141.57.252.248

Basic Info

City: Leipzig

Region: Sachsen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.57.252.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49555
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;141.57.252.248.			IN	A

;; AUTHORITY SECTION:
.			112	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022102900 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 29 16:18:36 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 248.252.57.141.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 248.252.57.141.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
198.27.80.123	attackspambots	198.27.80.123 - - [07/Aug/2020:19:39:43 +0100] "POST /wp-login.php HTTP/1.1" 200 4954 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.80.123 - - [07/Aug/2020:19:39:47 +0100] "POST /wp-login.php HTTP/1.1" 200 4954 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.80.123 - - [07/Aug/2020:19:39:54 +0100] "POST /wp-login.php HTTP/1.1" 200 4954 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ...	2020-08-08 02:54:39
139.59.116.115	attack	Aug 7 20:15:20 sip sshd[1226514]: Failed password for root from 139.59.116.115 port 44400 ssh2 Aug 7 20:19:25 sip sshd[1226534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.116.115 user=root Aug 7 20:19:28 sip sshd[1226534]: Failed password for root from 139.59.116.115 port 56108 ssh2 ...	2020-08-08 02:53:29
187.66.212.167	attackspambots	Automatic report - Banned IP Access	2020-08-08 03:18:09
51.38.188.63	attackspam	SSH invalid-user multiple login try	2020-08-08 03:02:09
13.64.18.118	attack	\[2020-08-07 16:36:13\] SECURITY\[22163\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T16:36:13.093+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1310012134311660",SessionID="0x7f0c184496f8",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/13.64.18.118/54892",Challenge="71cfd750",ReceivedChallenge="71cfd750",ReceivedHash="41307493a0647092b11a3474e67514a0" \[2020-08-07 16:47:08\] SECURITY\[22163\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T16:47:08.104+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1320012134311660",SessionID="0x7f0c18385e28",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/13.64.18.118/58914",Challenge="56699348",ReceivedChallenge="56699348",ReceivedHash="eb55ffb32d25815dcbdf54f42448503b" \[2020-08-07 16:58:03\] SECURITY\[22163\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T16:58:03.407+0200",Severity="Error",Service= ...	2020-08-08 03:34:12
124.77.82.237	attack	Unauthorized connection attempt from IP address 124.77.82.237 on Port 445(SMB)	2020-08-08 03:14:27
105.112.28.33	attackbotsspam	Unauthorized connection attempt from IP address 105.112.28.33 on Port 445(SMB)	2020-08-08 03:29:23
113.200.201.29	attackspam	DATE:2020-08-07 14:00:30, IP:113.200.201.29, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq)	2020-08-08 03:32:08
193.227.248.248	attack	Unauthorized connection attempt from IP address 193.227.248.248 on Port 3389(RDP)	2020-08-08 02:56:13
111.72.193.253	attack	Aug 7 13:59:50 srv01 postfix/smtpd\[20656\]: warning: unknown\[111.72.193.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 7 14:00:02 srv01 postfix/smtpd\[20656\]: warning: unknown\[111.72.193.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 7 14:00:19 srv01 postfix/smtpd\[20656\]: warning: unknown\[111.72.193.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 7 14:00:37 srv01 postfix/smtpd\[20656\]: warning: unknown\[111.72.193.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 7 14:00:49 srv01 postfix/smtpd\[20656\]: warning: unknown\[111.72.193.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-08 03:29:07
106.75.35.150	attackbots	Aug 7 12:54:14 Tower sshd[30869]: Connection from 106.75.35.150 port 56630 on 192.168.10.220 port 22 rdomain "" Aug 7 12:54:18 Tower sshd[30869]: Failed password for root from 106.75.35.150 port 56630 ssh2 Aug 7 12:54:18 Tower sshd[30869]: Received disconnect from 106.75.35.150 port 56630:11: Bye Bye [preauth] Aug 7 12:54:18 Tower sshd[30869]: Disconnected from authenticating user root 106.75.35.150 port 56630 [preauth]	2020-08-08 03:33:15
200.251.42.78	attackspambots	Unauthorized connection attempt from IP address 200.251.42.78 on Port 445(SMB)	2020-08-08 03:12:40
109.225.42.156	attack	Unauthorized connection attempt from IP address 109.225.42.156 on Port 445(SMB)	2020-08-08 03:17:39
207.138.217.225	attackspam	TCP (SYN) 207.138.217.225:42546 -> port 23, len 44	2020-08-08 03:23:12
122.252.229.126	attackbots	Port Scan ...	2020-08-08 03:22:25

Recently Reported IPs

31.28.236.255	222.178.210.173	103.232.84.248	29.38.225.71
164.37.170.170	168.212.255.55	161.97.201.212	200.100.21.188
208.98.169.250	203.67.228.231	41.222.72.121	40.252.31.133
190.103.58.45	174.54.134.14	192.154.40.104	190.4.90.110
6.61.130.147	62.242.210.251	72.137.134.75	245.253.133.180