City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '109.105.209.0 - 109.105.209.255'
% Abuse contact for '109.105.209.0 - 109.105.209.255' is 'optout@internet-census.org'
inetnum: 109.105.209.0 - 109.105.209.255
netname: ICG-ZEN-LAX-1
descr: ICG-ZEN-LAX-1
country: US
org: ORG-NSIS5-RIPE
admin-c: AR59913-RIPE
tech-c: AR59913-RIPE
abuse-c: AR59913-RIPE
status: ASSIGNED PA
mnt-by: MNT-BST
created: 2025-07-15T18:20:43Z
last-modified: 2026-02-20T14:52:49Z
source: RIPE
remarks: https://internet-census.org
remarks: Internet Census Group seeks to measure the global Internet with non-intrusive data collection techniques in order to analyze trends and benchmark security performance across a broad range of industries
remarks: We are committed to upholding the security and privacy of the entire online community. As part of that mission, we maintain a list of entities that have contacted us and wish to prevent us from attempting to access their addresses or ports
remarks: To have your IP address added to this list, provide us with the IP addresses you wish to remove via email to: optout@internet-census.org
remarks: Please continue to update us if your IP addresses or networks change so we can continue to keep you opted out. You will receive a confirmation email when completed
organisation: ORG-NSIS5-RIPE
org-name: NSEC - Sistemas Informaticos, S.A.
country: PT
reg-nr: 507524845
org-type: LIR
address: 111 Huntington Ave Suite 2010
address: MA 02199
address: Boston
address: UNITED STATES
phone: +351217252110
admin-c: DOT14-RIPE
tech-c: DOT14-RIPE
abuse-c: AR59913-RIPE
mnt-ref: MNT-BST
mnt-by: RIPE-NCC-HM-MNT
mnt-by: MNT-BST
created: 2020-02-21T08:44:11Z
last-modified: 2026-05-13T07:07:27Z
source: RIPE # Filtered
role: Abuse-C Role
address: Operations for Internet Census Group
address: https://internet-census.org
nic-hdl: AR59913-RIPE
abuse-mailbox: optout@internet-census.org
mnt-by: MNT-BST
created: 2020-02-21T08:44:10Z
last-modified: 2021-03-12T21:58:21Z
source: RIPE # Filtered
% Information related to '109.105.209.0/24AS21859'
route: 109.105.209.0/24
origin: AS21859
mnt-by: MNT-BST
created: 2025-08-07T21:24:32Z
last-modified: 2025-08-07T21:24:32Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.124.1 (DEXTER); <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.105.209.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34664
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;109.105.209.80. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110600 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 07 01:00:12 CST 2026
;; MSG SIZE rcvd: 10780.209.105.109.in-addr.arpa domain name pointer zl-laxk-us-gp7-wk122d.internet-census.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
80.209.105.109.in-addr.arpa name = zl-laxk-us-gp7-wk122d.internet-census.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.43.38.69 | attackspambots | Unauthorised access (Oct 17) SRC=114.43.38.69 LEN=40 PREC=0x20 TTL=51 ID=13485 TCP DPT=23 WINDOW=60903 SYN |
2019-10-18 00:27:39 |
| 62.117.12.62 | attackspambots | Oct 17 13:15:38 thevastnessof sshd[24894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.117.12.62 ... |
2019-10-18 00:37:05 |
| 171.244.51.114 | attackspam | Oct 17 03:18:48 auw2 sshd\[13444\]: Invalid user wsxcde32 from 171.244.51.114 Oct 17 03:18:48 auw2 sshd\[13444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.51.114 Oct 17 03:18:50 auw2 sshd\[13444\]: Failed password for invalid user wsxcde32 from 171.244.51.114 port 33650 ssh2 Oct 17 03:25:50 auw2 sshd\[13954\]: Invalid user speedway from 171.244.51.114 Oct 17 03:25:50 auw2 sshd\[13954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.51.114 |
2019-10-18 00:34:09 |
