138.99.6.177 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Argentina

Internet Service Provider: AMX Argentina S.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root	2020-09-25 06:08:23
attackspambots	2020-09-15 06:49:20 server sshd[17773]: Failed password for invalid user root from 138.99.6.177 port 51850 ssh2	2020-09-16 23:32:03
attack	Sep 16 00:12:42 mail sshd\[47567\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.177 user=root ...	2020-09-16 15:49:15
attack	2020-09-15T19:01:01.563248correo.[domain] sshd[2507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.177 2020-09-15T19:01:01.552003correo.[domain] sshd[2507]: Invalid user solr from 138.99.6.177 port 58064 2020-09-15T19:01:03.139691correo.[domain] sshd[2507]: Failed password for invalid user solr from 138.99.6.177 port 58064 ssh2 ...	2020-09-16 07:49:23

Comments on same subnet:

IP	Type	Details	Datetime
138.99.6.184	attackbots	Aug 24 16:11:17 minden010 sshd[7147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 Aug 24 16:11:18 minden010 sshd[7147]: Failed password for invalid user restore from 138.99.6.184 port 60036 ssh2 Aug 24 16:15:57 minden010 sshd[7701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 ...	2020-08-24 23:20:34
138.99.6.184	attackbotsspam	Automatic report BANNED IP	2020-08-24 12:55:11
138.99.6.184	attack	Multiple SSH authentication failures from 138.99.6.184	2020-08-22 01:01:30
138.99.6.184	attack	Aug 20 19:42:02 firewall sshd[3653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 user=root Aug 20 19:42:05 firewall sshd[3653]: Failed password for root from 138.99.6.184 port 57904 ssh2 Aug 20 19:46:59 firewall sshd[3805]: Invalid user tester from 138.99.6.184 ...	2020-08-21 07:31:27
138.99.6.184	attackbots	Jun 30 22:04:07 ift sshd\[34416\]: Invalid user user from 138.99.6.184Jun 30 22:04:08 ift sshd\[34416\]: Failed password for invalid user user from 138.99.6.184 port 46470 ssh2Jun 30 22:08:46 ift sshd\[35047\]: Invalid user rich from 138.99.6.184Jun 30 22:08:48 ift sshd\[35047\]: Failed password for invalid user rich from 138.99.6.184 port 44576 ssh2Jun 30 22:13:27 ift sshd\[35858\]: Invalid user cah from 138.99.6.184 ...	2020-07-02 01:17:58
138.99.6.184	attackbotsspam	fail2ban -- 138.99.6.184 ...	2020-06-28 06:45:38
138.99.6.184	attack	Jun 26 09:14:14 vpn01 sshd[6759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 Jun 26 09:14:16 vpn01 sshd[6759]: Failed password for invalid user porte from 138.99.6.184 port 59928 ssh2 ...	2020-06-26 16:59:26
