City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '109.105.209.0 - 109.105.209.255'
% Abuse contact for '109.105.209.0 - 109.105.209.255' is 'optout@internet-census.org'
inetnum: 109.105.209.0 - 109.105.209.255
netname: ICG-ZEN-LAX-1
descr: ICG-ZEN-LAX-1
country: US
org: ORG-NSIS5-RIPE
admin-c: AR59913-RIPE
tech-c: AR59913-RIPE
abuse-c: AR59913-RIPE
status: ASSIGNED PA
mnt-by: MNT-BST
created: 2025-07-15T18:20:43Z
last-modified: 2026-02-20T14:52:49Z
source: RIPE
remarks: https://internet-census.org
remarks: Internet Census Group seeks to measure the global Internet with non-intrusive data collection techniques in order to analyze trends and benchmark security performance across a broad range of industries
remarks: We are committed to upholding the security and privacy of the entire online community. As part of that mission, we maintain a list of entities that have contacted us and wish to prevent us from attempting to access their addresses or ports
remarks: To have your IP address added to this list, provide us with the IP addresses you wish to remove via email to: optout@internet-census.org
remarks: Please continue to update us if your IP addresses or networks change so we can continue to keep you opted out. You will receive a confirmation email when completed
organisation: ORG-NSIS5-RIPE
org-name: NSEC - Sistemas Informaticos, S.A.
country: PT
reg-nr: 507524845
org-type: LIR
address: 111 Huntington Ave Suite 2010
address: MA 02199
address: Boston
address: UNITED STATES
phone: +351217252110
admin-c: DOT14-RIPE
tech-c: DOT14-RIPE
abuse-c: AR59913-RIPE
mnt-ref: MNT-BST
mnt-by: RIPE-NCC-HM-MNT
mnt-by: MNT-BST
created: 2020-02-21T08:44:11Z
last-modified: 2026-05-13T07:07:27Z
source: RIPE # Filtered
role: Abuse-C Role
address: Operations for Internet Census Group
address: https://internet-census.org
nic-hdl: AR59913-RIPE
abuse-mailbox: optout@internet-census.org
mnt-by: MNT-BST
created: 2020-02-21T08:44:10Z
last-modified: 2021-03-12T21:58:21Z
source: RIPE # Filtered
% Information related to '109.105.209.0/24AS21859'
route: 109.105.209.0/24
origin: AS21859
mnt-by: MNT-BST
created: 2025-08-07T21:24:32Z
last-modified: 2025-08-07T21:24:32Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.124.1 (DEXTER); <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.105.209.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63172
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;109.105.209.49. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102801 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 29 00:06:40 CST 2026
;; MSG SIZE rcvd: 10749.209.105.109.in-addr.arpa domain name pointer zl-laxk-us-gp7-wk129c.internet-census.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
49.209.105.109.in-addr.arpa name = zl-laxk-us-gp7-wk129c.internet-census.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 115.78.14.50 | attackspambots | Automatic report - Port Scan Attack |
2019-10-06 15:45:35 |
| 185.176.27.190 | attackspam | Oct 6 09:11:18 mc1 kernel: \[1632283.653698\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34965 PROTO=TCP SPT=41770 DPT=4295 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 6 09:15:12 mc1 kernel: \[1632517.576790\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28094 PROTO=TCP SPT=41770 DPT=4434 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 6 09:17:19 mc1 kernel: \[1632645.303244\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=25502 PROTO=TCP SPT=41770 DPT=4242 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-06 15:18:22 |
| 46.252.205.186 | attackspambots | xmlrpc attack |
2019-10-06 15:26:12 |
| 88.214.26.102 | attack | 10/06/2019-09:18:08.769552 88.214.26.102 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 96 |
2019-10-06 15:45:51 |
