City: unknown
Region: unknown
Country: Argentina
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% IP Client: 124.223.158.242
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2026-07-31 19:00:29 (-03 -03:00)
inetnum: 181.238.0.0/15
status: allocated
aut-num: N/A
owner: AMX Argentina S.A.
ownerid: AR-CCTI1-LACNIC
responsible: Administrador de Direcciones IP
address: Av. de Mayo, 878,
address: 1425 - Capital Federal -
country: AR
phone: +54 11 41098823
owner-c: ADL82
tech-c: SAD3
abuse-c: CAT66
inetrev: 181.238.0.0/16
nserver: NS1.TELMEX.NET.AR
nsstat: 20260727 AA
nslastaa: 20260727
inetrev: 181.239.0.0/16
nserver: NS1.TELMEX.NET.AR
nsstat: 20260726 AA
nslastaa: 20260726
created: 20121129
changed: 20210316
remarks: Geofeed https://geofeed.claro.com.ar/geofeed.csv
nic-hdl: ADL82
person: Administrador Lacnic
e-mail: adm_lacnic@claro.com.ar
address: Av de Mayo, 878,
address: C1084AAQ - Buenos Aires -
country: AR
phone: +54 1140003246
created: 20220602
changed: 20220602
nic-hdl: SAD3
person: IP Addressing AR
e-mail: ipaddressing.ar@claro.com.ar
address: Av. de Mayo, 878, -
address: C1084AAQ - Bs.As, - CF
country: AR
phone: +54 1140011300 [34179]
created: 20060511
changed: 20211221
nic-hdl: CAT66
person: Abuse Claro AR
e-mail: abuse@claro.com.ar
address: Av. de Mayo, 878, -
address: 1425 - Capital Federal - Other
country: AR
phone: +54 1141098823 [0000]
created: 20210217
changed: 20210313
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 181.239.235.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;181.239.235.22. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026073102 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 01 06:00:29 CST 2026
;; MSG SIZE rcvd: 10722.235.239.181.in-addr.arpa domain name pointer host22.181-239-235.telmex.net.ar.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
22.235.239.181.in-addr.arpa name = host22.181-239-235.telmex.net.ar.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.120.158.43 | attackspam | Sep 2 18:47:56 vpn01 sshd[21269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.120.158.43 Sep 2 18:47:58 vpn01 sshd[21269]: Failed password for invalid user support from 112.120.158.43 port 52945 ssh2 ... |
2020-09-03 13:36:51 |
| 121.178.119.138 | attack | Icarus honeypot on github |
2020-09-03 13:55:15 |
| 59.20.109.89 | attack | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "nagios" at 2020-09-02T16:47:46Z |
2020-09-03 13:49:21 |
| 58.33.84.251 | attack | Sep 3 07:15:38 vps647732 sshd[12920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.33.84.251 Sep 3 07:15:40 vps647732 sshd[12920]: Failed password for invalid user robot from 58.33.84.251 port 30821 ssh2 ... |
2020-09-03 13:32:58 |
| 190.96.60.147 | attackbotsspam | Tried our host z. |
2020-09-03 13:27:43 |
| 140.206.86.124 | attack | Unwanted checking 80 or 443 port ... |
2020-09-03 13:25:53 |
| 94.199.79.57 | attackspam | port scan and connect, tcp 23 (telnet) |
2020-09-03 13:25:15 |
| 222.186.175.148 | attackbotsspam | 2020-09-03T07:20:08.051252mail.broermann.family sshd[10543]: Failed password for root from 222.186.175.148 port 45518 ssh2 2020-09-03T07:20:10.929519mail.broermann.family sshd[10543]: Failed password for root from 222.186.175.148 port 45518 ssh2 2020-09-03T07:20:14.219968mail.broermann.family sshd[10543]: Failed password for root from 222.186.175.148 port 45518 ssh2 2020-09-03T07:20:14.220191mail.broermann.family sshd[10543]: error: maximum authentication attempts exceeded for root from 222.186.175.148 port 45518 ssh2 [preauth] 2020-09-03T07:20:14.220216mail.broermann.family sshd[10543]: Disconnecting: Too many authentication failures [preauth] ... |
2020-09-03 13:22:00 |
| 178.174.147.7 | attackbots | Sep 2 18:47:50 vpn01 sshd[21215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.174.147.7 Sep 2 18:47:53 vpn01 sshd[21215]: Failed password for invalid user admin from 178.174.147.7 port 52134 ssh2 ... |
2020-09-03 13:43:25 |
| 3.81.26.85 | attackbots | Invalid user veronica from 3.81.26.85 port 34698 |
2020-09-03 13:18:53 |
| 42.98.51.13 | attack | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "admin" at 2020-09-02T16:47:45Z |
2020-09-03 13:51:07 |
| 132.232.1.8 | attackbotsspam | SSH / Telnet Brute Force Attempts on Honeypot |
2020-09-03 13:34:08 |
| 109.228.166.242 | attackspam | Sep 2 17:05:48 IngegnereFirenze sshd[27471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.228.166.242 user=root ... |
2020-09-03 13:41:40 |
| 64.227.5.37 | attackspam | SSH brutforce |
2020-09-03 13:37:51 |
| 112.119.93.37 | attack | Bruteforce detected by fail2ban |
2020-09-03 13:53:38 |