138.99.6.184	attackspam	Jun 21 06:51:41 srv-ubuntu-dev3 sshd[47158]: Invalid user sftptest from 138.99.6.184 Jun 21 06:51:41 srv-ubuntu-dev3 sshd[47158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 Jun 21 06:51:41 srv-ubuntu-dev3 sshd[47158]: Invalid user sftptest from 138.99.6.184 Jun 21 06:51:43 srv-ubuntu-dev3 sshd[47158]: Failed password for invalid user sftptest from 138.99.6.184 port 34372 ssh2 Jun 21 06:55:42 srv-ubuntu-dev3 sshd[47864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 user=root Jun 21 06:55:44 srv-ubuntu-dev3 sshd[47864]: Failed password for root from 138.99.6.184 port 34234 ssh2 Jun 21 06:59:39 srv-ubuntu-dev3 sshd[48460]: Invalid user cdr from 138.99.6.184 Jun 21 06:59:39 srv-ubuntu-dev3 sshd[48460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 Jun 21 06:59:39 srv-ubuntu-dev3 sshd[48460]: Invalid user cdr from 138.99.6. ...	2020-06-21 13:11:00
138.99.6.184	attackspam	Jun 20 14:20:34 vpn01 sshd[17359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 Jun 20 14:20:36 vpn01 sshd[17359]: Failed password for invalid user paul from 138.99.6.184 port 45176 ssh2 ...	2020-06-20 20:49:15
138.99.6.184	attackbotsspam	2020-06-16T20:19:21.342155n23.at sshd[932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 user=root 2020-06-16T20:19:23.219019n23.at sshd[932]: Failed password for root from 138.99.6.184 port 41466 ssh2 2020-06-16T20:22:51.456879n23.at sshd[4255]: Invalid user lf from 138.99.6.184 port 35526 ...	2020-06-17 03:27:11
138.99.6.184	attackspam	Jun 7 07:20:36 server sshd[20488]: Failed password for root from 138.99.6.184 port 44778 ssh2 Jun 7 07:21:38 server sshd[21141]: Failed password for root from 138.99.6.184 port 56428 ssh2 Jun 7 07:22:34 server sshd[21891]: Failed password for root from 138.99.6.184 port 39848 ssh2	2020-06-07 19:32:40
138.99.6.184	attackspam	Fail2Ban	2020-06-06 12:48:05
138.99.6.184	attack	web-1 [ssh] SSH Attack	2020-06-04 13:24:57
138.99.6.184	attack	2020-06-01T08:45:04.076451devel sshd[13945]: Failed password for root from 138.99.6.184 port 60596 ssh2 2020-06-01T08:46:29.630263devel sshd[14132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.184 user=root 2020-06-01T08:46:31.475306devel sshd[14132]: Failed password for root from 138.99.6.184 port 48912 ssh2	2020-06-02 00:05:31
138.99.6.65	attackbotsspam	Jan 18 09:11:29 vtv3 sshd[7500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.65 Jan 18 09:11:31 vtv3 sshd[7500]: Failed password for invalid user solr from 138.99.6.65 port 57800 ssh2 Jan 18 09:18:55 vtv3 sshd[10805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.65 Jan 18 09:30:23 vtv3 sshd[16366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.65 Jan 18 09:30:25 vtv3 sshd[16366]: Failed password for invalid user support from 138.99.6.65 port 53906 ssh2 Jan 18 09:36:01 vtv3 sshd[18901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.65 Jan 18 09:47:10 vtv3 sshd[23900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.6.65 Jan 18 09:47:13 vtv3 sshd[23900]: Failed password for invalid user alex from 138.99.6.65 port 43194 ssh2 Jan 18 09:52:42 vtv3 sshd[26339]:	2020-01-18 18:09:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.99.6.177
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24987
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.99.6.177.			IN	A

