1
Parent: NET40 (NET-40-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Windstream Communications LLC (WINDS-6)
RegDate: 2012-11-13
Updated: 2025-07-07
Comment: Geofeed https://geofeed.windstream.com/GEO_Data.csv
Ref: https://rdap.arin.net/registry/ip/40.128.0.0
OrgName: Windstream Communications LLC
OrgId: WINDS-6
Address: 4005 North Rodney Parham Rd
City: Little Rock
StateProv: AR
PostalCode: 72212
Country: US
RegDate: 2006-08-10
Updated: 2025-07-08
Comment: Geofeed https://geofeed.windstream.com/GEO_Data.csv
Ref: https://rdap.arin.net/registry/entity/WINDS-6
OrgRoutingHandle: WINDS-ARIN
OrgRoutingName: Windstream Communications Inc
OrgRoutingPhone: +1-888-292-3827
OrgRoutingEmail: Windstream.IP.Admin@windstream.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/WINDS-ARIN
OrgAbuseHandle: WINDS1-ARIN
OrgAbuseName: Windstream Abuse
OrgAbusePhone: +1-800-347-1991
OrgAbuseEmail: abuse@windstream.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/WINDS1-ARIN
OrgTechHandle: WINDS-ARIN
OrgTechName: Windstream Communications Inc
OrgTechPhone: +1-888-292-3827
OrgTechEmail: Windstream.IP.Admin@windstream.com
OrgTechRef: https://rdap.arin.net/registry/entity/WINDS-ARIN
# end
# start
NetRange: 40.131.160.0 - 40.131.175.255
CIDR: 40.131.160.0/20
NetName: 40-131-160-0
NetHandle: NET-40-131-160-0-1
Parent: WINDSTREAM-COMM (NET-40-128-0-0-1)
NetType: Reassigned
OriginAS:
Customer: WINDSTREAM COMMUNICATIONS LLC (C10900641)
RegDate: 2024-07-16
Updated: 2024-10-31
Comment: Geofeed https://geofeed.windstream.com/GEO_Data.csv
Ref: https://rdap.arin.net/registry/ip/40.131.160.0
CustName: WINDSTREAM COMMUNICATIONS LLC
Address: WINDSTREAM CONSUMER
City: LUBBOCK
StateProv: TX
PostalCode: 79401
Country: US
RegDate: 2024-07-16
Updated: 2024-07-16
Ref: https://rdap.arin.net/registry/entity/C10900641
OrgRoutingHandle: WINDS-ARIN
OrgRoutingName: Windstream Communications Inc
OrgRoutingPhone: +1-888-292-3827
OrgRoutingEmail: Windstream.IP.Admin@windstream.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/WINDS-ARIN
OrgAbuseHandle: WINDS1-ARIN
OrgAbuseName: Windstream Abuse
OrgAbusePhone: +1-800-347-1991
OrgAbuseEmail: abuse@windstream.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/WINDS1-ARIN
OrgTechHandle: WINDS-ARIN
OrgTechName: Windstream Communications Inc
OrgTechPhone: +1-888-292-3827
OrgTechEmail: Windstream.IP.Admin@windstream.com
OrgTechRef: https://rdap.arin.net/registry/entity/WINDS-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.131.164.226
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20159
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;40.131.164.226. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032401 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 25 11:51:45 CST 2026
;; MSG SIZE rcvd: 107
226.164.131.40.in-addr.arpa domain name pointer h226.164.131.40.dynamic.ip.windstream.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
226.164.131.40.in-addr.arpa name = h226.164.131.40.dynamic.ip.windstream.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 31.25.110.74 | attackspambots | IP 31.25.110.74 attacked honeypot on port: 80 at 8/22/2020 5:08:43 AM |
2020-08-23 02:52:27 |
| 42.247.16.100 | attackbotsspam | Port probing on unauthorized port 1433 |
2020-08-23 02:56:40 |
