City: Caracas
Region: Federal Capital
Country: Venezuela
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.250.48.115 | attack | Unauthorized connection attempt detected from IP address 167.250.48.115 to port 2220 [J] |
2020-01-08 08:46:10 |
| 167.250.48.1 | attack | Detected By Fail2ban |
2019-11-12 04:21:33 |
| 167.250.48.1 | attack | WEB Masscan Scanner Activity |
2019-11-10 22:30:02 |
| 167.250.48.1 | attackspam | Masscan |
2019-11-06 00:11:04 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 167.250.0.0 - 167.250.255.255
CIDR: 167.250.0.0/16
NetName: LACNIC-ERX-167-250-0-0
NetHandle: NET-167-250-0-0-1
Parent: NET167 (NET-167-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Comment: or check the WHOIS server located at http://whois.lacnic.net
Ref: https://rdap.arin.net/registry/ip/167.250.0.0
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink: whois.lacnic.net
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
ReferralServer: whois://whois.lacnic.net
ResourceLink: http://lacnic.net/cgi-bin/lacnic/whois
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechEmail: whois-contact@lacnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.lacnic.net.
% IP Client: 124.223.158.242
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2026-03-20 15:30:19 (-03 -03:00)
inetnum: 167.250.48.0/22
status: allocated
aut-num: N/A
owner: CORPORACIÃN GALA IT, C.A.
ownerid: VE-ICCA10-LACNIC
responsible: Jose G Marin
address: Calle Panama con Av.Libertador Edificio Lidomar Plaza 8, 8, Edificio Lidomar Plaza 8
address: 1010 - Caracas -
country: VE
phone: +58 2127093800 [823]
owner-c: ICC10
tech-c: ICC10
abuse-c: ICC10
inetrev: 167.250.48.0/24
nserver: NS1.GALAWEBHOST.NET
nsstat: 20260320 AA
nslastaa: 20260320
nserver: NS2.GALAWEBHOST.NET
nsstat: 20260320 AA
nslastaa: 20260320
inetrev: 167.250.49.0/24
nserver: NS1.GALAWEBHOST.NET
nsstat: 20260320 AA
nslastaa: 20260320
nserver: NS2.GALAWEBHOST.NET
nsstat: 20260320 AA
nslastaa: 20260320
inetrev: 167.250.51.0/24
nserver: NS1.GALAWEBHOST.NET
nsstat: 20260317 AA
nslastaa: 20260317
nserver: NS2.GALAWEBHOST.NET
nsstat: 20260317 AA
nslastaa: 20260317
inetrev: 167.250.50.0/24
nserver: NS1.GALAWEBHOST.NET
nsstat: 20260318 AA
nslastaa: 20260318
nserver: NS2.GALAWEBHOST.NET
nsstat: 20260318 AA
nslastaa: 20260318
created: 20151216
changed: 20151216
nic-hdl: ICC10
person: Corporación GALA IT
e-mail: aguilarrn@galait.net
address: Calle Panama con Av.Libertador Edificio Lidomar Plaza, 8, A
address: 1010 - Caracas - DF
country: VE
phone: +58 2127937413 [801]
created: 20150224
changed: 20260105
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.250.48.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10331
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;167.250.48.114. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032001 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 21 02:30:19 CST 2026
;; MSG SIZE rcvd: 107Host 114.48.250.167.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 114.48.250.167.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 223.99.60.182 | attackspam | Port Scan: UDP/34567 |
2019-09-10 18:55:22 |
| 63.226.39.153 | attack | Port Scan: UDP/137 |
2019-09-10 18:49:21 |
| 113.206.10.137 | attackspam | 2019-09-03T04:18:04.233Z CLOSE host=113.206.10.137 port=24663 fd=6 time=1000.554 bytes=1678 ... |
2019-09-10 19:33:16 |
| 104.174.134.217 | attackspam | Port Scan: UDP/45751 |
2019-09-10 19:26:26 |
| 68.98.218.116 | attackspambots | Port Scan: UDP/137 |
2019-09-10 19:10:52 |
| 113.190.99.249 | attackbots | 2019-09-03T01:32:55.381Z CLOSE host=113.190.99.249 port=34354 fd=5 time=50.004 bytes=51 ... |
2019-09-10 19:39:01 |
| 104.248.161.244 | attackspam | Sep 10 01:24:41 kapalua sshd\[21547\]: Invalid user deploy from 104.248.161.244 Sep 10 01:24:41 kapalua sshd\[21547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.161.244 Sep 10 01:24:44 kapalua sshd\[21547\]: Failed password for invalid user deploy from 104.248.161.244 port 47234 ssh2 Sep 10 01:30:45 kapalua sshd\[22116\]: Invalid user teamspeak from 104.248.161.244 Sep 10 01:30:45 kapalua sshd\[22116\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.161.244 |
2019-09-10 19:37:17 |
| 86.105.25.66 | attackbots | Port Scan: TCP/10003 |
2019-09-10 19:28:57 |
| 73.130.128.39 | attack | Port Scan: TCP/25 |
2019-09-10 19:08:47 |
| 200.69.79.29 | attackspam | Jul 30 09:27:37 mercury auth[31347]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=sales@lukegirvin.co.uk rhost=200.69.79.29 ... |
2019-09-10 19:34:07 |
| 35.198.126.31 | attack | Port Scan: TCP/443 |
2019-09-10 18:51:58 |
| 173.249.35.163 | attack | Sep 8 10:07:11 mercury wordpress(www.learnargentinianspanish.com)[30679]: XML-RPC authentication failure for josh from 173.249.35.163 ... |
2019-09-10 19:47:39 |
| 162.243.151.87 | attackspam | Aug 22 15:59:32 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=162.243.151.87 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=41554 DPT=123 LEN=56 ... |
2019-09-10 19:51:02 |
| 128.77.29.135 | attackspam | Sep 10 12:34:50 microserver sshd[51143]: Invalid user alexalex from 128.77.29.135 port 38612 Sep 10 12:34:50 microserver sshd[51143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.77.29.135 Sep 10 12:34:52 microserver sshd[51143]: Failed password for invalid user alexalex from 128.77.29.135 port 38612 ssh2 Sep 10 12:40:45 microserver sshd[52330]: Invalid user luser from 128.77.29.135 port 42978 Sep 10 12:40:45 microserver sshd[52330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.77.29.135 Sep 10 12:52:37 microserver sshd[53892]: Invalid user 123 from 128.77.29.135 port 51670 Sep 10 12:52:37 microserver sshd[53892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.77.29.135 Sep 10 12:52:39 microserver sshd[53892]: Failed password for invalid user 123 from 128.77.29.135 port 51670 ssh2 Sep 10 12:58:30 microserver sshd[54639]: Invalid user 123456 from 128.77.29.135 port 56018 Se |
2019-09-10 19:43:35 |
| 121.19.131.185 | attack | Port Scan: TCP/23 |
2019-09-10 19:03:34 |