City: Morelia
Region: Michoacan
Country: Mexico
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% IP Client: 124.223.158.242
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2026-11-04 03:36:28 (Z Z)
inetnum: 189.243.0.0/16
status: reallocated
aut-num: AS8151
owner: Uninet S.A. de C.V.
ownerid: MX-USCV4-LACNIC
responsible: No hay informacion
address: AVENIDA (AV.) INSURGENTES SUR, 3500, PISO 4 PEÃA POBRE
address: 14060 - TLALPAN - CX
country: MX
phone: +52 5554876500
owner-c: GEC10
tech-c: SRU
abuse-c: SRU
inetrev: 189.243.0.0/16
nserver: NSGDL2.UNINET.NET.MX
nsstat: 20261031 AA
nslastaa: 20261031
nserver: NSMEX2.UNINET.NET.MX
nsstat: 20261031 AA
nslastaa: 20261031
nserver: NSMTY2.UNINET.NET.MX
nsstat: 20261031 AA
nslastaa: 20261031
created: 20140616
changed: 20140616
inetnum-up: 189.240.0.0/12
remarks: leased=false
nic-hdl: GEC10
person: Santiago Ricardo Ramirez Luna
e-mail: gccips@uninet.com.mx
address: AV. INSURGENTES SUR, 3500, TORRE TELMEX COL. PEÃA POBRE
address: 14060 - TLALPAN - CX
country: MX
phone: +52 5554876578
created: 20110706
changed: 20250505
nic-hdl: SRU
person: SEGURIDAD DE RED UNINET
e-mail: abuse@uninet.net.mx
address: PERIFERICO SUR, 3190, ALVARO OBREG
address: 01900 - MEXICO - CX
country: MX
phone: +52 55 52237234
created: 20030701
changed: 20170107
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.243.165.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34443
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;189.243.165.31. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110304 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 04 11:36:29 CST 2026
;; MSG SIZE rcvd: 10731.165.243.189.in-addr.arpa domain name pointer acceso-189.243.165.31.prod-infinitum.com.mx.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
31.165.243.189.in-addr.arpa name = acceso-189.243.165.31.prod-infinitum.com.mx.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.236.204.243 | attack | (sshd) Failed SSH login from 104.236.204.243 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 3 08:51:49 ubnt-55d23 sshd[9767]: Invalid user hoo from 104.236.204.243 port 59362 May 3 08:51:51 ubnt-55d23 sshd[9767]: Failed password for invalid user hoo from 104.236.204.243 port 59362 ssh2 |
2020-05-03 14:54:13 |
| 123.59.213.68 | attackspam | May 3 03:44:16 ip-172-31-62-245 sshd\[5121\]: Invalid user node from 123.59.213.68\ May 3 03:44:18 ip-172-31-62-245 sshd\[5121\]: Failed password for invalid user node from 123.59.213.68 port 48998 ssh2\ May 3 03:48:48 ip-172-31-62-245 sshd\[5183\]: Invalid user fit from 123.59.213.68\ May 3 03:48:51 ip-172-31-62-245 sshd\[5183\]: Failed password for invalid user fit from 123.59.213.68 port 48050 ssh2\ May 3 03:53:31 ip-172-31-62-245 sshd\[5242\]: Failed password for root from 123.59.213.68 port 47086 ssh2\ |
2020-05-03 14:55:31 |
| 117.55.241.2 | attackbots | May 3 00:16:37 server1 sshd\[4905\]: Failed password for invalid user qwerty from 117.55.241.2 port 51310 ssh2 May 3 00:21:03 server1 sshd\[6222\]: Invalid user nagios! from 117.55.241.2 May 3 00:21:03 server1 sshd\[6222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.55.241.2 May 3 00:21:05 server1 sshd\[6222\]: Failed password for invalid user nagios! from 117.55.241.2 port 55420 ssh2 May 3 00:25:30 server1 sshd\[7491\]: Invalid user 1234 from 117.55.241.2 ... |
2020-05-03 14:26:25 |
| 36.90.178.224 | attackbotsspam | Brute force SMTP login attempted. ... |
2020-05-03 14:36:39 |
| 144.217.255.89 | attackbots | scan r |
2020-05-03 14:21:29 |
| 193.219.55.186 | attackspam | SSH/22 MH Probe, BF, Hack - |
2020-05-03 14:45:18 |
| 185.50.25.14 | attack | CMS (WordPress or Joomla) login attempt. |
2020-05-03 14:34:28 |
| 35.200.17.149 | attack | 35.200.17.149 - - \[03/May/2020:08:23:10 +0200\] "POST /wp-login.php HTTP/1.0" 200 7318 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 35.200.17.149 - - \[03/May/2020:08:23:13 +0200\] "POST /wp-login.php HTTP/1.0" 200 7318 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 35.200.17.149 - - \[03/May/2020:08:23:15 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 802 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-05-03 14:30:59 |
| 217.182.71.54 | attackspam | May 3 13:50:19 webhost01 sshd[21710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.71.54 May 3 13:50:21 webhost01 sshd[21710]: Failed password for invalid user vpnuser1 from 217.182.71.54 port 35618 ssh2 ... |
2020-05-03 14:51:08 |
| 190.12.11.248 | attackbotsspam | GET /wp-login.php HTTP/1.1 |
2020-05-03 14:35:42 |
| 183.89.212.54 | attack | Dovecot Invalid User Login Attempt. |
2020-05-03 14:42:15 |
| 62.173.145.159 | attackbots | (sshd) Failed SSH login from 62.173.145.159 (RU/Russia/customers.campora.it): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 3 06:53:13 s1 sshd[14973]: Did not receive identification string from 62.173.145.159 port 56992 May 3 06:53:22 s1 sshd[14974]: Invalid user admin from 62.173.145.159 port 59614 May 3 06:53:22 s1 sshd[14975]: Invalid user admin from 62.173.145.159 port 60022 May 3 06:53:22 s1 sshd[14977]: Invalid user info from 62.173.145.159 port 60838 May 3 06:53:22 s1 sshd[14980]: Invalid user operador from 62.173.145.159 port 33014 |
2020-05-03 14:56:51 |
| 208.97.137.136 | attackspambots | May 3 05:54:11 debian-2gb-nbg1-2 kernel: \[10736956.997895\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=208.97.137.136 DST=195.201.40.59 LEN=164 TOS=0x08 PREC=0x00 TTL=237 ID=54321 PROTO=UDP SPT=38549 DPT=53413 LEN=144 |
2020-05-03 14:31:32 |
| 106.12.48.216 | attackspam | 2020-05-03T03:54:15.856803homeassistant sshd[19290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.216 user=root 2020-05-03T03:54:17.475952homeassistant sshd[19290]: Failed password for root from 106.12.48.216 port 43116 ssh2 ... |
2020-05-03 14:27:53 |
| 122.51.154.26 | attack | May 3 02:02:48 NPSTNNYC01T sshd[23480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.154.26 May 3 02:02:50 NPSTNNYC01T sshd[23480]: Failed password for invalid user ak from 122.51.154.26 port 60422 ssh2 May 3 02:08:23 NPSTNNYC01T sshd[24067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.154.26 ... |
2020-05-03 14:43:37 |