City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '109.105.210.0 - 109.105.210.255'
% Abuse contact for '109.105.210.0 - 109.105.210.255' is 'optout@internet-census.org'
inetnum: 109.105.210.0 - 109.105.210.255
netname: ICG-ZEN-DFW
descr: ICG-ZEN-DFW
country: US
org: ORG-NSIS5-RIPE
admin-c: AR59913-RIPE
tech-c: AR59913-RIPE
abuse-c: AR59913-RIPE
status: ASSIGNED PA
mnt-by: MNT-BST
created: 2025-07-15T18:21:51Z
last-modified: 2025-09-23T12:34:27Z
source: RIPE
remarks: https://internet-census.org
remarks: Internet Census Group seeks to measure the global Internet with non-intrusive data collection techniques in order to analyze trends and benchmark security performance across a broad range of industries
remarks: We are committed to upholding the security and privacy of the entire online community. As part of that mission, we maintain a list of entities that have contacted us and wish to prevent us from attempting to access their addresses or ports
remarks: To have your IP address added to this list, provide us with the IP addresses you wish to remove via email to: optout@internet-census.org
remarks: Please continue to update us if your IP addresses or networks change so we can continue to keep you opted out. You will receive a confirmation email when completed
organisation: ORG-NSIS5-RIPE
org-name: NSEC - Sistemas Informaticos, S.A.
country: PT
org-type: LIR
address: 111 Huntington Ave Suite 2010
address: MA 02199
address: Boston
address: UNITED STATES
phone: +351217252110
admin-c: DOT14-RIPE
tech-c: DOT14-RIPE
abuse-c: AR59913-RIPE
mnt-ref: MNT-BST
mnt-by: RIPE-NCC-HM-MNT
mnt-by: MNT-BST
created: 2020-02-21T08:44:11Z
last-modified: 2021-05-12T21:00:19Z
source: RIPE # Filtered
role: Abuse-C Role
address: Operations for Internet Census Group
address: https://internet-census.org
nic-hdl: AR59913-RIPE
abuse-mailbox: optout@internet-census.org
mnt-by: MNT-BST
created: 2020-02-21T08:44:10Z
last-modified: 2021-03-12T21:58:21Z
source: RIPE # Filtered
% Information related to '109.105.210.0/24AS21859'
route: 109.105.210.0/24
origin: AS21859
mnt-by: MNT-BST
created: 2025-08-07T21:23:18Z
last-modified: 2025-08-07T21:23:18Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.105.210.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60324
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;109.105.210.63. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026040600 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 06 18:31:35 CST 2026
;; MSG SIZE rcvd: 10763.210.105.109.in-addr.arpa domain name pointer zl-dfwc-us-gp1-wk108b.internet-census.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
63.210.105.109.in-addr.arpa name = zl-dfwc-us-gp1-wk108b.internet-census.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.10.27 | attack | Sep 25 08:30:24 ip-172-31-16-56 sshd\[14985\]: Invalid user kiran from 139.59.10.27\ Sep 25 08:30:26 ip-172-31-16-56 sshd\[14985\]: Failed password for invalid user kiran from 139.59.10.27 port 33304 ssh2\ Sep 25 08:34:43 ip-172-31-16-56 sshd\[15038\]: Invalid user a from 139.59.10.27\ Sep 25 08:34:45 ip-172-31-16-56 sshd\[15038\]: Failed password for invalid user a from 139.59.10.27 port 43190 ssh2\ Sep 25 08:38:59 ip-172-31-16-56 sshd\[15079\]: Invalid user zabbix from 139.59.10.27\ |
2020-09-25 19:01:54 |
| 182.253.168.25 | attackspambots | lfd: (smtpauth) Failed SMTP AUTH login from 182.253.168.25 (-): 5 in the last 3600 secs - Thu Aug 23 12:56:34 2018 |
