94.41.0.140 - IPInfo

Basic Info

City: Ufa

Region: Bashkortostan Republic

Country: Russia

Internet Service Provider: OJSC Ufanet

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Honeypot attack, port: 23, PTR: 94.41.0.140.static.ufanet.ru.	2019-11-13 02:41:04

Comments on same subnet:

IP	Type	Details	Datetime
94.41.0.126	attackspambots	unauthorized connection attempt	2020-01-25 17:49:31
94.41.0.126	attackbots	Unauthorized connection attempt detected from IP address 94.41.0.126 to port 23	2020-01-02 19:56:37
94.41.0.126	attackspam	Unauthorised access (Jan 1) SRC=94.41.0.126 LEN=44 TTL=51 ID=41551 TCP DPT=23 WINDOW=40379 SYN	2020-01-01 13:45:21
94.41.0.126	attackbots	port scan/probe/communication attempt; port 23	2019-11-29 06:52:50
94.41.0.126	attackspambots	Caught in portsentry honeypot	2019-11-25 23:19:56
94.41.0.157	attackspam	Sat, 20 Jul 2019 21:55:19 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-21 10:49:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.41.0.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41295
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.41.0.140.			IN	A

;; AUTHORITY SECTION:
.			469	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111201 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 13 02:40:56 CST 2019
;; MSG SIZE  rcvd: 115

Host info

140.0.41.94.in-addr.arpa domain name pointer 94.41.0.140.static.ufanet.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.0.41.94.in-addr.arpa	name = 94.41.0.140.static.ufanet.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
193.169.39.254	attackbots	SSH Brute-Forcing (ownc)	2019-07-20 04:17:24
119.109.196.164	attackspam	23/tcp [2019-07-19]1pkt	2019-07-20 03:57:32
60.241.23.58	attackspambots	Jul 19 20:14:21 ip-172-31-1-72 sshd\[22942\]: Invalid user useruser from 60.241.23.58 Jul 19 20:14:21 ip-172-31-1-72 sshd\[22942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.241.23.58 Jul 19 20:14:23 ip-172-31-1-72 sshd\[22942\]: Failed password for invalid user useruser from 60.241.23.58 port 49889 ssh2 Jul 19 20:21:40 ip-172-31-1-72 sshd\[23065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.241.23.58 user=root Jul 19 20:21:42 ip-172-31-1-72 sshd\[23065\]: Failed password for root from 60.241.23.58 port 48369 ssh2	2019-07-20 04:22:40
115.146.126.209	attackspam	Jul 19 20:29:11 mail sshd\[17471\]: Failed password for invalid user oracle from 115.146.126.209 port 54960 ssh2 Jul 19 20:47:34 mail sshd\[17665\]: Invalid user esther from 115.146.126.209 port 48458 Jul 19 20:47:34 mail sshd\[17665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.146.126.209 ...	2019-07-20 03:51:54
73.3.136.192	attackspam	Jul 19 20:46:37 v22018076622670303 sshd\[3100\]: Invalid user developer from 73.3.136.192 port 34044 Jul 19 20:46:37 v22018076622670303 sshd\[3100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.3.136.192 Jul 19 20:46:40 v22018076622670303 sshd\[3100\]: Failed password for invalid user developer from 73.3.136.192 port 34044 ssh2 ...	2019-07-20 04:27:49
185.222.211.237	attackspambots	Jul 19 21:40:41 relay postfix/smtpd\[2776\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 \: Relay access denied\; from=\<77359o80iv3by@inpartltd.ru\> to=\ proto=ESMTP helo=\ Jul 19 21:40:41 relay postfix/smtpd\[2776\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 \: Relay access denied\; from=\<77359o80iv3by@inpartltd.ru\> to=\ proto=ESMTP helo=\ Jul 19 21:40:41 relay postfix/smtpd\[2776\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 \: Relay access denied\; from=\<77359o80iv3by@inpartltd.ru\> to=\ proto=ESMTP helo=\ Jul 19 21:40:41 relay postfix/smtpd\[2776\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 \: Relay access denied\; from=\<77359o80iv3by@inpartltd.ru\> to=\< ...	2019-07-20 03:46:58
128.199.165.124	attack	Splunk® : port scan detected: Jul 19 12:42:58 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=128.199.165.124 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=28209 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0	2019-07-20 04:07:32
168.167.220.64	attack	Jul 19 16:43:07 *** sshd[25217]: Did not receive identification string from 168.167.220.64	2019-07-20 03:59:28
80.183.69.183	attackspam	23/tcp [2019-07-19]1pkt	2019-07-20 04:08:04
47.204.197.188	attack	2019-07-19T22:13:03.055883ns1.unifynetsol.net webmin\[3629\]: Invalid login as root from 47.204.197.188 2019-07-19T22:13:08.824218ns1.unifynetsol.net webmin\[3630\]: Invalid login as root from 47.204.197.188 2019-07-19T22:13:14.573858ns1.unifynetsol.net webmin\[3631\]: Invalid login as root from 47.204.197.188 2019-07-19T22:13:20.350050ns1.unifynetsol.net webmin\[3637\]: Invalid login as root from 47.204.197.188 2019-07-19T22:13:26.101630ns1.unifynetsol.net webmin\[3643\]: Invalid login as root from 47.204.197.188	2019-07-20 03:48:16
51.38.111.180	attackspambots	\[2019-07-19 15:47:59\] NOTICE\[20804\] chan_sip.c: Registration from '"4567891"\' failed for '51.38.111.180:8104' - Wrong password \[2019-07-19 15:47:59\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-19T15:47:59.985-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4567891",SessionID="0x7f06f82756a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.38.111.180/8104",Challenge="0eca2408",ReceivedChallenge="0eca2408",ReceivedHash="0ba1200c58901b59abfbc110044e6c53" \[2019-07-19 15:48:02\] NOTICE\[20804\] chan_sip.c: Registration from '"4567891"\' failed for '51.38.111.180:8042' - Wrong password \[2019-07-19 15:48:02\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-19T15:48:02.144-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4567891",SessionID="0x7f06f801be28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="I	2019-07-20 03:53:45
145.239.83.89	attackbots	Jul 19 21:23:38 SilenceServices sshd[29657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.83.89 Jul 19 21:23:41 SilenceServices sshd[29657]: Failed password for invalid user tiina from 145.239.83.89 port 38508 ssh2 Jul 19 21:28:15 SilenceServices sshd[32038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.83.89	2019-07-20 03:46:43
112.119.173.25	attackbotsspam	60001/tcp [2019-07-19]1pkt	2019-07-20 04:04:10
171.61.75.233	attackbots	60001/tcp [2019-07-19]1pkt	2019-07-20 04:04:55
104.140.188.30	attack	scan z	2019-07-20 04:15:38

Recently Reported IPs

188.40.62.94	139.59.146.28	47.14.173.123	97.73.157.88
233.69.32.203	65.239.133.76	224.57.232.156	76.245.103.253
12.24.111.33	73.176.248.247	157.34.120.132	244.156.164.155
23.228.34.218	52.209.199.5	157.44.34.87	152.181.123.68
116.9.11.212	157.209.129.218	77.195.244.53	20.177.72.204