City: Medellín
Region: Antioquia
Country: Colombia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% IP Client: 124.223.158.242
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% LACNIC resource: whois.lacnic.net
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2025-09-22 00:37:31 (-03 -03:00)
inetnum: 2800:e0::/28
status: allocated
aut-num: AS13489
owner: UNE EPM TELECOMUNICACIONES S.A.
ownerid: CO-EPME1-LACNIC
responsible: Administrador EPMNET
address: Carrera 48 número 20 - 45, ., Rivana Business Park
address: 050022 - Medellin - CO
country: CO
phone: +57 43251505 [0000]
owner-c: JDM29
tech-c: YGO2
abuse-c: ABI13
inetrev: 2800:e0::/28
nserver: LAUTA.UNE.NET.CO
nsstat: 20250920 AA
nslastaa: 20250920
nserver: BIRLOCHA.UNE.NET.CO
nsstat: 20250920 AA
nslastaa: 20250920
nserver: NSBOG01.UNE.NET.CO
nsstat: 20250920 AA
nslastaa: 20250920
created: 20110203
changed: 20240611
nic-hdl: JDM29
person: ADM INTERNET
e-mail: adm.internet@tigo.com.co
address: Carrera 16, 11, INTERIOR 108
address: 050022 - MEDELLIN - ANTIOQUIA
country: CO
phone: +57 3017890000 [0000]
created: 20190530
changed: 20250710
nic-hdl: YGO2
person: AdmInternet Tigo Col
e-mail: adm.internet@tigo.com.co
address: Cra. 16 Nro. 11A Sur 100, 100, --
address: NA - Medellin - An
country: CO
phone: +57 45150505 [0]
created: 20030120
changed: 20250531
nic-hdl: ABI13
person: Abuso Internet
e-mail: abuse.internet@tigo.com.co
address: Rivana, 100,
address: 00 - MEDELLIN - ANTIOQUIA
country: CO
phone: +57 3001231234
created: 20240611
changed: 20240611
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2800:e2:c80:4d9:a13b:51c0:7bb1:53fd
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 56127
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2800:e2:c80:4d9:a13b:51c0:7bb1:53fd. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Mon Sep 22 11:41:51 CST 2025
;; MSG SIZE rcvd: 64
'b'Host d.f.3.5.1.b.b.7.0.c.1.5.b.3.1.a.9.d.4.0.0.8.c.0.2.e.0.0.0.0.8.2.ip6.arpa not found: 3(NXDOMAIN)
'Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find d.f.3.5.1.b.b.7.0.c.1.5.b.3.1.a.9.d.4.0.0.8.c.0.2.e.0.0.0.0.8.2.ip6.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 181.49.107.180 | attack | Apr 5 07:20:10 DAAP sshd[30299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.107.180 user=root Apr 5 07:20:11 DAAP sshd[30299]: Failed password for root from 181.49.107.180 port 44194 ssh2 Apr 5 07:24:02 DAAP sshd[30378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.107.180 user=root Apr 5 07:24:04 DAAP sshd[30378]: Failed password for root from 181.49.107.180 port 9056 ssh2 Apr 5 07:27:48 DAAP sshd[30496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.107.180 user=root Apr 5 07:27:49 DAAP sshd[30496]: Failed password for root from 181.49.107.180 port 18845 ssh2 ... |
2020-04-05 19:52:06 |
| 213.182.93.172 | attackbotsspam | (sshd) Failed SSH login from 213.182.93.172 (IT/Italy/213-182-93-172.ip.welcomeitalia.it): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 5 11:55:31 ubnt-55d23 sshd[1880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.182.93.172 user=root Apr 5 11:55:33 ubnt-55d23 sshd[1880]: Failed password for root from 213.182.93.172 port 35818 ssh2 |
2020-04-05 19:59:17 |
| 193.176.181.214 | attack | $f2bV_matches |
2020-04-05 20:14:06 |
| 218.92.0.208 | attack | Apr 5 11:34:43 IngegnereFirenze sshd[19362]: User root from 218.92.0.208 not allowed because not listed in AllowUsers ... |
2020-04-05 19:50:47 |
| 147.135.211.59 | attackbotsspam | SSH bruteforce (Triggered fail2ban) |
2020-04-05 19:49:37 |
| 122.246.68.202 | attackbots | [portscan] tcp/23 [TELNET] *(RWIN=12823)(04051002) |
2020-04-05 20:28:39 |
| 51.38.131.254 | attack | Apr 5 02:24:11 lanister sshd[28391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.131.254 user=root Apr 5 02:24:13 lanister sshd[28391]: Failed password for root from 51.38.131.254 port 55964 ssh2 Apr 5 02:27:40 lanister sshd[28472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.131.254 user=root Apr 5 02:27:42 lanister sshd[28472]: Failed password for root from 51.38.131.254 port 57224 ssh2 |
2020-04-05 20:01:53 |
| 2.136.161.213 | attackspam | SMB Server BruteForce Attack |
2020-04-05 19:49:54 |
| 122.51.194.23 | attackbotsspam | Apr 5 06:20:40 ws24vmsma01 sshd[172867]: Failed password for root from 122.51.194.23 port 33482 ssh2 ... |
2020-04-05 20:09:29 |
| 222.84.254.88 | attackspam | Apr 5 11:30:20 srv-ubuntu-dev3 sshd[5170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.84.254.88 user=root Apr 5 11:30:22 srv-ubuntu-dev3 sshd[5170]: Failed password for root from 222.84.254.88 port 36634 ssh2 Apr 5 11:32:06 srv-ubuntu-dev3 sshd[5471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.84.254.88 user=root Apr 5 11:32:08 srv-ubuntu-dev3 sshd[5471]: Failed password for root from 222.84.254.88 port 60952 ssh2 Apr 5 11:33:55 srv-ubuntu-dev3 sshd[5720]: Invalid user 123 from 222.84.254.88 Apr 5 11:33:55 srv-ubuntu-dev3 sshd[5720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.84.254.88 Apr 5 11:33:55 srv-ubuntu-dev3 sshd[5720]: Invalid user 123 from 222.84.254.88 Apr 5 11:33:57 srv-ubuntu-dev3 sshd[5720]: Failed password for invalid user 123 from 222.84.254.88 port 57050 ssh2 Apr 5 11:35:43 srv-ubuntu-dev3 sshd[5971]: Invalid user ... |
2020-04-05 19:54:17 |
| 116.100.117.66 | attackspam | 1586058469 - 04/05/2020 05:47:49 Host: 116.100.117.66/116.100.117.66 Port: 445 TCP Blocked |
2020-04-05 20:21:15 |
| 185.133.193.88 | attack | Unauthorized connection attempt detected from IP address 185.133.193.88 to port 3389 |
2020-04-05 19:57:18 |
| 178.128.101.79 | attack | CMS (WordPress or Joomla) login attempt. |
2020-04-05 19:55:43 |
| 37.152.135.168 | attackbots | $f2bV_matches |
2020-04-05 20:18:06 |
| 103.140.190.226 | attack | Apr 5 10:25:21 ns3164893 sshd[24603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.190.226 user=root Apr 5 10:25:23 ns3164893 sshd[24603]: Failed password for root from 103.140.190.226 port 52672 ssh2 ... |
2020-04-05 20:29:18 |