| 118.25.152.169 | attackspambots | Aug 22 16:22:40 kh-dev-server sshd[9820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.152.169 ... |
2020-08-23 02:40:14 |
| 118.117.89.212 | attack | (smtpauth) Failed SMTP AUTH login from 118.117.89.212 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-22 16:39:45 login authenticator failed for (LkOzTLKe) [118.117.89.212]: 535 Incorrect authentication data (set_id=chenting) |
2020-08-23 02:46:43 |
| 170.80.32.6 | attackspam | Automatic report - Port Scan Attack |
2020-08-23 02:49:47 |
| 103.84.237.74 | attack | bruteforce detected |
2020-08-23 02:46:09 |
| 200.54.242.46 | attackbotsspam | SSH Brute-Forcing (server1) |
2020-08-23 02:51:59 |
| 5.9.66.153 | attackbots | abuseConfidenceScore blocked for 12h |
2020-08-23 02:38:33 |
| 103.221.252.46 | attack | SSH Brute-Forcing (server1) |
2020-08-23 02:42:33 |
| 188.98.78.254 | attackbotsspam | Chat Spam |
2020-08-23 03:02:39 |
| 49.233.143.87 | attackbotsspam | Aug 22 13:45:49 onepixel sshd[2845149]: Invalid user admin from 49.233.143.87 port 34960 Aug 22 13:45:49 onepixel sshd[2845149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.143.87 Aug 22 13:45:49 onepixel sshd[2845149]: Invalid user admin from 49.233.143.87 port 34960 Aug 22 13:45:52 onepixel sshd[2845149]: Failed password for invalid user admin from 49.233.143.87 port 34960 ssh2 Aug 22 13:48:58 onepixel sshd[2845685]: Invalid user marimo from 49.233.143.87 port 39484 |
2020-08-23 03:03:48 |
| 65.151.160.89 | attack | 2020-08-22T17:51:17.857641mail.standpoint.com.ua sshd[16461]: Failed password for root from 65.151.160.89 port 36390 ssh2 2020-08-22T17:55:03.989945mail.standpoint.com.ua sshd[17207]: Invalid user fcs from 65.151.160.89 port 43472 2020-08-22T17:55:03.992500mail.standpoint.com.ua sshd[17207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.151.160.89 2020-08-22T17:55:03.989945mail.standpoint.com.ua sshd[17207]: Invalid user fcs from 65.151.160.89 port 43472 2020-08-22T17:55:06.812959mail.standpoint.com.ua sshd[17207]: Failed password for invalid user fcs from 65.151.160.89 port 43472 ssh2 ... |
2020-08-23 03:08:25 |
| 222.244.126.164 | attackbots | SSH login attempts. |
2020-08-23 02:33:42 |
| 217.197.162.140 | attackspambots | Aug 22 06:09:51 Host-KLAX-C postfix/smtpd[28195]: NOQUEUE: reject: RCPT from unknown[217.197.162.140]: 554 5.7.1 <3918-733-113174-1107-b.henderson=vestibtech.com@mail.yourhip.icu>: Sender address rejected: We reject all .icu domains; from=<3918-733-113174-1107-b.henderson=vestibtech.com@mail.yourhip.icu> to= |
2020-08-23 02:45:46 |
| 35.239.60.149 | attackbotsspam | Time: Sat Aug 22 18:40:58 2020 +0000 IP: 35.239.60.149 (US/United States/149.60.239.35.bc.googleusercontent.com) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Aug 22 18:25:03 ca-1-ams1 sshd[31204]: Invalid user jimmy from 35.239.60.149 port 40116 Aug 22 18:25:05 ca-1-ams1 sshd[31204]: Failed password for invalid user jimmy from 35.239.60.149 port 40116 ssh2 Aug 22 18:38:03 ca-1-ams1 sshd[31635]: Invalid user testmail from 35.239.60.149 port 53458 Aug 22 18:38:04 ca-1-ams1 sshd[31635]: Failed password for invalid user testmail from 35.239.60.149 port 53458 ssh2 Aug 22 18:40:58 ca-1-ams1 sshd[31753]: Invalid user nagios from 35.239.60.149 port 49798 |
2020-08-23 03:07:18 |