JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.49.23.192

109.49.23.192 was found in our database!

This IP was reported 4,637 times. Confidence of Abuse is 100%: ?

100%

ISP	NOS COMUNICACOES, S.A.
Usage Type	Fixed Line ISP
ASN	AS2860
Hostname(s)	a109-49-23-192.cpe.netcabo.pt
Domain Name	nos.pt
Country	🇵🇹 Portugal
City	Lisbon, Lisbon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.49.23.192

Whois 109.49.23.192

IP Abuse Reports for 109.49.23.192:

This IP address has been reported a total of 4,637 times from 1,178 distinct sources. 109.49.23.192 was first reported on April 9th 2026, and the most recent report was 51 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 chrisj	2026-04-09 15:32:46 (1 month ago)	2026-04-09T15:30:37.467757+00:00 www.diamondaviators.net sshd-session[607394]: Failed password for i ... show more 2026-04-09T15:30:37.467757+00:00 www.diamondaviators.net sshd-session[607394]: Failed password for invalid user admin from 109.49.23.192 port 54672 ssh2 2026-04-09T15:32:42.441949+00:00 www.diamondaviators.net sshd-session[607538]: User root from 109.49.23.192 not allowed because not listed in AllowUsers 2026-04-09T15:32:42.453277+00:00 www.diamondaviators.net sshd-session[607538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 user=root 2026-04-09T15:32:45.124065+00:00 www.diamondaviators.net sshd-session[607538]: Failed password for invalid user root from 109.49.23.192 port 42820 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-04-09 15:32:15 (1 month ago)	109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt), 6 distributed sshd attacks on account [re ... show more 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt), 6 distributed sshd attacks on account [redacted] show less	Brute-Force SSH
🇩🇪 die-partei-reutlingen.de	2026-04-09 15:03:19 (1 month ago)		Brute-Force SSH
🇬🇧 djboddington	2026-04-09 14:55:30 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-slow-bf	SSH Brute-Force
🇺🇸 bigscoots.com	2026-04-09 14:49:35 (1 month ago)	(sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the las ... show more (sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 9 09:44:20 14418 sshd[14021]: Invalid user tpaterni from 109.49.23.192 port 50608 Apr 9 09:44:22 14418 sshd[14021]: Failed password for invalid user tpaterni from 109.49.23.192 port 50608 ssh2 Apr 9 09:47:45 14418 sshd[14512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 user=root Apr 9 09:47:48 14418 sshd[14512]: Failed password for root from 109.49.23.192 port 53184 ssh2 Apr 9 09:49:27 14418 sshd[14781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 user=root show less	Brute-Force SSH
Anonymous	2026-04-09 14:47:47 (1 month ago)	2026-04-09T16:44:21.297894+02:00 vm635618.cloud.nuxt.network sshd[24894]: Failed password for invali ... show more 2026-04-09T16:44:21.297894+02:00 vm635618.cloud.nuxt.network sshd[24894]: Failed password for invalid user tpaterni from 109.49.23.192 port 33986 ssh2 2026-04-09T16:47:44.679488+02:00 vm635618.cloud.nuxt.network sshd[24915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 user=root 2026-04-09T16:47:46.679852+02:00 vm635618.cloud.nuxt.network sshd[24915]: Failed password for root from 109.49.23.192 port 34386 ssh2 ... show less	Brute-Force SSH
🇫🇷 dsl	2026-04-09 14:43:28 (1 month ago)	Apr 9 14:43:25 dabeau sshd[4013]: Invalid user tpaterni from 109.49.23.192 port 36354 Apr 9 14:43: ... show more Apr 9 14:43:25 dabeau sshd[4013]: Invalid user tpaterni from 109.49.23.192 port 36354 Apr 9 14:43:25 dabeau sshd[4013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 Apr 9 14:43:27 dabeau sshd[4013]: Failed password for invalid user tpaterni from 109.49.23.192 port 36354 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-09 14:07:52 (1 month ago)	(sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the las ... show more (sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 9 09:03:14 13966 sshd[9253]: Invalid user ubuntu from 109.49.23.192 port 55120 Apr 9 09:03:17 13966 sshd[9253]: Failed password for invalid user ubuntu from 109.49.23.192 port 55120 ssh2 Apr 9 09:05:54 13966 sshd[9423]: Invalid user vncuser from 109.49.23.192 port 51452 Apr 9 09:05:56 13966 sshd[9423]: Failed password for invalid user vncuser from 109.49.23.192 port 51452 ssh2 Apr 9 09:07:34 13966 sshd[9614]: Invalid user ivan from 109.49.23.192 port 34008 show less	Brute-Force SSH
