City: Nuremberg
Region: Bavaria
Country: Germany
Internet Service Provider: Contabo GmbH
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Jun 3 12:06:38 nxxxxxxx0 sshd[8981]: Did not receive identification string from 164.68.105.228 Jun 3 12:07:38 nxxxxxxx0 sshd[9068]: Address 164.68.105.228 maps to melion.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 3 12:07:38 nxxxxxxx0 sshd[9068]: Invalid user soundcode from 164.68.105.228 Jun 3 12:07:38 nxxxxxxx0 sshd[9068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.228 Jun 3 12:07:40 nxxxxxxx0 sshd[9068]: Failed password for invalid user soundcode from 164.68.105.228 port 34484 ssh2 Jun 3 12:07:40 nxxxxxxx0 sshd[9068]: Received disconnect from 164.68.105.228: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 12:07:43 nxxxxxxx0 sshd[9072]: Address 164.68.105.228 maps to melion.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 3 12:07:43 nxxxxxxx0 sshd[9072]: Invalid user aerospike from 164.68.105.228 Jun 3 12:07:43 nxxxxxxx0 sshd[........ ------------------------------- |
2020-06-06 07:13:55 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 164.68.105.199 | attack | Bokeh |
2024-06-20 15:59:45 |
| 164.68.105.199 | attack | Xnxx |
2024-06-20 15:59:34 |
| 164.68.105.199 | attack | Xnxx |
2024-06-20 15:59:26 |
| 164.68.105.199 | attack | Xnxx |
2024-06-20 15:59:21 |
| 164.68.105.165 | attack | Found on Block CINS-badguys / proto=6 . srcport=41861 . dstport=5038 . (2483) |
2020-09-28 04:30:37 |
| 164.68.105.165 | attackbotsspam |
|
2020-09-27 20:47:35 |
| 164.68.105.165 | attackbotsspam |
|
2020-09-27 12:25:05 |
| 164.68.105.165 | attackspam | 5038/tcp 5038/tcp [2020-09-15/19]2pkt |
2020-09-20 02:59:21 |
| 164.68.105.165 | attack | " " |
2020-09-19 18:59:19 |
| 164.68.105.131 | attackspambots | Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: Invalid user gmodserver from 164.68.105.131 Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131 Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: Invalid user gmodserver from 164.68.105.131 Aug 16 15:57:40 srv-ubuntu-dev3 sshd[102030]: Failed password for invalid user gmodserver from 164.68.105.131 port 55996 ssh2 Aug 16 16:01:29 srv-ubuntu-dev3 sshd[102595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131 user=root Aug 16 16:01:31 srv-ubuntu-dev3 sshd[102595]: Failed password for root from 164.68.105.131 port 37242 ssh2 Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028]: Invalid user hannes from 164.68.105.131 Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131 Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028 ... |
2020-08-16 22:14:43 |
| 164.68.105.78 | attack | Mar 19 17:00:51 saengerschafter sshd[29883]: Failed password for jira from 164.68.105.78 port 37546 ssh2 Mar 19 17:00:51 saengerschafter sshd[29883]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth] Mar 19 17:06:22 saengerschafter sshd[30288]: Failed password for r.r from 164.68.105.78 port 40498 ssh2 Mar 19 17:06:22 saengerschafter sshd[30288]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth] Mar 19 17:09:26 saengerschafter sshd[30746]: Failed password for r.r from 164.68.105.78 port 47708 ssh2 Mar 19 17:09:26 saengerschafter sshd[30746]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth] Mar 19 17:12:35 saengerschafter sshd[30860]: Failed password for r.r from 164.68.105.78 port 54914 ssh2 Mar 19 17:12:35 saengerschafter sshd[30860]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth] Mar 19 17:15:38 saengerschafter sshd[31263]: Failed password for r.r from 164.68.105.78 port 33898 ssh2 Mar 19 17:15:38 saengerschafter ssh........ ------------------------------- |
2020-03-22 19:53:29 |
| 164.68.105.78 | attackspam | ... |
2020-03-21 20:00:24 |
| 164.68.105.70 | attackspambots | Port 22 Scan, PTR: None |
2019-12-29 03:22:00 |
| 164.68.105.103 | attackbots | Oct 6 20:51:31 new sshd[24599]: Failed password for r.r from 164.68.105.103 port 58796 ssh2 Oct 6 20:51:31 new sshd[24599]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 20:56:35 new sshd[25903]: Failed password for r.r from 164.68.105.103 port 49432 ssh2 Oct 6 20:56:35 new sshd[25903]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 21:01:04 new sshd[27198]: Failed password for r.r from 164.68.105.103 port 36792 ssh2 Oct 6 21:01:04 new sshd[27198]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 21:05:29 new sshd[28328]: Failed password for r.r from 164.68.105.103 port 52780 ssh2 Oct 6 21:05:29 new sshd[28328]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 21:09:49 new sshd[29739]: Failed password for r.r from 164.68.105.103 port 40212 ssh2 Oct 6 21:09:49 new sshd[29739]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 21:14:09 new sshd[30482]: Failed........ ------------------------------- |
2019-10-08 16:49:21 |
| 164.68.105.103 | attackbotsspam | Oct 6 05:16:20 vtv3 sshd\[30297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.103 user=root Oct 6 05:16:22 vtv3 sshd\[30297\]: Failed password for root from 164.68.105.103 port 36952 ssh2 Oct 6 05:21:43 vtv3 sshd\[419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.103 user=root Oct 6 05:21:46 vtv3 sshd\[419\]: Failed password for root from 164.68.105.103 port 58766 ssh2 Oct 6 05:26:15 vtv3 sshd\[2834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.103 user=root Oct 6 05:39:36 vtv3 sshd\[9168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.103 user=root Oct 6 05:39:39 vtv3 sshd\[9168\]: Failed password for root from 164.68.105.103 port 35840 ssh2 Oct 6 05:44:06 vtv3 sshd\[11428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1 |
2019-10-06 13:43:49 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.68.105.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55421
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;164.68.105.228. IN A
;; AUTHORITY SECTION:
. 248 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020060501 1800 900 604800 86400
;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 06 07:13:51 CST 2020
;; MSG SIZE rcvd: 118228.105.68.164.in-addr.arpa domain name pointer melion.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
228.105.68.164.in-addr.arpa name = melion.net.
Authoritative answers can be found from: