City: Nuremberg
Region: Bavaria
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
IP | Type | Details | Datetime |
---|---|---|---|
164.68.105.199 | attack | Bokeh |
2024-06-20 15:59:45 |
164.68.105.199 | attack | Xnxx |
2024-06-20 15:59:34 |
164.68.105.199 | attack | Xnxx |
2024-06-20 15:59:26 |
164.68.105.199 | attack | Xnxx |
2024-06-20 15:59:21 |
164.68.105.165 | attack | Found on Block CINS-badguys / proto=6 . srcport=41861 . dstport=5038 . (2483) |
2020-09-28 04:30:37 |
164.68.105.165 | attackbotsspam |
|
2020-09-27 20:47:35 |
164.68.105.165 | attackbotsspam |
|
2020-09-27 12:25:05 |
164.68.105.165 | attackspam | 5038/tcp 5038/tcp [2020-09-15/19]2pkt |
2020-09-20 02:59:21 |
164.68.105.165 | attack | " " |
2020-09-19 18:59:19 |
164.68.105.131 | attackspambots | Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: Invalid user gmodserver from 164.68.105.131 Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131 Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: Invalid user gmodserver from 164.68.105.131 Aug 16 15:57:40 srv-ubuntu-dev3 sshd[102030]: Failed password for invalid user gmodserver from 164.68.105.131 port 55996 ssh2 Aug 16 16:01:29 srv-ubuntu-dev3 sshd[102595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131 user=root Aug 16 16:01:31 srv-ubuntu-dev3 sshd[102595]: Failed password for root from 164.68.105.131 port 37242 ssh2 Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028]: Invalid user hannes from 164.68.105.131 Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131 Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028 ... |
2020-08-16 22:14:43 |
164.68.105.228 | attack | Jun 3 12:06:38 nxxxxxxx0 sshd[8981]: Did not receive identification string from 164.68.105.228 Jun 3 12:07:38 nxxxxxxx0 sshd[9068]: Address 164.68.105.228 maps to melion.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 3 12:07:38 nxxxxxxx0 sshd[9068]: Invalid user soundcode from 164.68.105.228 Jun 3 12:07:38 nxxxxxxx0 sshd[9068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.228 Jun 3 12:07:40 nxxxxxxx0 sshd[9068]: Failed password for invalid user soundcode from 164.68.105.228 port 34484 ssh2 Jun 3 12:07:40 nxxxxxxx0 sshd[9068]: Received disconnect from 164.68.105.228: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 12:07:43 nxxxxxxx0 sshd[9072]: Address 164.68.105.228 maps to melion.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 3 12:07:43 nxxxxxxx0 sshd[9072]: Invalid user aerospike from 164.68.105.228 Jun 3 12:07:43 nxxxxxxx0 sshd[........ ------------------------------- |
2020-06-06 07:13:55 |
164.68.105.78 | attack | Mar 19 17:00:51 saengerschafter sshd[29883]: Failed password for jira from 164.68.105.78 port 37546 ssh2 Mar 19 17:00:51 saengerschafter sshd[29883]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth] Mar 19 17:06:22 saengerschafter sshd[30288]: Failed password for r.r from 164.68.105.78 port 40498 ssh2 Mar 19 17:06:22 saengerschafter sshd[30288]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth] Mar 19 17:09:26 saengerschafter sshd[30746]: Failed password for r.r from 164.68.105.78 port 47708 ssh2 Mar 19 17:09:26 saengerschafter sshd[30746]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth] Mar 19 17:12:35 saengerschafter sshd[30860]: Failed password for r.r from 164.68.105.78 port 54914 ssh2 Mar 19 17:12:35 saengerschafter sshd[30860]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth] Mar 19 17:15:38 saengerschafter sshd[31263]: Failed password for r.r from 164.68.105.78 port 33898 ssh2 Mar 19 17:15:38 saengerschafter ssh........ ------------------------------- |
2020-03-22 19:53:29 |
164.68.105.78 | attackspam | ... |
2020-03-21 20:00:24 |