🇫🇮 Recognize6919	2026-04-09 14:03:39 (1 month ago)	CrowdSec: local/ssh-invalid-user-instant user=ubuntu events=2	Brute-Force SSH
🇺🇸 anon333	2026-04-09 13:33:15 (1 month ago)	Hacker syslog review 1775741595	Hacking
🇰🇷 2048	2026-04-09 13:29:25 (1 month ago)	2026-04-09T22:21:10.474447+09:00 no1 sshd[2842530]: Invalid user testuser from 109.49.23.192 port 36 ... show more 2026-04-09T22:21:10.474447+09:00 no1 sshd[2842530]: Invalid user testuser from 109.49.23.192 port 36754 2026-04-09T22:23:16.626621+09:00 no1 sshd[2842583]: Invalid user erpnext from 109.49.23.192 port 38492 2026-04-09T22:24:48.774373+09:00 no1 sshd[2842627]: Invalid user frappe from 109.49.23.192 port 58160 2026-04-09T22:26:19.199793+09:00 no1 sshd[2843364]: Invalid user admin from 109.49.23.192 port 45254 2026-04-09T22:29:24.642754+09:00 no1 sshd[2843563]: Invalid user odoo from 109.49.23.192 port 33530 ... show less	Brute-Force SSH
🇺🇸 Indexyz	2026-04-09 13:27:24 (1 month ago)	2026-04-09T21:24:20.823895+08:00 hostname sshd-session[3606542]: Invalid user frappe from 109.49.2 ... show more 2026-04-09T21:24:20.823895+08:00 hostname sshd-session[3606542]: Invalid user frappe from 109.49.23.192 port 58888 2026-04-09T21:25:50.787331+08:00 hostname sshd-session[3606557]: Connection from 109.49.23.192 port 37672 on 10.66.0.3 port 22 rdomain "" 2026-04-09T21:25:51.634227+08:00 hostname sshd-session[3606557]: Invalid user admin from 109.49.23.192 port 37672 2026-04-09T21:27:22.689769+08:00 hostname sshd-session[3606566]: Connection from 109.49.23.192 port 34774 on 10.66.0.3 port 22 rdomain "" 2026-04-09T21:27:23.537149+08:00 hostname sshd-session[3606566]: Invalid user ubuntu from 109.49.23.192 port 34774 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-09 13:24:30 (1 month ago)	(sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the las ... show more (sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 9 08:19:33 15252 sshd[9728]: Invalid user testuser from 109.49.23.192 port 37972 Apr 9 08:19:35 15252 sshd[9728]: Failed password for invalid user testuser from 109.49.23.192 port 37972 ssh2 Apr 9 08:22:43 15252 sshd[9979]: Invalid user erpnext from 109.49.23.192 port 45062 Apr 9 08:22:45 15252 sshd[9979]: Failed password for invalid user erpnext from 109.49.23.192 port 45062 ssh2 Apr 9 08:24:18 15252 sshd[10119]: Invalid user frappe from 109.49.23.192 port 52946 show less	Brute-Force SSH
🇺🇸 anon333	2026-04-09 12:46:03 (1 month ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-04-09T12:38:40Z and 2026-04-0 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-04-09T12:38:40Z and 2026-04-09T12:46:03Z show less	Brute-Force SSH
🇰🇷 hanb.jp	2026-04-09 11:59:28 (1 month ago)	Apr 9 11:57:15 v4bgp sshd[3940292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Apr 9 11:57:15 v4bgp sshd[3940292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 Apr 9 11:57:17 v4bgp sshd[3940292]: Failed password for invalid user steam from 109.49.23.192 port 33968 ssh2 Apr 9 11:59:28 v4bgp sshd[3940350]: Invalid user postgres from 109.49.23.192 port 36282 ... show less	Brute-Force SSH

Showing 4576 to 4590 of 4637 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.209

🇺🇸 165.232.137.226

🇺🇸 162.216.150.96

🇵🇱 151.115.60.7

🇺🇸 135.233.96.197

🇲🇲 116.206.193.60

🇨🇳 106.12.83.168

🇮🇱 103.95.119.103

🇮🇳 103.68.52.210

🇳🇱 85.11.167.11

🇺🇸 216.73.216.250

🇩🇪 167.99.135.151

🇮🇩 114.10.47.235

🇨🇳 106.13.109.25

🇺🇸 74.82.47.4

🇫🇷 51.68.111.217

🇩🇪 47.254.134.107

🇺🇸 2a02:4780:b:733:0:277c:e93f:1

🇹🇼 198.235.24.87

🇩🇪 164.92.161.148