;; AUTHORITY SECTION:
.			414	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091502 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 16 07:49:20 CST 2020
;; MSG SIZE  rcvd: 116

Host info

177.6.99.138.in-addr.arpa domain name pointer host177.138-99-6.telmex.net.ar.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
177.6.99.138.in-addr.arpa	name = host177.138-99-6.telmex.net.ar.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
87.251.74.30	attackspam	2020-05-03T15:03:22.449903homeassistant sshd[3209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.30 user=root 2020-05-03T15:03:25.222318homeassistant sshd[3209]: Failed password for root from 87.251.74.30 port 4950 ssh2 2020-05-03T15:03:25.553345homeassistant sshd[3211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.30 user=root ...	2020-05-03 23:04:05
213.149.103.132	attackbots	Attempted WordPress login: "GET /wp-login.php"	2020-05-03 23:20:50
49.233.171.219	attack	20 attempts against mh-ssh on cloud	2020-05-03 23:26:48
45.35.97.172	attack	TCP src-port=57692 dst-port=25 Listed on zen-spamhaus rbldns-ru truncate-gbudb (227)	2020-05-03 23:38:51
34.87.10.245	attackbots	May 3 15:01:27 vps647732 sshd[16581]: Failed password for root from 34.87.10.245 port 40246 ssh2 ...	2020-05-03 23:27:37
142.44.160.40	attackspambots	May 3 14:11:55 sso sshd[31475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.40 May 3 14:11:57 sso sshd[31475]: Failed password for invalid user cpp from 142.44.160.40 port 36226 ssh2 ...	2020-05-03 23:31:26
116.228.53.227	attackbotsspam	$f2bV_matches	2020-05-03 23:14:46
185.202.1.164	attack	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-05-03 23:31:04
222.186.30.167	attackspambots	May 3 17:30:10 vps647732 sshd[19118]: Failed password for root from 222.186.30.167 port 12174 ssh2 ...	2020-05-03 23:43:40
192.42.116.15	attackspam	May 3 14:12:23 vpn01 sshd[30044]: Failed password for root from 192.42.116.15 port 51712 ssh2 May 3 14:12:26 vpn01 sshd[30044]: Failed password for root from 192.42.116.15 port 51712 ssh2 ...	2020-05-03 23:08:49
80.82.65.122	attackbots	May 03 13:41:43 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.122, lip=192.168.100.101, session=\\ May 03 13:54:41 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.122, lip=192.168.100.101, session=\<5nFKFL2klABQUkF6\>\ May 03 13:58:52 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.122, lip=192.168.100.101, session=\<1IA2I72kjABQUkF6\>\ May 03 14:03:17 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.122, lip=192.168.100.101, session=\\ May 03 14:23:30 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.122, lip=192.168.100.101, session=\\ May 03	2020-05-03 23:38:29
185.176.27.98	attackbots	05/03/2020-09:42:57.068472 185.176.27.98 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-03 23:36:55
118.152.234.54	attackbots	trying to access non-authorized port	2020-05-03 23:03:47
114.245.39.55	attackbotsspam	May 3 14:16:40 h1637304 postfix/smtpd[13602]: connect from unknown[114.245.39.55] May 3 14:16:43 h1637304 postfix/smtpd[13602]: warning: unknown[114.245.39.55]: SASL LOGIN authentication failed: authentication failure May 3 14:16:43 h1637304 postfix/smtpd[13602]: lost connection after AUTH from unknown[114.245.39.55] May 3 14:16:43 h1637304 postfix/smtpd[13602]: disconnect from unknown[114.245.39.55] May 3 14:16:44 h1637304 postfix/smtpd[5322]: connect from unknown[114.245.39.55] May 3 14:16:46 h1637304 postfix/smtpd[5322]: warning: unknown[114.245.39.55]: SASL LOGIN authentication failed: authentication failure May 3 14:16:47 h1637304 postfix/smtpd[5322]: lost connection after AUTH from unknown[114.245.39.55] May 3 14:16:47 h1637304 postfix/smtpd[5322]: disconnect from unknown[114.245.39.55] May 3 14:16:48 h1637304 postfix/smtpd[13602]: connect from unknown[114.245.39.55] May 3 14:16:57 h1637304 postfix/smtpd[13602]: warning: unknown[114.245.39.55]: SASL LOGI........ -------------------------------	2020-05-03 23:29:56
106.12.207.236	attackspam	May 3 16:07:43 eventyay sshd[12501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.207.236 May 3 16:07:45 eventyay sshd[12501]: Failed password for invalid user pablo from 106.12.207.236 port 36616 ssh2 May 3 16:11:56 eventyay sshd[12682]: Failed password for root from 106.12.207.236 port 59490 ssh2 ...	2020-05-03 23:38:13

Recently Reported IPs

45.155.63.224	190.39.12.72	176.153.102.214	105.5.170.26
109.93.189.26	188.170.216.184	46.189.60.245	176.49.190.156
195.58.58.91	180.106.8.125	103.206.163.38	209.124.118.28
109.6.152.206	31.212.125.26	52.52.183.187	78.14.153.61
173.175.215.231	173.242.122.32	68.95.98.101	67.233.78.236