Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: Nos Comunicacoes S.A.

Hostname: unknown

Organization: unknown

Usage Type: Mobile ISP

Comments:
Type Details Datetime
attackbotsspam
Aug 26 14:34:29 server postfix/smtpd[26653]: NOQUEUE: reject: RCPT from a109-48-97-80.cpe.netcabo.pt[109.48.97.80]: 554 5.7.1 Service unavailable; Client host [109.48.97.80] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/109.48.97.80; from= to= proto=ESMTP helo=
2020-08-27 03:09:31
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.48.97.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58948
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;109.48.97.80.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082601 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 27 03:09:27 CST 2020
;; MSG SIZE  rcvd: 116
Host info
80.97.48.109.in-addr.arpa domain name pointer a109-48-97-80.cpe.netcabo.pt.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
80.97.48.109.in-addr.arpa	name = a109-48-97-80.cpe.netcabo.pt.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
134.255.57.137 attackspam
C1,WP GET /wp-login.php
2020-10-02 04:18:30
45.148.10.65 attackspam
Oct  1 21:58:04 abendstille sshd\[28185\]: Invalid user serveracsess from 45.148.10.65
Oct  1 21:58:04 abendstille sshd\[28185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.65
Oct  1 21:58:07 abendstille sshd\[28185\]: Failed password for invalid user serveracsess from 45.148.10.65 port 54530 ssh2
Oct  1 21:58:37 abendstille sshd\[28646\]: Invalid user 123456 from 45.148.10.65
Oct  1 21:58:37 abendstille sshd\[28646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.65
...
2020-10-02 04:44:10
180.76.242.204 attackbotsspam
Oct  1 19:58:37 ip-172-31-42-142 sshd\[1327\]: Invalid user servidor from 180.76.242.204\
Oct  1 19:58:39 ip-172-31-42-142 sshd\[1327\]: Failed password for invalid user servidor from 180.76.242.204 port 50320 ssh2\
Oct  1 20:02:56 ip-172-31-42-142 sshd\[1368\]: Invalid user stefano from 180.76.242.204\
Oct  1 20:02:59 ip-172-31-42-142 sshd\[1368\]: Failed password for invalid user stefano from 180.76.242.204 port 54006 ssh2\
Oct  1 20:07:09 ip-172-31-42-142 sshd\[1422\]: Failed password for root from 180.76.242.204 port 57692 ssh2\
2020-10-02 04:08:04
219.122.83.212 attackspam
Lines containing failures of 219.122.83.212
Übereinsservermungen in Binärdatei /var/log/apache/pucorp.org.log


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=219.122.83.212
2020-10-02 04:38:04
165.232.106.174 attack
Port Scan: TCP/6969
2020-10-02 04:40:37
104.224.183.154 attackbotsspam
2020-10-01T19:07:16.009226hostname sshd[3262]: Failed password for invalid user music from 104.224.183.154 port 59106 ssh2
...
2020-10-02 04:19:32
197.216.101.166 attack
Lines containing failures of 197.216.101.166
Sep 30 22:28:20 shared07 sshd[24180]: Did not receive identification string from 197.216.101.166 port 55715
Sep 30 22:28:33 shared07 sshd[24194]: Invalid user user1 from 197.216.101.166 port 56183
Sep 30 22:28:34 shared07 sshd[24194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.216.101.166
Sep 30 22:28:36 shared07 sshd[24194]: Failed password for invalid user user1 from 197.216.101.166 port 56183 ssh2
Sep 30 22:28:36 shared07 sshd[24194]: Connection closed by invalid user user1 197.216.101.166 port 56183 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.216.101.166
2020-10-02 04:27:23
128.14.229.158 attack
Oct  1 18:25:57 scw-tender-jepsen sshd[398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.229.158
Oct  1 18:26:00 scw-tender-jepsen sshd[398]: Failed password for invalid user opc from 128.14.229.158 port 39332 ssh2
2020-10-02 04:29:40
157.230.93.183 attackbots
Oct  1 20:01:14 email sshd\[27691\]: Invalid user user from 157.230.93.183
Oct  1 20:01:14 email sshd\[27691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.93.183
Oct  1 20:01:16 email sshd\[27691\]: Failed password for invalid user user from 157.230.93.183 port 40576 ssh2
Oct  1 20:04:43 email sshd\[28296\]: Invalid user mcadmin from 157.230.93.183
Oct  1 20:04:43 email sshd\[28296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.93.183
...
2020-10-02 04:14:09
211.252.86.82 attackbots
2020-10-01T19:43:31.390209abusebot-2.cloudsearch.cf sshd[17877]: Invalid user internet from 211.252.86.82 port 52561
2020-10-01T19:43:31.395536abusebot-2.cloudsearch.cf sshd[17877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.86.82
2020-10-01T19:43:31.390209abusebot-2.cloudsearch.cf sshd[17877]: Invalid user internet from 211.252.86.82 port 52561
2020-10-01T19:43:32.907632abusebot-2.cloudsearch.cf sshd[17877]: Failed password for invalid user internet from 211.252.86.82 port 52561 ssh2
2020-10-01T19:47:34.218228abusebot-2.cloudsearch.cf sshd[17930]: Invalid user steam from 211.252.86.82 port 56319
2020-10-01T19:47:34.225317abusebot-2.cloudsearch.cf sshd[17930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.86.82
2020-10-01T19:47:34.218228abusebot-2.cloudsearch.cf sshd[17930]: Invalid user steam from 211.252.86.82 port 56319
2020-10-01T19:47:35.767061abusebot-2.cloudsearch.cf sshd[17930
...
2020-10-02 04:44:34
181.49.236.4 attackbotsspam
 TCP (SYN) 181.49.236.4:10045 -> port 81, len 40
2020-10-02 04:10:57
138.99.79.192 attackspam
DATE:2020-09-30 22:38:59, IP:138.99.79.192, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-10-02 04:31:18
37.212.59.5 attack
445/tcp 445/tcp
[2020-09-30]2pkt
2020-10-02 04:32:02
106.107.222.10 attackspambots
5555/tcp
[2020-09-30]1pkt
2020-10-02 04:23:50
61.52.168.156 attackbots
TCP Port Scanning
2020-10-02 04:15:29

Recently Reported IPs

187.144.215.213 220.133.64.147 171.101.94.190 198.57.27.65
250.214.15.8 91.118.117.86 151.67.189.83 148.65.3.98
220.41.236.214 109.166.36.202 68.119.104.178 85.97.121.108
222.242.104.61 69.10.62.109 144.254.158.111 68.183.129.49
141.236.155.76 80.254.120.190 142.44.181.182 37.214.230.13