City: Porto
Region: Porto
Country: Portugal
Internet Service Provider: MEO
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 62.28.132.131 | attackspam | Bad mail behaviour |
2019-11-22 00:33:46 |
| 62.28.132.131 | attack | Bad mail behaviour |
2019-11-07 04:08:47 |
| 62.28.132.131 | attack | Bad mail behaviour |
2019-11-01 20:28:09 |
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '62.28.132.96 - 62.28.132.111'
% Abuse contact for '62.28.132.96 - 62.28.132.111' is 'abuse.lir@meo.pt'
inetnum: 62.28.132.96 - 62.28.132.111
netname: CIMAC-NET
descr: CIMAC
descr: RUA 24 DE JULHO, 1
descr: 7000-673 EVORA
country: PT
admin-c: PT4010-RIPE
tech-c: PT4010-RIPE
status: ASSIGNED PA
mnt-by: AS15525-MNT
created: 2009-05-12T14:26:15Z
last-modified: 2019-08-30T14:26:31Z
source: RIPE
role: MEO-EMPRESARIAL
org: ORG-PP3-RIPE
address: Local Internet Registry Management
address: MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A.
address: Av. Fontes Pereira de Melo, 40 - 3 Bl A
address: Forum Picoas - 1069-300 Lisboa
address: Portugal
phone: +351-215000000
admin-c: NPM17-RIPE
admin-c: DPM37-RIPE
admin-c: LAS102-RIPE
admin-c: DL11448-RIPE
admin-c: PR17747-RIPE
nic-hdl: PT4010-RIPE
abuse-mailbox: abuse.lir@meo.pt
mnt-by: AS15525-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2025-09-01T09:20:28Z
source: RIPE # Filtered
% Information related to '62.28.0.0/16AS15525'
route: 62.28.0.0/16
descr: PTPRIMENET
descr: PT Prime - Network Service Provider
origin: AS15525
mnt-by: AS15525-MNT
created: 2006-06-08T12:32:07Z
last-modified: 2006-06-08T12:32:07Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.121.2 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 62.28.132.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54310
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;62.28.132.104. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032301 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 24 03:30:04 CST 2026
;; MSG SIZE rcvd: 106104.132.28.62.in-addr.arpa domain name pointer webmail.drealentejo.pt.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
104.132.28.62.in-addr.arpa name = webmail.drealentejo.pt.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 2a00:23c4:1307:4100:55da:47f6:c7b2:267c | attack | 2020-08-14 21:38:06 | |
| 23.108.254.171 | attackbotsspam | 2020-08-14 21:40:12 | |
| 20.36.37.182 | attack | 2020-08-14 21:50:48 | |
| 104.238.125.133 | attackbotsspam | 104.238.125.133 - - [14/Aug/2020:15:06:40 +0200] "POST /wp-login.php HTTP/1.1" 200 4481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.238.125.133 - - [14/Aug/2020:15:06:42 +0200] "POST /wp-login.php HTTP/1.1" 200 4481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.238.125.133 - - [14/Aug/2020:15:06:44 +0200] "POST /wp-login.php HTTP/1.1" 200 4481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.238.125.133 - - [14/Aug/2020:15:06:45 +0200] "POST /wp-login.php HTTP/1.1" 200 4481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-14 21:58:45 |
| 111.72.195.109 | attack | Aug 14 15:40:21 srv01 postfix/smtpd\[11795\]: warning: unknown\[111.72.195.109\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 14 15:43:48 srv01 postfix/smtpd\[8971\]: warning: unknown\[111.72.195.109\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 14 15:47:19 srv01 postfix/smtpd\[20892\]: warning: unknown\[111.72.195.109\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 14 15:47:31 srv01 postfix/smtpd\[20892\]: warning: unknown\[111.72.195.109\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 14 15:47:49 srv01 postfix/smtpd\[20892\]: warning: unknown\[111.72.195.109\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-08-14 22:04:06 |
| 212.92.106.146 | attackbots | 2020-08-14 21:46:32 | |
| 2.31.247.247 | attack | 2020-08-14 22:00:06 | |
| 134.175.197.158 | attackspambots | Aug 14 08:20:29 bilbo sshd[26799]: User root from 134.175.197.158 not allowed because not listed in AllowUsers Aug 14 08:20:47 bilbo sshd[26801]: User root from 134.175.197.158 not allowed because not listed in AllowUsers Aug 14 08:23:20 bilbo sshd[26936]: User root from 134.175.197.158 not allowed because not listed in AllowUsers Aug 14 08:26:24 bilbo sshd[29100]: User root from 134.175.197.158 not allowed because not listed in AllowUsers ... |
2020-08-14 21:52:48 |
| 222.186.175.182 | attackspam | Aug 14 04:04:16 php1 sshd\[12055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root Aug 14 04:04:18 php1 sshd\[12055\]: Failed password for root from 222.186.175.182 port 42666 ssh2 Aug 14 04:04:21 php1 sshd\[12055\]: Failed password for root from 222.186.175.182 port 42666 ssh2 Aug 14 04:04:24 php1 sshd\[12055\]: Failed password for root from 222.186.175.182 port 42666 ssh2 Aug 14 04:04:28 php1 sshd\[12055\]: Failed password for root from 222.186.175.182 port 42666 ssh2 |
2020-08-14 22:09:25 |
| 2.47.39.223 | attackbotsspam | 2020-08-14 21:51:25 | |
| 93.174.93.195 | attack |
|
2020-08-14 22:02:53 |
| 23.80.97.37 | attackspam | 2020-08-14 21:41:27 | |
| 185.103.110.204 | attackspam | 2020-08-14 22:18:29 | |
| 188.166.185.157 | attackspambots | 20 attempts against mh-ssh on echoip |
2020-08-14 22:19:00 |
| 222.186.175.215 | attackspam | 2020-08-14T16:49:10.664120afi-git.jinr.ru sshd[3604]: Failed password for root from 222.186.175.215 port 52820 ssh2 2020-08-14T16:49:14.586338afi-git.jinr.ru sshd[3604]: Failed password for root from 222.186.175.215 port 52820 ssh2 2020-08-14T16:49:20.674135afi-git.jinr.ru sshd[3604]: Failed password for root from 222.186.175.215 port 52820 ssh2 2020-08-14T16:49:20.674268afi-git.jinr.ru sshd[3604]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 52820 ssh2 [preauth] 2020-08-14T16:49:20.674283afi-git.jinr.ru sshd[3604]: Disconnecting: Too many authentication failures [preauth] ... |
2020-08-14 21:51:52 |