164.68.105.70 | attackspambots | Port 22 Scan, PTR: None |
2019-12-29 03:22:00 |
164.68.105.103 | attackbots | Oct 6 20:51:31 new sshd[24599]: Failed password for r.r from 164.68.105.103 port 58796 ssh2 Oct 6 20:51:31 new sshd[24599]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 20:56:35 new sshd[25903]: Failed password for r.r from 164.68.105.103 port 49432 ssh2 Oct 6 20:56:35 new sshd[25903]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 21:01:04 new sshd[27198]: Failed password for r.r from 164.68.105.103 port 36792 ssh2 Oct 6 21:01:04 new sshd[27198]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 21:05:29 new sshd[28328]: Failed password for r.r from 164.68.105.103 port 52780 ssh2 Oct 6 21:05:29 new sshd[28328]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 21:09:49 new sshd[29739]: Failed password for r.r from 164.68.105.103 port 40212 ssh2 Oct 6 21:09:49 new sshd[29739]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth] Oct 6 21:14:09 new sshd[30482]: Failed........ ------------------------------- |
2019-10-08 16:49:21 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.68.105.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19009
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;164.68.105.239. IN A
;; AUTHORITY SECTION:
. 109 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020200 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 02 16:17:55 CST 2022
;; MSG SIZE rcvd: 107
239.105.68.164.in-addr.arpa domain name pointer vmi282238.contaboserver.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
239.105.68.164.in-addr.arpa name = vmi282238.contaboserver.net.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
139.155.80.158 | attack | Unauthorized connection attempt detected from IP address 139.155.80.158 to port 3389 [T] |
2020-01-07 03:32:34 |
180.191.107.63 | attackbotsspam | Unauthorized connection attempt detected from IP address 180.191.107.63 to port 2222 [T] |
2020-01-07 03:30:29 |
218.93.65.123 | attackspambots | Unauthorized connection attempt detected from IP address 218.93.65.123 to port 23 [J] |
2020-01-07 03:26:11 |
222.186.52.189 | attackspambots | $f2bV_matches |
2020-01-07 03:22:45 |
34.65.51.119 | attackspambots | Unauthorized connection attempt detected from IP address 34.65.51.119 to port 515 [T] |
2020-01-07 03:49:26 |
153.156.47.213 | attackbotsspam | Unauthorized connection attempt detected from IP address 153.156.47.213 to port 81 [T] |
2020-01-07 03:31:42 |
114.225.61.1 | attackbots | 01/06/2020-18:02:54.204698 114.225.61.1 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-01-07 03:39:06 |
175.4.209.149 | attackspambots | Unauthorized connection attempt detected from IP address 175.4.209.149 to port 23 [T] |
2020-01-07 03:30:51 |
120.69.56.147 | attackspambots | Unauthorized connection attempt detected from IP address 120.69.56.147 to port 2323 [J] |
2020-01-07 03:35:20 |
139.255.47.218 | attack | Unauthorized connection attempt detected from IP address 139.255.47.218 to port 1433 [T] |
2020-01-07 03:32:11 |
183.80.89.148 | attack | Unauthorized connection attempt detected from IP address 183.80.89.148 to port 23 [J] |
2020-01-07 03:29:28 |
111.34.68.14 | attack | Unauthorized connection attempt detected from IP address 111.34.68.14 to port 23 [J] |
2020-01-07 03:39:53 |
118.70.113.1 | attackbots | Unauthorized connection attempt detected from IP address 118.70.113.1 to port 59 [J] |
2020-01-07 03:37:16 |
153.182.219.123 | attackbots | Unauthorized connection attempt detected from IP address 153.182.219.123 to port 2222 [T] |
2020-01-07 03:31:30 |
176.193.66.232 | attackspam | Unauthorized connection attempt detected from IP address 176.193.66.232 to port 2323 [J] |
2020-01-07 03:57:25 |