2020-09-25 18:50:57 |
| 162.243.128.58 | attackspam | TCP port : 9200 |
2020-09-25 19:30:56 |
| 142.93.37.178 | attack | Scan or attack attempt on email service. |
2020-09-25 19:11:06 |
| 103.99.1.140 | attack | lfd: (smtpauth) Failed SMTP AUTH login from 103.99.1.140 (-): 5 in the last 3600 secs - Fri Aug 24 00:04:07 2018 |
2020-09-25 19:00:20 |
| 212.70.149.52 | attack | Sep 25 13:07:33 websrv1.derweidener.de postfix/smtpd[1454483]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 13:07:59 websrv1.derweidener.de postfix/smtpd[1454483]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 13:08:25 websrv1.derweidener.de postfix/smtpd[1454049]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 13:08:50 websrv1.derweidener.de postfix/smtpd[1454483]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 13:09:16 websrv1.derweidener.de postfix/smtpd[1454049]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-25 19:35:10 |
| 218.92.0.168 | attack | 2020-09-25T11:09:13.620023shield sshd\[30779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root 2020-09-25T11:09:15.909915shield sshd\[30779\]: Failed password for root from 218.92.0.168 port 6312 ssh2 2020-09-25T11:09:18.978824shield sshd\[30779\]: Failed password for root from 218.92.0.168 port 6312 ssh2 2020-09-25T11:09:21.469107shield sshd\[30779\]: Failed password for root from 218.92.0.168 port 6312 ssh2 2020-09-25T11:09:24.555092shield sshd\[30779\]: Failed password for root from 218.92.0.168 port 6312 ssh2 |
2020-09-25 19:25:31 |
| 37.59.55.14 | attackbotsspam | bp ssh:notty 37.59.55.14 2020-09-24T10:19:36-0700 - 2020-09-24T10:19:36-0700 (00:00) ... |
2020-09-25 19:26:00 |
| 52.242.84.14 | attackspam | Sep 25 12:50:36 theomazars sshd[1744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.242.84.14 user=root Sep 25 12:50:37 theomazars sshd[1744]: Failed password for root from 52.242.84.14 port 24397 ssh2 |
2020-09-25 19:20:54 |
| 118.97.23.26 | attack | Time: Fri Sep 25 04:37:16 2020 +0000 IP: 118.97.23.26 (ID/Indonesia/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 25 04:19:55 activeserver sshd[8526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.97.23.26 user=root Sep 25 04:19:58 activeserver sshd[8526]: Failed password for root from 118.97.23.26 port 51705 ssh2 Sep 25 04:27:13 activeserver sshd[27375]: Invalid user harry from 118.97.23.26 port 36949 Sep 25 04:27:15 activeserver sshd[27375]: Failed password for invalid user harry from 118.97.23.26 port 36949 ssh2 Sep 25 04:37:14 activeserver sshd[20884]: Invalid user ftpuser from 118.97.23.26 port 47843 |
2020-09-25 18:57:33 |
| 222.209.150.241 | attackbotsspam | Brute force blocker - service: proftpd1 - aantal: 34 - Thu Aug 23 04:40:17 2018 |
2020-09-25 19:10:08 |
| 61.75.51.38 | attack | Sep 25 08:22:53 cp sshd[31652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.75.51.38 |
2020-09-25 19:18:28 |
| 165.227.114.134 | attackspambots | $f2bV_matches |
2020-09-25 18:54:46 |
| 51.254.63.223 | attackbots | Sep 25 10:52:48 marvibiene sshd[16021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.63.223 Sep 25 10:52:51 marvibiene sshd[16021]: Failed password for invalid user jenkins from 51.254.63.223 port 55120 ssh2 Sep 25 10:59:43 marvibiene sshd[16351]: Failed password for root from 51.254.63.223 port 44702 ssh2 |
2020-09-25 19:29:11 |
| 203.217.140.77 | attack | Bruteforce detected by fail2ban |
2020-09-25 19:26:24 |