164.68.124.245

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
164.68.124.231	attackbots	2020-04-21T08:53:33.723872hz01.yumiweb.com sshd\[19791\]: Invalid user leo from 164.68.124.231 port 34132 2020-04-21T08:54:13.497144hz01.yumiweb.com sshd\[19793\]: Invalid user leo from 164.68.124.231 port 35484 2020-04-21T08:54:54.648963hz01.yumiweb.com sshd\[19797\]: Invalid user leon from 164.68.124.231 port 36826 ...	2020-04-21 17:39:11
164.68.124.231	attack	Apr 12 14:39:15 tor-proxy-04 sshd\[21647\]: User root from 164.68.124.231 not allowed because not listed in AllowUsers Apr 12 14:39:17 tor-proxy-04 sshd\[21649\]: User root from 164.68.124.231 not allowed because not listed in AllowUsers Apr 12 14:39:18 tor-proxy-04 sshd\[21651\]: User root from 164.68.124.231 not allowed because not listed in AllowUsers ...	2020-04-12 21:53:46
164.68.124.211	attackspam	ssh failed login	2019-09-14 09:05:38
164.68.124.76	attackspambots	164.68.124.76 - - [03/Sep/2019:10:10:38 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 164.68.124.76 - - [03/Sep/2019:10:10:38 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 164.68.124.76 - - [03/Sep/2019:10:10:38 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 164.68.124.76 - - [03/Sep/2019:10:10:39 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 164.68.124.76 - - [03/Sep/2019:10:10:39 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 164.68.124.76 - - [03/Sep/2019:10:10:39 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-09-03 16:53:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.68.124.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5063
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;164.68.124.245.			IN	A

;; AUTHORITY SECTION:
.			330	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022101100 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 11 22:37:55 CST 2022
;; MSG SIZE  rcvd: 107

Host info

245.124.68.164.in-addr.arpa domain name pointer vmi411356.contaboserver.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
245.124.68.164.in-addr.arpa	name = vmi411356.contaboserver.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.199.81.114	attack	Unauthorized connection attempt from IP address 112.199.81.114 on Port 445(SMB)	2020-03-13 00:13:12
213.6.6.193	attackbotsspam	Unauthorized connection attempt from IP address 213.6.6.193 on Port 445(SMB)	2020-03-13 00:34:07
63.83.78.224	attackbots	Mar 12 14:26:13 mail.srvfarm.net postfix/smtpd[1850443]: NOQUEUE: reject: RCPT from unknown[63.83.78.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 14:30:54 mail.srvfarm.net postfix/smtpd[1837190]: NOQUEUE: reject: RCPT from unknown[63.83.78.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 14:30:54 mail.srvfarm.net postfix/smtpd[1852675]: NOQUEUE: reject: RCPT from unknown[63.83.78.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 14:30:54 mail.srvfarm.net postfix/smtpd[1850431]: NOQUEUE: reject: RCPT from unknown[63.83.78.224]: 450 4.1.8	2020-03-13 00:22:16
85.92.188.73	attackbots	2020-03-04T17:25:33.604Z CLOSE host=85.92.188.73 port=39435 fd=7 time=40.006 bytes=53 ...	2020-03-12 23:47:23
27.75.187.165	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-03-12 23:51:39
85.92.183.220	attackbotsspam	2020-03-04T17:24:23.615Z CLOSE host=85.92.183.220 port=41345 fd=4 time=40.002 bytes=49 ...	2020-03-12 23:47:46
103.217.243.109	attackbots	Invalid user user from 103.217.243.109 port 29325	2020-03-13 00:13:36
85.209.0.214	attackbotsspam	2020-01-03T08:58:40.023Z CLOSE host=85.209.0.214 port=59348 fd=4 time=20.015 bytes=29 ...	2020-03-13 00:10:52
186.4.188.3	attack	Mar 12 12:42:48 localhost sshd\[18838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.4.188.3 user=root Mar 12 12:42:50 localhost sshd\[18838\]: Failed password for root from 186.4.188.3 port 51497 ssh2 Mar 12 12:50:37 localhost sshd\[18960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.4.188.3 user=root ...	2020-03-12 23:54:26
85.209.0.14	attackspam	2019-12-19T21:25:51.080Z CLOSE host=85.209.0.14 port=57096 fd=4 time=20.020 bytes=14 ...	2020-03-13 00:19:57
85.209.0.137	attackbots	2019-12-31T04:01:47.730Z CLOSE host=85.209.0.137 port=27896 fd=4 time=20.020 bytes=7 ...	2020-03-13 00:19:24
129.211.43.36	attack	Invalid user zhuht from 129.211.43.36 port 41164	2020-03-12 23:50:05
45.133.99.2	attackbots	Mar 12 17:20:33 mailserver postfix/smtps/smtpd[90132]: connect from unknown[45.133.99.2] Mar 12 17:20:41 mailserver dovecot: auth-worker(90109): sql([hidden],45.133.99.2): unknown user Mar 12 17:20:43 mailserver postfix/smtps/smtpd[90132]: warning: unknown[45.133.99.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 12 17:20:44 mailserver postfix/smtps/smtpd[90132]: lost connection after AUTH from unknown[45.133.99.2] Mar 12 17:20:44 mailserver postfix/smtps/smtpd[90132]: disconnect from unknown[45.133.99.2] Mar 12 17:20:44 mailserver postfix/smtps/smtpd[90132]: connect from unknown[45.133.99.2] Mar 12 17:20:54 mailserver postfix/smtps/smtpd[90132]: lost connection after AUTH from unknown[45.133.99.2] Mar 12 17:20:54 mailserver postfix/smtps/smtpd[90132]: disconnect from unknown[45.133.99.2] Mar 12 17:20:54 mailserver postfix/smtps/smtpd[90132]: connect from unknown[45.133.99.2] Mar 12 17:21:08 mailserver dovecot: auth-worker(90109): sql([hidden],45.133.99.2): unknown user	2020-03-13 00:24:02
220.76.205.178	attack	suspicious action Thu, 12 Mar 2020 09:30:14 -0300	2020-03-13 00:12:37
187.11.140.235	attack	Fail2Ban - SSH Bruteforce Attempt	2020-03-13 00:36:49

Recently Reported IPs

189.142.238.55	122.187.229.24	172.126.144.242	193.56.71.214
173.42.178.21	194.104.11.52	185.61.219.61	114.33.222.169
114.35.61.185	88.218.47.105	83.171.227.164	45.33.106.187
45.80.107.168	133.18.172.217	85.208.86.13	117.82.188.183
80.72.29.224	223.15.10.235	45.82.244.164	49.254.50.98