| 142.93.214.20 | attack | Jan 20 22:26:14 odroid64 sshd\[13571\]: Invalid user teampspeak from 142.93.214.20 Jan 20 22:26:14 odroid64 sshd\[13571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 Jan 20 22:26:16 odroid64 sshd\[13571\]: Failed password for invalid user teampspeak from 142.93.214.20 port 56690 ssh2 Feb 2 01:13:49 odroid64 sshd\[11470\]: Invalid user ansible from 142.93.214.20 Feb 2 01:13:49 odroid64 sshd\[11470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 Feb 2 01:13:51 odroid64 sshd\[11470\]: Failed password for invalid user ansible from 142.93.214.20 port 44756 ssh2 Mar 2 11:42:42 odroid64 sshd\[28395\]: Invalid user web1 from 142.93.214.20 Mar 2 11:42:42 odroid64 sshd\[28395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 Mar 2 11:42:43 odroid64 sshd\[28395\]: Failed password for invalid user web1 from 142.93. ... |
2019-10-18 00:45:55 |
| 49.235.134.224 | attack | Unauthorized SSH login attempts |
2019-10-18 00:53:07 |
| 27.213.80.93 | attackbotsspam | Unauthorised access (Oct 17) SRC=27.213.80.93 LEN=40 TTL=49 ID=54059 TCP DPT=8080 WINDOW=35629 SYN Unauthorised access (Oct 15) SRC=27.213.80.93 LEN=40 TTL=49 ID=17143 TCP DPT=8080 WINDOW=62395 SYN Unauthorised access (Oct 14) SRC=27.213.80.93 LEN=40 TTL=49 ID=36631 TCP DPT=8080 WINDOW=39232 SYN |
2019-10-18 00:55:19 |
| 27.18.144.66 | attackspam | 5x Failed Password |
2019-10-18 01:01:27 |
| 69.117.224.87 | attackbots | 2019-10-17T22:50:02.847288enmeeting.mahidol.ac.th sshd\[11366\]: User root from ool-4575e057.dyn.optonline.net not allowed because not listed in AllowUsers 2019-10-17T22:50:02.972705enmeeting.mahidol.ac.th sshd\[11366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ool-4575e057.dyn.optonline.net user=root 2019-10-17T22:50:05.564863enmeeting.mahidol.ac.th sshd\[11366\]: Failed password for invalid user root from 69.117.224.87 port 40596 ssh2 ... |
2019-10-18 01:00:13 |
| 47.51.23.169 | attackbots | Automatic report - Port Scan Attack |
2019-10-18 00:35:34 |
| 46.20.205.233 | attack | 2019/10/17 11:39:25 \[error\] 25516\#0: \*25028 An error occurred in mail zmauth: user not found:bishop_jodi@*fathog.com while SSL handshaking to lookup handler, client: 46.20.205.233:52846, server: 45.79.145.195:993, login: "bishop_jodi@*fathog.com" |
2019-10-18 00:38:24 |
| 89.191.102.78 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/89.191.102.78/ LV - 1H : (7) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : LV NAME ASN : ASN20910 IP : 89.191.102.78 CIDR : 89.191.96.0/19 PREFIX COUNT : 31 UNIQUE IP COUNT : 272384 WYKRYTE ATAKI Z ASN20910 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-17 13:39:12 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-10-18 00:44:31 |
| 207.180.239.212 | attack | Invalid user mdpi from 207.180.239.212 port 35318 |
2019-10-18 00:53:59 |
| 128.199.52.45 | attackbotsspam | Jan 31 12:27:53 odroid64 sshd\[22658\]: Invalid user miqueas from 128.199.52.45 Jan 31 12:27:53 odroid64 sshd\[22658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.52.45 Jan 31 12:27:54 odroid64 sshd\[22658\]: Failed password for invalid user miqueas from 128.199.52.45 port 51210 ssh2 Mar 10 18:14:32 odroid64 sshd\[3393\]: Invalid user admin from 128.199.52.45 Mar 10 18:14:32 odroid64 sshd\[3393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.52.45 Mar 10 18:14:34 odroid64 sshd\[3393\]: Failed password for invalid user admin from 128.199.52.45 port 33630 ssh2 Mar 15 20:42:35 odroid64 sshd\[24596\]: Invalid user sd from 128.199.52.45 Mar 15 20:42:35 odroid64 sshd\[24596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.52.45 Mar 15 20:42:37 odroid64 sshd\[24596\]: Failed password for invalid user sd from 128.199.52.45 port 57272 ... |
2019-10-18 00:58:09 |
| 81.4.125.221 | attackbotsspam | $f2bV_matches |
2019-10-18 00:29:23 |
| 122.115.230.183 | attackspambots | 2019-10-17T23:47:44.711908enmeeting.mahidol.ac.th sshd\[11910\]: User root from 122.115.230.183 not allowed because not listed in AllowUsers 2019-10-17T23:47:44.833710enmeeting.mahidol.ac.th sshd\[11910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.115.230.183 user=root 2019-10-17T23:47:46.440805enmeeting.mahidol.ac.th sshd\[11910\]: Failed password for invalid user root from 122.115.230.183 port 34424 ssh2 ... |
2019-10-18 00:50:17 |