138.99.149.59 - IPInfo

Basic Info

City: Zacapu

Region: Michoacán

Country: Mexico

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.99.149.247	attack	Jan 28 23:22:31 debian-2gb-nbg1-2 kernel: \[2509417.026352\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=138.99.149.247 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=62558 DF PROTO=TCP SPT=11715 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0	2020-01-29 08:15:20

Type

Details

Datetime

138.99.149.247

attack

Jan 28 23:22:31 debian-2gb-nbg1-2 kernel: \[2509417.026352\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=138.99.149.247 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=62558 DF PROTO=TCP SPT=11715 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0

2020-01-29 08:15:20

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.99.149.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5916
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.99.149.59.			IN	A

;; AUTHORITY SECTION:
.			430	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061001 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 11 10:40:45 CST 2022
;; MSG SIZE  rcvd: 106

Host info

59.149.99.138.in-addr.arpa domain name pointer customer-138-99-149-59.gbic.mx.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
59.149.99.138.in-addr.arpa	name = customer-138-99-149-59.gbic.mx.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
132.145.242.238	attack	Aug 22 14:09:43 home sshd[3181907]: Failed password for mysql from 132.145.242.238 port 48751 ssh2 Aug 22 14:13:15 home sshd[3183270]: Invalid user claudette from 132.145.242.238 port 52440 Aug 22 14:13:15 home sshd[3183270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 Aug 22 14:13:15 home sshd[3183270]: Invalid user claudette from 132.145.242.238 port 52440 Aug 22 14:13:17 home sshd[3183270]: Failed password for invalid user claudette from 132.145.242.238 port 52440 ssh2 ...	2020-08-22 23:39:04
218.92.0.184	attack	Aug 22 17:23:13 kh-dev-server sshd[15102]: Failed password for root from 218.92.0.184 port 19799 ssh2 ...	2020-08-22 23:23:39
195.88.255.246	attackspambots	Brute forcing RDP port 3389	2020-08-22 23:27:18
106.54.219.237	attack	Aug 22 13:08:45 XXXXXX sshd[31959]: Invalid user lyh from 106.54.219.237 port 40475	2020-08-22 23:38:00
121.15.2.178	attackbotsspam	Aug 22 15:14:27 rancher-0 sshd[1215708]: Invalid user rlk from 121.15.2.178 port 39860 ...	2020-08-22 23:41:05
164.90.198.205	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2020-08-22 23:04:39
46.101.4.101	attackspam	SSH login attempts.	2020-08-22 23:00:08
134.209.12.115	attack	Aug 22 15:46:30 sso sshd[28977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.12.115 Aug 22 15:46:32 sso sshd[28977]: Failed password for invalid user user from 134.209.12.115 port 36756 ssh2 ...	2020-08-22 23:18:00
123.206.95.243	attackbotsspam	Aug 22 08:16:37 mockhub sshd[9796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.95.243 Aug 22 08:16:39 mockhub sshd[9796]: Failed password for invalid user praxis from 123.206.95.243 port 57742 ssh2 ...	2020-08-22 23:32:37
49.233.181.43	attack	49.233.181.43 - - [21/Aug/2020:21:32:30 -0500] "POST /db.init.php HTTP/1.1" 404 49.233.181.43 - - [21/Aug/2020:21:32:30 -0500] "POST /db_session.init.php HTTP/1 49.233.181.43 - - [21/Aug/2020:21:32:30 -0500] "POST /db__.init.php HTTP/1.1" 40 49.233.181.43 - - [21/Aug/2020:21:32:31 -0500] "POST /wp-admins.php HTTP/1.1" 40	2020-08-22 23:02:27
94.31.85.173	attackspambots	Aug 22 16:44:10 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\ Aug 22 16:44:12 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\<25tLWHitsbdeH1Wt\> Aug 22 16:44:34 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\ Aug 22 16:49:43 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\<1fELbHitrNpeH1Wt\> Aug 22 16:49:45 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\< ...	2020-08-22 23:16:48
51.254.37.192	attackbots	Aug 22 15:35:22 hosting sshd[26221]: Invalid user chris from 51.254.37.192 port 51922 ...	2020-08-22 23:08:19
218.92.0.249	attack	Aug 22 16:58:02 abendstille sshd\[5779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.249 user=root Aug 22 16:58:04 abendstille sshd\[5779\]: Failed password for root from 218.92.0.249 port 44855 ssh2 Aug 22 16:58:07 abendstille sshd\[5779\]: Failed password for root from 218.92.0.249 port 44855 ssh2 Aug 22 16:58:10 abendstille sshd\[5779\]: Failed password for root from 218.92.0.249 port 44855 ssh2 Aug 22 16:58:14 abendstille sshd\[5779\]: Failed password for root from 218.92.0.249 port 44855 ssh2 ...	2020-08-22 23:02:53
101.53.242.65	attack	Automatic report - XMLRPC Attack	2020-08-22 23:11:49
190.144.216.206	attack	TCP (SYN) 190.144.216.206:50931 -> port 445, len 52	2020-08-22 23:43:14

Recently Reported IPs

136.13.189.154	177.39.44.12	114.43.182.86	236.21.157.17
96.94.194.34	97.42.221.163	123.185.77.134	190.58.164.45
19.169.47.159	38.126.7.149	185.220.37.62	103.113.221.64
94.255.73.219	103.85.106.124	231.246.111.191	61.244.88.136
195.10.98.35	187.89.199.227	203.124.204.136	85.190.159.138