| 54.37.159.50 | attackbots | Oct 6 09:14:20 lnxweb62 sshd[28450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.159.50 Oct 6 09:14:20 lnxweb62 sshd[28450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.159.50 |
2019-10-06 15:29:38 |
| 138.59.219.28 | attack | firewall-block, port(s): 80/tcp |
2019-10-06 15:39:48 |
| 137.101.66.37 | attackbots | Automatic report - Port Scan Attack |
2019-10-06 15:57:28 |
| 132.232.53.41 | attackspambots | Oct 6 09:28:57 vps647732 sshd[3113]: Failed password for root from 132.232.53.41 port 41130 ssh2 ... |
2019-10-06 15:45:01 |
| 203.142.69.203 | attackspambots | 2019-10-06T02:05:33.0470741495-001 sshd\[33805\]: Failed password for root from 203.142.69.203 port 41853 ssh2 2019-10-06T02:10:09.7869551495-001 sshd\[34099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.142.69.203 user=root 2019-10-06T02:10:11.9512481495-001 sshd\[34099\]: Failed password for root from 203.142.69.203 port 33346 ssh2 2019-10-06T02:14:55.7201731495-001 sshd\[34375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.142.69.203 user=root 2019-10-06T02:14:57.8142471495-001 sshd\[34375\]: Failed password for root from 203.142.69.203 port 53074 ssh2 2019-10-06T02:19:41.8991721495-001 sshd\[34661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.142.69.203 user=root ... |
2019-10-06 15:47:36 |
| 189.205.177.35 | attackbotsspam | Automatic report - Port Scan Attack |
2019-10-06 15:43:24 |
| 178.32.44.197 | attackbots | Oct 5 21:41:04 sachi sshd\[3185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip197.ip-178-32-44.eu user=root Oct 5 21:41:06 sachi sshd\[3185\]: Failed password for root from 178.32.44.197 port 20969 ssh2 Oct 5 21:45:09 sachi sshd\[3514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip197.ip-178-32-44.eu user=root Oct 5 21:45:11 sachi sshd\[3514\]: Failed password for root from 178.32.44.197 port 42136 ssh2 Oct 5 21:49:16 sachi sshd\[3861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip197.ip-178-32-44.eu user=root |
2019-10-06 15:55:15 |
| 220.134.146.84 | attackspambots | Oct 6 07:02:13 intra sshd\[60666\]: Invalid user Debian@123 from 220.134.146.84Oct 6 07:02:15 intra sshd\[60666\]: Failed password for invalid user Debian@123 from 220.134.146.84 port 52028 ssh2Oct 6 07:06:25 intra sshd\[60730\]: Invalid user Hawaii@123 from 220.134.146.84Oct 6 07:06:27 intra sshd\[60730\]: Failed password for invalid user Hawaii@123 from 220.134.146.84 port 34090 ssh2Oct 6 07:10:37 intra sshd\[60793\]: Invalid user p@$$w0rd2017 from 220.134.146.84Oct 6 07:10:40 intra sshd\[60793\]: Failed password for invalid user p@$$w0rd2017 from 220.134.146.84 port 44382 ssh2 ... |
2019-10-06 15:58:05 |
| 106.12.213.162 | attack | Oct 6 07:09:09 www sshd\[12904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.213.162 user=root Oct 6 07:09:11 www sshd\[12904\]: Failed password for root from 106.12.213.162 port 38328 ssh2 Oct 6 07:13:54 www sshd\[12981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.213.162 user=root ... |
2019-10-06 15:38:11 |
| 123.31.47.20 | attack | 2019-10-06T07:23:18.410436abusebot-3.cloudsearch.cf sshd\[30119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.47.20 user=root |
2019-10-06 15:26:57 |
| 104.236.71.107 | attackbotsspam | 104.236.71.107 - - [06/Oct/2019:05:50:22 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.236.71.107 - - [06/Oct/2019:05:50:23 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.236.71.107 - - [06/Oct/2019:05:50:24 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.236.71.107 - - [06/Oct/2019:05:50:25 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.236.71.107 - - [06/Oct/2019:05:50:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.236.71.107 - - [06/Oct/2019:05:50:26 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-10-06 15:28:10 |