JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.49.23.192

109.49.23.192 was found in our database!

This IP was reported 4,633 times. Confidence of Abuse is 100%: ?

100%

ISP	NOS COMUNICACOES, S.A.
Usage Type	Fixed Line ISP
ASN	AS2860
Hostname(s)	a109-49-23-192.cpe.netcabo.pt
Domain Name	nos.pt
Country	🇵🇹 Portugal
City	Lisbon, Lisbon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.49.23.192

Whois 109.49.23.192

IP Abuse Reports for 109.49.23.192:

This IP address has been reported a total of 4,633 times from 1,178 distinct sources. 109.49.23.192 was first reported on April 9th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ScanThe.Net	2026-04-11 03:46:54 (1 month ago)	ID: 2386643423 \| PORT: 58604 \| https://109-49-23-192.scanthe.net	Port Scan
🇩🇪 ipcop.net	2026-04-11 03:10:33 (1 month ago)	2026-04-11T05:04:49.666144+02:00 mqtt-host01.mqtt.srvfarm.net sshd[51860]: Disconnected from authent ... show more 2026-04-11T05:04:49.666144+02:00 mqtt-host01.mqtt.srvfarm.net sshd[51860]: Disconnected from authenticating user root 109.49.23.192 port 48532 [preauth] 2026-04-11T05:09:01.515993+02:00 mqtt-host01.mqtt.srvfarm.net sshd[52074]: Invalid user user from 109.49.23.192 port 36460 2026-04-11T05:09:01.580510+02:00 mqtt-host01.mqtt.srvfarm.net sshd[52074]: Disconnected from invalid user user 109.49.23.192 port 36460 [preauth] 2026-04-11T05:10:32.081611+02:00 mqtt-host01.mqtt.srvfarm.net sshd[52168]: Invalid user git from 109.49.23.192 port 59582 2026-04-11T05:10:32.156602+02:00 mqtt-host01.mqtt.srvfarm.net sshd[52168]: Disconnected from invalid user git 109.49.23.192 port 59582 [preauth] show less	Brute-Force
🇺🇸 yzfdude1	2026-04-11 03:09:58 (1 month ago)	Apr 10 21:09:55 b146-03 sshd[763289]: Invalid user user from 109.49.23.192 port 37232 Apr 10 21:09:5 ... show more Apr 10 21:09:55 b146-03 sshd[763289]: Invalid user user from 109.49.23.192 port 37232 Apr 10 21:09:55 b146-03 sshd[763289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 Apr 10 21:09:57 b146-03 sshd[763289]: Failed password for invalid user user from 109.49.23.192 port 37232 ssh2 ... show less	Brute-Force SSH
🇩🇪 tentwentyfour	2026-04-11 03:09:05 (1 month ago)	2026-04-11T05:05:01.380905+02:00 adsns-web-node1 sshd[1343014]: Failed password for root from 109.49 ... show more 2026-04-11T05:05:01.380905+02:00 adsns-web-node1 sshd[1343014]: Failed password for root from 109.49.23.192 port 46216 ssh2 2026-04-11T05:05:02.585154+02:00 adsns-web-node1 sshd[1343014]: Disconnected from authenticating user root 109.49.23.192 port 46216 [preauth] 2026-04-11T05:09:04.292180+02:00 adsns-web-node1 sshd[1357626]: Invalid user user from 109.49.23.192 port 39186 ... show less	Brute-Force SSH
🇺🇸 RidgeStar	2026-04-11 03:02:03 (1 month ago)	2026-04-10T20:02:02-07:00: Failed password for invalid user metabase from 109.49.23.192 port 53718 s ... show more 2026-04-10T20:02:02-07:00: Failed password for invalid user metabase from 109.49.23.192 port 53718 ssh2 2026-04-10T20:00:33-07:00: Failed password for invalid user root from 109.49.23.192 port 41070 ssh2 2026-04-10T20:00:32-07:00: Failed password for invalid user root from 109.49.23.192 port 41070 ssh2 2026-04-10T19:58:59-07:00: Failed password for invalid user root from 109.49.23.192 port 53092 ssh2 2026-04-10T19:58:59-07:00: Failed password for invalid user root from 109.49.23.192 port 53092 ssh2 2026-04-10T19:57:31-07:00: