201.249.12.89 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Venezuela

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
201.249.124.30	attackspam	firewall-block, port(s): 445/tcp	2020-08-20 07:59:35
201.249.122.82	attackbots	Unauthorised access (Apr 20) SRC=201.249.122.82 LEN=52 TTL=52 ID=25456 DF TCP DPT=1433 WINDOW=8192 SYN	2020-04-21 04:31:02
201.249.125.145	attack	1584099459 - 03/13/2020 12:37:39 Host: 201.249.125.145/201.249.125.145 Port: 445 TCP Blocked	2020-03-13 19:45:50
201.249.123.173	attack	port scan and connect, tcp 23 (telnet)	2020-02-24 20:18:04
201.249.125.63	attack	Scanning random ports - tries to find possible vulnerable services	2020-02-21 08:38:16
201.249.122.32	attackbots	Feb 27 17:27:04 odroid64 sshd\[18389\]: User root from 201.249.122.32 not allowed because not listed in AllowUsers Feb 27 17:27:04 odroid64 sshd\[18389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.249.122.32 user=root Feb 27 17:27:06 odroid64 sshd\[18389\]: Failed password for invalid user root from 201.249.122.32 port 57058 ssh2 ...	2019-10-18 05:03:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.249.12.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20839
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;201.249.12.89.			IN	A

;; AUTHORITY SECTION:
.			196	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 23:54:53 CST 2022
;; MSG SIZE  rcvd: 106

Host info

89.12.249.201.in-addr.arpa domain name pointer 201-249-12-89.dyn.dsl.cantv.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
89.12.249.201.in-addr.arpa	name = 201-249-12-89.dyn.dsl.cantv.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
114.124.193.166	attack	Email rejected due to spam filtering	2020-01-27 08:55:40
94.66.221.107	attackbotsspam	Email rejected due to spam filtering	2020-01-27 09:30:21
82.64.22.35	attack	Jan 26 17:18:29 server6 sshd[10142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-22-35.subs.proxad.net user=r.r Jan 26 17:18:32 server6 sshd[10142]: Failed password for r.r from 82.64.22.35 port 41420 ssh2 Jan 26 17:18:32 server6 sshd[10142]: Received disconnect from 82.64.22.35: 11: Bye Bye [preauth] Jan 26 18:06:15 server6 sshd[23869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-22-35.subs.proxad.net Jan 26 18:06:17 server6 sshd[23869]: Failed password for invalid user administrador from 82.64.22.35 port 50944 ssh2 Jan 26 18:06:17 server6 sshd[23869]: Received disconnect from 82.64.22.35: 11: Bye Bye [preauth] Jan 26 18:12:30 server6 sshd[31064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-22-35.subs.proxad.net Jan 26 18:12:32 server6 sshd[31064]: Failed password for invalid user helpdesk from 82.64.22.35 port 40888 ssh........ -------------------------------	2020-01-27 09:10:07
117.50.43.236	attackspam	Unauthorized connection attempt detected from IP address 117.50.43.236 to port 2220 [J]	2020-01-27 09:16:37
39.49.103.174	attack	TCP Port: 25 invalid blocked abuseat-org also barracuda and zen-spamhaus (515)	2020-01-27 09:07:14
176.113.70.60	attackspam	176.113.70.60 was recorded 11 times by 4 hosts attempting to connect to the following ports: 1900. Incident counter (4h, 24h, all-time): 11, 58, 904	2020-01-27 09:21:42
177.154.8.123	attackspambots	Email rejected due to spam filtering	2020-01-27 09:26:34
39.42.131.133	attackbots	TCP Port: 25 invalid blocked abuseat-org also barracuda and spamcop (509)	2020-01-27 09:27:06
187.39.134.45	attack	Automatic report - Banned IP Access	2020-01-27 09:01:14
46.146.32.1	attackspambots	Email rejected due to spam filtering	2020-01-27 08:52:39
176.8.32.138	attack	TCP Port: 25 invalid blocked abuseat-org also barracuda and zen-spamhaus (517)	2020-01-27 09:00:20
222.186.175.220	attack	Jan 27 01:52:25 MK-Soft-VM5 sshd[4951]: Failed password for root from 222.186.175.220 port 44042 ssh2 Jan 27 01:52:30 MK-Soft-VM5 sshd[4951]: Failed password for root from 222.186.175.220 port 44042 ssh2 ...	2020-01-27 09:05:08
81.171.107.188	attackbotsspam	[2020-01-26 19:27:27] NOTICE[1148] chan_sip.c: Registration from '' failed for '81.171.107.188:52660' - Wrong password [2020-01-26 19:27:27] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-26T19:27:27.217-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3418",SessionID="0x7fd82c10ad58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107.188/52660",Challenge="4670c1e9",ReceivedChallenge="4670c1e9",ReceivedHash="532aa0a884a6214e0564894400d5d3f2" [2020-01-26 19:27:55] NOTICE[1148] chan_sip.c: Registration from '' failed for '81.171.107.188:60681' - Wrong password [2020-01-26 19:27:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-26T19:27:55.224-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5923",SessionID="0x7fd82c538db8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107 ...	2020-01-27 08:53:24
36.66.149.211	attackspambots	Jan 26 19:19:37 sd-53420 sshd\[30515\]: Invalid user squid from 36.66.149.211 Jan 26 19:19:37 sd-53420 sshd\[30515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.149.211 Jan 26 19:19:39 sd-53420 sshd\[30515\]: Failed password for invalid user squid from 36.66.149.211 port 51844 ssh2 Jan 26 19:23:32 sd-53420 sshd\[31175\]: Invalid user admin from 36.66.149.211 Jan 26 19:23:32 sd-53420 sshd\[31175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.149.211 ...	2020-01-27 08:59:17
80.82.77.139	attack	firewall-block, port(s): 2345/tcp	2020-01-27 09:13:15

Recently Reported IPs

201.248.238.58	201.249.107.185	201.249.134.106	201.249.134.84
201.249.15.102	201.249.147.21	201.249.177.202	201.249.163.13
201.249.134.129	201.249.181.18	201.249.147.68	201.249.65.227
201.249.26.93	201.249.71.53	201.249.206.18	201.254.222.33
201.253.47.242	201.254.121.148	201.255.4.170	201.27.48.30