40.139.252.65 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.139.252.65
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17643
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;40.139.252.65.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021501 1800 900 604800 86400

;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 02:28:56 CST 2025
;; MSG SIZE  rcvd: 106

Host info

65.252.139.40.in-addr.arpa domain name pointer h65.252.139.40.ip.windstream.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
65.252.139.40.in-addr.arpa	name = h65.252.139.40.ip.windstream.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
85.57.145.133	attackbots	Aug 24 11:52:07 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 24 12:07:04 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 24 12:07:07 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 179 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 24 12:22:04 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 24 12:22:07 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\ ...	2020-08-24 20:59:11
178.187.123.27	attackspam	Attempted connection to port 80.	2020-08-24 21:17:20
82.137.5.119	attackspambots	Automatic report - Port Scan Attack	2020-08-24 20:47:03
176.92.72.44	attackspam	Telnet Server BruteForce Attack	2020-08-24 20:47:56
185.220.100.243	attackspambots	(imapd) Failed IMAP login from 185.220.100.243 (DE/Germany/tor-exit-16.zbau.f3netze.de): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 24 16:22:55 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user=, method=PLAIN, rip=185.220.100.243, lip=5.63.12.44, TLS, session=	2020-08-24 20:41:17
104.131.76.49	attackspambots	Port Scan ...	2020-08-24 20:54:03
139.99.125.86	attack	Attempted connection to port 64129.	2020-08-24 21:24:56
123.206.81.59	attack	Automatic Fail2ban report - Trying login SSH	2020-08-24 21:16:34
220.88.1.208	attackbots	Aug 24 14:53:13 web-main sshd[2795384]: Invalid user admin from 220.88.1.208 port 41444 Aug 24 14:53:15 web-main sshd[2795384]: Failed password for invalid user admin from 220.88.1.208 port 41444 ssh2 Aug 24 15:05:15 web-main sshd[2796974]: Invalid user vagrant from 220.88.1.208 port 56734	2020-08-24 21:13:49
182.61.50.239	attack	2020-08-24T05:52:58.669869linuxbox-skyline sshd[112059]: Invalid user susi from 182.61.50.239 port 45780 ...	2020-08-24 20:41:48
209.141.45.189	attackbots	prod11 ...	2020-08-24 20:45:27
14.191.16.67	attackbotsspam	Attempted connection to port 445.	2020-08-24 21:20:10
201.156.8.253	attackspambots	Automatic report - Port Scan Attack	2020-08-24 21:02:34
138.197.95.2	attackbots	138.197.95.2 - - [24/Aug/2020:14:22:53 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.95.2 - - [24/Aug/2020:14:22:54 +0200] "POST /wp-login.php HTTP/1.1" 200 9357 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.95.2 - - [24/Aug/2020:14:22:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-24 20:42:17
133.130.89.210	attackbotsspam	2020-08-24T11:52:49.504727randservbullet-proofcloud-66.localdomain sshd[32013]: Invalid user testphp from 133.130.89.210 port 43260 2020-08-24T11:52:49.508700randservbullet-proofcloud-66.localdomain sshd[32013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=v133-130-89-210.a01e.g.tyo1.static.cnode.io 2020-08-24T11:52:49.504727randservbullet-proofcloud-66.localdomain sshd[32013]: Invalid user testphp from 133.130.89.210 port 43260 2020-08-24T11:52:51.718477randservbullet-proofcloud-66.localdomain sshd[32013]: Failed password for invalid user testphp from 133.130.89.210 port 43260 ssh2 ...	2020-08-24 20:48:20

Recently Reported IPs

194.35.154.4	151.249.188.39	59.229.177.139	42.226.156.78
149.195.121.211	55.208.41.123	219.34.219.183	43.222.11.236
64.244.222.252	198.117.187.91	150.157.143.26	75.187.50.248
140.47.202.104	80.89.229.101	86.246.159.229	223.183.190.247
244.113.209.145	215.248.231.185	68.70.134.76	132.97.216.36