Failed password for invalid user root from 109.49.23.192 port 46086 ssh2 2026-04-10T19:57:31-07:00: Failed password for invalid user root from 109.49.23.192 port 46086 ssh2 2026-04-10T19:56:03-07:00: Failed password for invalid user ftpuser2 from 109.49.23.192 port 43414 ssh2 2026-04-10T19:56:03-07:00: Failed password for invalid user ftpuser2 from 109.49.23.192 port 43414 ssh2 2026-04-10T19:54:33-07:00: Failed password for invalid user git-admin from 109.49.23.192 port 54860 ssh2 show less	Brute-Force SSH
🇺🇸 RidgeStar	2026-04-11 02:45:49 (1 month ago)	2026-04-10T19:45:49-07:00: Failed password for invalid user test from 109.49.23.192 port 48946 ssh2 ... show more 2026-04-10T19:45:49-07:00: Failed password for invalid user test from 109.49.23.192 port 48946 ssh2 2026-04-10T19:44:20-07:00: Failed password for invalid user root from 109.49.23.192 port 48214 ssh2 2026-04-10T19:44:20-07:00: Failed password for invalid user root from 109.49.23.192 port 48214 ssh2 2026-04-10T19:42:51-07:00: Failed password for invalid user root from 109.49.23.192 port 56608 ssh2 2026-04-10T19:42:50-07:00: Failed password for invalid user root from 109.49.23.192 port 56608 ssh2 2026-04-10T19:41:15-07:00: Failed password for invalid user odoo from 109.49.23.192 port 49566 ssh2 2026-04-10T19:41:15-07:00: Failed password for invalid user odoo from 109.49.23.192 port 49566 ssh2 2026-04-10T19:39:44-07:00: Failed password for invalid user root from 109.49.23.192 port 60152 ssh2 2026-04-10T19:39:44-07:00: Failed password for invalid user root from 109.49.23.192 port 60152 ssh2 2026-04-10T19:38:19-07:00: Failed password for invalid user deploy from 109.49.23.192 port 47830 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-11 02:29:41 (1 month ago)	(sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the las ... show more (sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 10 21:24:34 15002 sshd[12464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 user=root Apr 10 21:24:36 15002 sshd[12464]: Failed password for root from 109.49.23.192 port 34458 ssh2 Apr 10 21:28:02 15002 sshd[12738]: Invalid user minecraft from 109.49.23.192 port 54484 Apr 10 21:28:04 15002 sshd[12738]: Failed password for invalid user minecraft from 109.49.23.192 port 54484 ssh2 Apr 10 21:29:37 15002 sshd[12808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 user=root show less	Brute-Force SSH
🇺🇸 RidgeStar	2026-04-11 02:29:37 (1 month ago)	2026-04-10T19:29:36-07:00: Failed password for invalid user root from 109.49.23.192 port 58958 ssh2 ... show more 2026-04-10T19:29:36-07:00: Failed password for invalid user root from 109.49.23.192 port 58958 ssh2 2026-04-10T19:28:01-07:00: Failed password for invalid user minecraft from 109.49.23.192 port 35406 ssh2 2026-04-10T19:28:01-07:00: Failed password for invalid user minecraft from 109.49.23.192 port 35406 ssh2 2026-04-10T19:24:26-07:00: Failed password for invalid user root from 109.49.23.192 port 50204 ssh2 2026-04-10T19:24:26-07:00: Failed password for invalid user root from 109.49.23.192 port 50204 ssh2 show less	Brute-Force SSH
🇫🇷 elf	2026-04-11 02:28:36 (1 month ago)	[Fail2Ban]: Jail sshd triggered 3 time(s) for 109.49.23.192. Apr 11 04:26:22 - sshd[148016]: Failed ... show more [Fail2Ban]: Jail sshd triggered 3 time(s) for 109.49.23.192. Apr 11 04:26:22 - sshd[148016]: Failed password for root from 109.49.23.192 port 43722 ssh2 Apr 11 04:26:22 - sshd[148016]: Disconnected from authenticating user root 109.49.23.192 port 43722 [preauth] Apr 11 04:28:35 - sshd[148366]: Invalid user minecraft from 109.49.23.192 port 38292 ... show less	Brute-Force SSH
