200.39.254.143

Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: Axtel S.A.B. de C.V.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	[H1.VM4] Blocked by UFW	2020-06-07 22:38:27

Comments on same subnet:

IP	Type	Details	Datetime
200.39.254.18	attackbotsspam	Automatic report - Port Scan Attack	2020-09-26 04:41:05
200.39.254.18	attackspambots	Automatic report - Port Scan Attack	2020-09-25 21:33:11
200.39.254.18	attackspambots	Automatic report - Port Scan Attack	2020-09-25 13:11:33
200.39.254.46	attack	Automatic report - Port Scan Attack	2020-02-18 05:40:39
200.39.254.104	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 19:39:13
200.39.254.136	attackspambots	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-02-14 02:50:15
200.39.254.42	attackbotsspam	Automatic report - Port Scan Attack	2020-02-10 00:24:16
200.39.254.132	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-01-01 16:55:58
200.39.254.90	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-01-01 16:53:18
200.39.254.245	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-25 08:44:40
200.39.254.11	attackbotsspam	Automatic report - Port Scan Attack	2019-12-20 06:58:28
200.39.254.5	attack	Automatic report - Port Scan Attack	2019-11-14 17:13:49
200.39.254.118	attackbots	Automatic report - Port Scan Attack	2019-09-26 20:22:27
200.39.254.94	attackspambots	Automatic report - Port Scan Attack	2019-07-21 15:49:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.39.254.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42182
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.39.254.143.			IN	A

;; AUTHORITY SECTION:
.			407	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060700 1800 900 604800 86400

;; Query time: 157 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 07 22:38:22 CST 2020
;; MSG SIZE  rcvd: 118

Host info

143.254.39.200.in-addr.arpa domain name pointer dial-200-39-254-143.zone-3.ip.static-ftth.axtel.net.mx.

Nslookup info:

Server:		100.100.2.138
Address:	100.100.2.138#53

Non-authoritative answer:
143.254.39.200.in-addr.arpa	name = dial-200-39-254-143.zone-3.ip.static-ftth.axtel.net.mx.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
61.177.172.142	attackspambots	(sshd) Failed SSH login from 61.177.172.142 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 12 01:13:26 optimus sshd[1365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root Sep 12 01:13:27 optimus sshd[1367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root Sep 12 01:13:27 optimus sshd[1368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root Sep 12 01:13:28 optimus sshd[1365]: Failed password for root from 61.177.172.142 port 10764 ssh2 Sep 12 01:13:29 optimus sshd[1367]: Failed password for root from 61.177.172.142 port 20795 ssh2	2020-09-12 13:22:46
116.154.10.197	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-09-12 13:38:34
94.102.54.199	attackspambots	Sep 12 06:14:35 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\<2jDmCRavigBeZjbH\>\ Sep 12 06:17:10 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 12 06:21:25 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 12 06:25:24 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 12 06:45:22 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep	2020-09-12 13:29:11
106.12.219.184	attackbotsspam	prod11 ...	2020-09-12 13:21:16
157.45.29.243	attack	20/9/11@12:57:40: FAIL: Alarm-Intrusion address from=157.45.29.243 20/9/11@12:57:41: FAIL: Alarm-Intrusion address from=157.45.29.243 ...	2020-09-12 13:32:50
91.236.172.87	attack	Autoban 91.236.172.87 AUTH/CONNECT	2020-09-12 13:30:12
91.232.4.149	attackspambots	Sep 12 01:58:57 h1745522 sshd[16577]: Invalid user teresa from 91.232.4.149 port 58428 Sep 12 01:58:57 h1745522 sshd[16577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.232.4.149 Sep 12 01:58:57 h1745522 sshd[16577]: Invalid user teresa from 91.232.4.149 port 58428 Sep 12 01:58:59 h1745522 sshd[16577]: Failed password for invalid user teresa from 91.232.4.149 port 58428 ssh2 Sep 12 02:00:31 h1745522 sshd[18605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.232.4.149 user=root Sep 12 02:00:33 h1745522 sshd[18605]: Failed password for root from 91.232.4.149 port 52142 ssh2 Sep 12 02:01:24 h1745522 sshd[18772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.232.4.149 user=root Sep 12 02:01:26 h1745522 sshd[18772]: Failed password for root from 91.232.4.149 port 38356 ssh2 Sep 12 02:02:18 h1745522 sshd[18894]: Invalid user test from 91.232.4.149 port 52 ...	2020-09-12 13:34:03
191.8.187.245	attackbots	Brute-force attempt banned	2020-09-12 13:31:05
177.37.71.40	attack	Ssh brute force	2020-09-12 13:14:30
92.222.180.221	attackbotsspam	Sep 12 05:59:31 l02a sshd[22570]: Invalid user info from 92.222.180.221 Sep 12 05:59:31 l02a sshd[22570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.ip-92-222-180.eu Sep 12 05:59:31 l02a sshd[22570]: Invalid user info from 92.222.180.221 Sep 12 05:59:34 l02a sshd[22570]: Failed password for invalid user info from 92.222.180.221 port 55154 ssh2	2020-09-12 13:45:55
111.225.153.176	attackspambots	2020-09-12T00:00:25+02:00 exim[5513]: fixed_login authenticator failed for (ugklotvtbi.com) [111.225.153.176]: 535 Incorrect authentication data (set_id=debrecen@europedirect.hu)	2020-09-12 13:33:36
106.53.178.199	attackspam	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-09-12 13:20:47
181.48.138.242	attackbots	SSH/22 MH Probe, BF, Hack -	2020-09-12 13:13:01
60.191.230.173	attackspam	Unauthorised access (Sep 11) SRC=60.191.230.173 LEN=52 TTL=114 ID=4467 DF TCP DPT=445 WINDOW=8192 SYN	2020-09-12 13:20:00
109.167.231.99	attackspambots	Sep 11 19:35:33 php1 sshd\[11916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.167.231.99 user=root Sep 11 19:35:35 php1 sshd\[11916\]: Failed password for root from 109.167.231.99 port 23485 ssh2 Sep 11 19:39:45 php1 sshd\[12470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.167.231.99 user=root Sep 11 19:39:47 php1 sshd\[12470\]: Failed password for root from 109.167.231.99 port 10767 ssh2 Sep 11 19:43:53 php1 sshd\[12801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.167.231.99 user=root	2020-09-12 13:45:16

Recently Reported IPs

112.105.118.158	181.226.159.192	58.153.29.98	187.0.185.126
54.200.255.102	69.63.35.129	206.189.154.38	77.42.87.230
153.121.43.228	64.207.226.154	42.2.136.107	112.119.117.63
218.250.12.170	217.112.142.208	217.112.142.183	212.166.54.110
98.96.176.9	200.66.124.55	195.93.143.172	163.166.220.181