City: Daimiel
Region: Comunidad Autónoma de Castilla-La Mancha
Country: Spain
Internet Service Provider: Aire Networks del Mediterráneo, S.L.U.
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '109.167.82.0 - 109.167.82.255'
% Abuse contact for '109.167.82.0 - 109.167.82.255' is 'abuse@airenetworks.es'
inetnum: 109.167.82.0 - 109.167.82.255
netname: AIONARAHALCBLE-NET-2
geoloc: 37.2592771 -5.5434645
country: ES
admin-c: AT14223-RIPE
tech-c: JRV40-RIPE
status: ASSIGNED PA
mnt-by: SERVIHOSTING-MNT
created: 2015-12-02T10:52:39Z
last-modified: 2026-01-13T12:52:14Z
source: RIPE
role: Airenetworks
address: C/Santiago Ramojn y Cajal 11
org: ORG-SNS2-RIPE
nic-hdl: AT14223-RIPE
abuse-mailbox: abuse@servihosting.es
mnt-by: SERVIHOSTING-MNT
created: 2017-08-25T09:33:41Z
last-modified: 2018-06-07T10:31:17Z
source: RIPE # Filtered
admin-c: JMG35-RIPE
admin-c: ZGC2-RIPE
tech-c: EGC5-RIPE
person: Javier Roiz Vazquez
address: Avda Reina de las Marismas,2
phone: +34623407327
nic-hdl: JRV40-RIPE
mnt-by: lir-es-codipro-1-MNT
created: 2025-11-20T16:42:00Z
last-modified: 2025-11-20T16:42:00Z
source: RIPE
% Information related to '109.167.82.0/24AS213686'
route: 109.167.82.0/24
origin: AS213686
mnt-by: SERVIHOSTING-MNT
created: 2025-12-02T10:45:57Z
last-modified: 2025-12-02T10:45:57Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.167.82.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17253
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;109.167.82.111. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026030401 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 05 02:28:08 CST 2026
;; MSG SIZE rcvd: 107111.82.167.109.in-addr.arpa domain name pointer aiontelecomunicaciones.es.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
111.82.167.109.in-addr.arpa name = aiontelecomunicaciones.es.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.30.248 | attackspam | DATE:2020-04-02 14:44:34, IP:222.186.30.248, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) |
2020-04-02 20:45:01 |
| 23.50.54.5 | attackbotsspam | Attempted connection to port 27151. |
2020-04-02 21:06:54 |
| 195.102.186.20 | attackbots | Attempted connection to port 56873. |
2020-04-02 21:26:15 |
| 125.91.32.65 | attack | Apr 2 14:45:02 hell sshd[21016]: Failed password for root from 125.91.32.65 port 25560 ssh2 ... |
2020-04-02 21:00:43 |
| 182.61.105.127 | attackbotsspam | Fail2Ban Ban Triggered |
2020-04-02 21:11:48 |
| 192.162.68.244 | attack | CMS (WordPress or Joomla) login attempt. |
2020-04-02 20:39:54 |
| 199.101.135.211 | attack | Attempted connection to port 4113. |
2020-04-02 21:25:56 |
| 104.168.159.219 | attack | Invalid user zhangzhiyong from 104.168.159.219 port 55412 |
2020-04-02 21:24:19 |
| 163.172.54.8 | attack | [ThuApr0214:47:14.9202992020][:error][pid1854:tid47803671799552][client163.172.54.8:49380][client163.172.54.8]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\^[a-z0-9/\\\\\\\\ \\\\\\\\.\\\\\\\\\;\\\\\\\\-\\\\\\\\\,\\\\\\\\=\\\\"\\\\\\\\%_\\\\\\\\\*] \$"against"REQUEST_HEADERS:Content-Type"required.[file"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf"][line"5671"][id"334168"][rev"8"][msg"Atomicorp.comWAFRules:Requestcontenttypeheadercontainsinvalidcharacters"][data"/"][severity"CRITICAL"][hostname"ilgiornaledelticino.ch"][uri"/"][unique_id"XoXe0u9MrcKmG9IA10MEUAAAANc"]\,referer:https://www.google.com/[ThuApr0214:47:15.4676512020][:error][pid1705:tid47803574613760][client163.172.54.8:49392][client163.172.54.8]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\^[a-z0-9/\\\\\\\\ \\\\\\\\.\\\\\\\\\;\\\\\\\\-\\\\\\\\\,\\\\\\\\=\\\\"\\\\\\\\%_\\\\\\\\\*] \$"against"REQUEST_HEADERS:Content-Type"required.[file"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf"][line"5 |
2020-04-02 21:18:13 |
| 167.71.67.238 | attackspambots | Apr 2 14:34:45 tuxlinux sshd[10469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.67.238 user=root Apr 2 14:34:48 tuxlinux sshd[10469]: Failed password for root from 167.71.67.238 port 45550 ssh2 Apr 2 14:34:45 tuxlinux sshd[10469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.67.238 user=root Apr 2 14:34:48 tuxlinux sshd[10469]: Failed password for root from 167.71.67.238 port 45550 ssh2 Apr 2 14:47:32 tuxlinux sshd[10722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.67.238 user=root ... |
2020-04-02 20:55:09 |
| 89.133.103.216 | attackspam | Tried sshing with brute force. |
2020-04-02 20:58:06 |
| 123.20.113.90 | attackspam | (eximsyntax) Exim syntax errors from 123.20.113.90 (VN/Vietnam/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-04-02 17:17:04 SMTP call from [123.20.113.90] dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?") |
2020-04-02 21:26:45 |
| 139.59.84.29 | attack | Mar 31 04:31:20 cumulus sshd[29787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.29 user=r.r Mar 31 04:31:23 cumulus sshd[29787]: Failed password for r.r from 139.59.84.29 port 49410 ssh2 Mar 31 04:31:23 cumulus sshd[29787]: Received disconnect from 139.59.84.29 port 49410:11: Bye Bye [preauth] Mar 31 04:31:23 cumulus sshd[29787]: Disconnected from 139.59.84.29 port 49410 [preauth] Mar 31 04:44:30 cumulus sshd[30753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.29 user=r.r Mar 31 04:44:33 cumulus sshd[30753]: Failed password for r.r from 139.59.84.29 port 55432 ssh2 Mar 31 04:44:33 cumulus sshd[30753]: Received disconnect from 139.59.84.29 port 55432:11: Bye Bye [preauth] Mar 31 04:44:33 cumulus sshd[30753]: Disconnected from 139.59.84.29 port 55432 [preauth] Mar 31 04:49:16 cumulus sshd[31032]: Invalid user user from 139.59.84.29 port 50670 Mar 31 04:49:16 cumu........ ------------------------------- |
2020-04-02 20:55:35 |
| 192.99.248.131 | attackspambots | Attempted connection to port 59001. |
2020-04-02 21:28:17 |
| 46.38.145.4 | attack | 2020-04-02 16:06:56 dovecot_login authenticator failed for \(User\) \[46.38.145.4\]: 535 Incorrect authentication data \(set_id=ns202@org.ua\)2020-04-02 16:07:27 dovecot_login authenticator failed for \(User\) \[46.38.145.4\]: 535 Incorrect authentication data \(set_id=vh2@org.ua\)2020-04-02 16:07:57 dovecot_login authenticator failed for \(User\) \[46.38.145.4\]: 535 Incorrect authentication data \(set_id=www17@org.ua\) ... |
2020-04-02 21:15:35 |