132.248.130.218

First Seen 2024-04-16 11:43:31PM
Last Seen 2024-05-02 07:48:15AM
Latitude/Longitude 17.9833/-92.9167
Country MX - Mexico
Total Attacks 9

WHOIS

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2024, American Registry for Internet Numbers, Ltd.
#


NetRange:       132.247.0.0 - 132.248.255.255
CIDR:           132.247.0.0/16, 132.248.0.0/16
NetName:        LACNIC-ERX-132-247-0-0
NetHandle:      NET-132-247-0-0-1
Parent:         NET132 (NET-132-0-0-0-0)
NetType:        Transferred to LACNIC
OriginAS:       
Organization:   Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate:        2003-12-11
Updated:        2007-12-17
Comment:        This IP address range is under LACNIC responsibility
Comment:        for further allocations to users in LACNIC region.
Comment:        Please see http://www.lacnic.net/ for further details,
Comment:        or check the WHOIS server located at http://whois.lacnic.net
Ref:            https://rdap.arin.net/registry/ip/132.247.0.0

ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink:  whois.lacnic.net


OrgName:        Latin American and Caribbean IP address Regional Registry
OrgId:          LACNIC
Address:        Rambla Republica de Mexico 6125
City:           Montevideo
StateProv:      
PostalCode:     11400
Country:        UY
RegDate:        2002-07-27
Updated:        2018-03-15
Ref:            https://rdap.arin.net/registry/entity/LACNIC

ReferralServer:  whois://whois.lacnic.net
ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois

OrgAbuseHandle: LWI100-ARIN
OrgAbuseName:   LACNIC Whois Info
OrgAbusePhone:  +598-2604-2222 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    https://rdap.arin.net/registry/entity/LWI100-ARIN

OrgTechHandle: LACNIC-ARIN
OrgTechName:   LACNIC Whois Info
OrgTechPhone:  +598-2604-2222 
OrgTechEmail:  [email protected]
OrgTechRef:    https://rdap.arin.net/registry/entity/LACNIC-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2024, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.lacnic.net.

% IP Client: 206.189.207.12
 
% Joint Whois - whois.lacnic.net
%  This server accepts single ASN, IPv4 or IPv6 queries

% LACNIC resource: whois.lacnic.net


% Copyright LACNIC lacnic.net
%  The data below is provided for information purposes
%  and to assist persons in obtaining information about or
%  related to AS and IP numbers registrations
%  By submitting a whois query, you agree to use this data
%  only for lawful purposes.
%  2024-04-16 20:43:31 (-03 -03:00)

inetnum:     132.248.0.0/16
status:      assigned
aut-num:     AS278
owner:       Universidad Nacional Autonoma de Mexico
ownerid:     MX-UNAM1-LACNIC
responsible: Dr. Hector Benitez Perez
address:     Av.Universidad, 3000, Copilco
address:     04510 - Coyoacan - CX
country:     MX
phone:       +52 55 56228884
owner-c:     CIR
tech-c:      CIR
abuse-c:     CIR
inetrev:     132.248.0.0/16
nserver:     NS3.UNAM.MX
nsstat:      20240415 AA
nslastaa:    20240415
nserver:     NS4.UNAM.MX
nsstat:      20240415 AA
nslastaa:    20240415
created:     19890331
changed:     20030206

nic-hdl:     CIR
person:      UNIVERSIDAD NACIONAL AUTONOMA DE MEXICO
e-mail:      [email protected]
address:     AV.UNIVERSIDAD, Universidad Nacional Autonoma de Mexico C.U, 3000, COPILCO
address:     04510 - MEXICO, COYOACAN - CX
country:     MX
phone:       +52 55 56228884
created:     20041202
changed:     20181004

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

Attacks

IP Username Password Commands Country Client Version Date
view 132.248.130.218 bitwarden 3245gs5662d34 0 Mexico SSH-2.0-libssh_0.9.6 2024-05-02 07:48:15AM
view 132.248.130.218 345gs5662d34 345gs5662d34 0 Mexico SSH-2.0-libssh_0.9.6 2024-05-02 07:48:14AM
view 132.248.130.218 bitwarden 123456 2 Mexico SSH-2.0-libssh_0.9.6 2024-05-02 07:47:48AM
view 132.248.130.218 bioinfo 3245gs5662d34 0 Mexico SSH-2.0-libssh_0.9.6 2024-04-29 08:50:45PM
view 132.248.130.218 345gs5662d34 345gs5662d34 0 Mexico SSH-2.0-libssh_0.9.6 2024-04-29 08:50:44PM
view 132.248.130.218 bioinfo bioinfo 2 Mexico SSH-2.0-libssh_0.9.6 2024-04-29 08:50:19PM
view 132.248.130.218 root 3245gs5662d34 0 Mexico SSH-2.0-libssh_0.9.6 2024-04-16 11:43:59PM
view 132.248.130.218 345gs5662d34 345gs5662d34 0 Mexico SSH-2.0-libssh_0.9.6 2024-04-16 11:43:57PM
view 132.248.130.218 root yangming 2 Mexico SSH-2.0-libssh_0.9.6 2024-04-16 11:43:31PM
© 2021 threat.gg