🇭🇰 bluecloudwork	2026-04-11 02:28:08 (1 month ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇺🇸 psh-ack	2026-04-11 01:52:09 (1 month ago)	Exploited SSH w/ 3 creds (345gs5662d34/345gs5662d34, root/!QAZ7ujm, root/3245gs5662d34) via libssh 0 ... show more Exploited SSH w/ 3 creds (345gs5662d34/345gs5662d34, root/!QAZ7ujm, root/3245gs5662d34) via libssh 0.11.1. Injected RSA pubkey AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXx into authorized_keys for persistence. Removed existing .ssh dir, recreated it, injected key for passwordless access. Attempted immutability flags via chattr/lockr to prevent key removal. Attack executed in ~10sec across 2 sessions indicating automation. Creds suggest credential stuffing/brute force. libssh 0.11.1 has known CVEs—verify patch status. Standard post-exploitation persistence activity consistent w/ botnet compromise or automated exploitation framework targeting misconfigured/vulnerable SSH. show less	Brute-Force SSH
🇩🇪 herbarex	2026-04-11 01:48:18 (1 month ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-11 01:46:48 (1 month ago)	109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt), 5 distributed sshd attacks on account [ro ... show more 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 10 20:44:07 14664 sshd[20451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 user=root Apr 10 20:44:09 14664 sshd[20451]: Failed password for root from 109.49.23.192 port 40538 ssh2 Apr 10 20:46:32 14664 sshd[20804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.114.92.75 user=root Apr 10 20:46:34 14664 sshd[20804]: Failed password for root from 42.114.92.75 port 44420 ssh2 Apr 10 19:54:50 14664 sshd[13075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.123.117 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-11 01:32:07 (1 month ago)	Malicious activity detected from 109.49.23.192.	Brute-Force
🇭🇰 amyriad	2026-04-11 01:28:17 (1 month ago)	2026-04-11T09:13:40.424788+08:00 twy-ubuntu sshd[849141]: Invalid user ubuntu from 109.49.23.192 por ... show more 2026-04-11T09:13:40.424788+08:00 twy-ubuntu sshd[849141]: Invalid user ubuntu from 109.49.23.192 port 40482 2026-04-11T09:16:29.013380+08:00 twy-ubuntu sshd[849196]: Invalid user scuser from 109.49.23.192 port 44388 2026-04-11T09:23:52.001642+08:00 twy-ubuntu sshd[849356]: Invalid user naveen from 109.49.23.192 port 60064 2026-04-11T09:26:54.596534+08:00 twy-ubuntu sshd[849407]: Invalid user postgres from 109.49.23.192 port 44412 2026-04-11T09:28:16.605528+08:00 twy-ubuntu sshd[849431]: Invalid user ftpuser from 109.49.23.192 port 46358 ... show less	DDoS Attack Hacking Brute-Force

Showing 4411 to 4425 of 4633 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇩🇪 167.94.146.58

🇧🇷 143.208.233.84

🇺🇸 2603:800c:7540:84a:8c7b:b827:3dc:b998

🇮🇩 203.83.39.26

🇧🇷 187.40.199.90

🇺🇸 172.210.68.2

🇺🇸 143.244.182.33

🇸🇬 118.194.233.182

🇺🇸 50.116.72.139

🇳🇱 45.148.10.141

🇯🇵 43.130.229.228

🇺🇸 23.239.21.103

🇸🇦 2001:16a4:620:1915:1b72:f49e:5cd6:fdfb

🇰🇷 221.167.21.148

🇫🇷 213.32.23.140

🇺🇸 172.105.147.205

🇺🇸 172.86.114.38

🇺🇸 162.216.150.72

🇫🇮 147.185.133.171