City: Sundbyberg
Region: Stockholms
Country: Sweden
Internet Service Provider: Tele2
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 83.249.38.74 | attack | Hits on port : |
2020-04-11 22:30:18 |
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '83.249.0.0 - 83.249.255.255'
% Abuse contact for '83.249.0.0 - 83.249.255.255' is 'abuse@tele2.com'
inetnum: 83.249.0.0 - 83.249.255.255
netname: SE-TELE2-BROADBAND-CUSTOMER
descr: Tele2 customer broadband access
descr: ISP
descr: G + south
descr: ********************************
descr: Abuse & intrusion reports should be done online at:
descr: http://tele2.se/kundservice/abuse
descr: ********************************
country: SE
admin-c: SWIP-RIPE
tech-c: SWIP-RIPE
status: ASSIGNED PA
mnt-by: COMHEM-MNT
created: 2009-05-20T14:20:48Z
last-modified: 2021-04-27T05:33:28Z
source: RIPE
role: Tele2 IP Registry
address: Tele2 Sverige AB
address: IP Registry
address: Torshamnsgatan 17 164 40 Kista SWEDEN
fax-no: +46 8 5626 42 10
abuse-mailbox: abuse@tele2.com
remarks: The database object describes the staff of TELE2 LIR.
admin-c: ROSI3-RIPE
admin-c: TH6544-RIPE
tech-c: ROSI3-RIPE
tech-c: TH6544-RIPE
nic-hdl: SWIP-RIPE
mnt-by: SWIPNET-LIR-MNT
created: 2002-03-21T14:25:04Z
last-modified: 2026-07-01T11:13:26Z
source: RIPE # Filtered
% Information related to '83.248.0.0/13AS1257'
route: 83.248.0.0/13
origin: AS1257
mnt-by: AS1257-MNT
created: 2021-07-13T10:14:08Z
last-modified: 2021-07-13T10:14:08Z
source: RIPE
% Information related to '83.248.0.0/13AS39651'
route: 83.248.0.0/13
descr: SE-COMHEM
origin: AS39651
mnt-by: COMHEM-MNT
created: 2006-07-05T13:55:15Z
last-modified: 2006-07-05T13:55:15Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.123 (SHETLAND)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 83.249.38.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31276
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;83.249.38.222. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081501 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 16 03:52:39 CST 2026
;; MSG SIZE rcvd: 106
222.38.249.83.in-addr.arpa domain name pointer c83-249-38-222.bredband.tele2.se.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
222.38.249.83.in-addr.arpa name = c83-249-38-222.bredband.tele2.se.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.130.108.212 | attackbots | 220.130.108.212 - - [17/Jul/2020:09:49:40 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18027 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 220.130.108.212 - - [17/Jul/2020:09:49:41 +0100] "POST /wp-login.php HTTP/1.1" 503 18027 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 220.130.108.212 - - [17/Jul/2020:10:02:59 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18209 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" ... |
2020-07-17 17:40:57 |
| 201.77.124.248 | attackspambots | Jul 17 07:38:26 DAAP sshd[17980]: Invalid user ipi from 201.77.124.248 port 38046 Jul 17 07:38:26 DAAP sshd[17980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.77.124.248 Jul 17 07:38:26 DAAP sshd[17980]: Invalid user ipi from 201.77.124.248 port 38046 Jul 17 07:38:27 DAAP sshd[17980]: Failed password for invalid user ipi from 201.77.124.248 port 38046 ssh2 Jul 17 07:43:21 DAAP sshd[18079]: Invalid user chenshuyu from 201.77.124.248 port 61165 ... |
2020-07-17 17:42:44 |
| 27.155.83.174 | attackspambots | Invalid user c1 from 27.155.83.174 port 34366 |
2020-07-17 17:51:49 |
| 134.209.236.191 | attack | prod6 ... |
2020-07-17 17:59:49 |
| 45.228.137.6 | attack | 2020-07-17T06:30:19+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-07-17 17:44:03 |
| 113.176.89.116 | attack | prod6 ... |
2020-07-17 18:13:28 |
| 200.44.50.155 | attackspambots | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-07-17T09:13:19Z and 2020-07-17T09:44:13Z |
2020-07-17 18:11:56 |
| 106.13.181.242 | attackbots | Automatic Fail2ban report - Trying login SSH |
2020-07-17 17:41:44 |
| 103.142.139.114 | attackbotsspam | Jul 17 09:49:28 jane sshd[8069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.139.114 Jul 17 09:49:30 jane sshd[8069]: Failed password for invalid user radio from 103.142.139.114 port 58218 ssh2 ... |
2020-07-17 17:58:29 |
| 196.240.54.12 | attackbots | (mod_security) mod_security (id:210492) triggered by 196.240.54.12 (LV/Latvia/-): 5 in the last 3600 secs |
2020-07-17 17:47:40 |
| 185.136.77.98 | attackbotsspam | " " |
2020-07-17 17:49:20 |
| 157.230.225.35 | attackspam | Jul 17 14:27:49 gw1 sshd[23544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.225.35 Jul 17 14:27:51 gw1 sshd[23544]: Failed password for invalid user test3 from 157.230.225.35 port 51002 ssh2 ... |
2020-07-17 17:48:14 |
| 103.108.87.161 | attack | 2020-07-17T09:34:02.463282shield sshd\[24037\]: Invalid user query from 103.108.87.161 port 32824 2020-07-17T09:34:02.475945shield sshd\[24037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.108.87.161 2020-07-17T09:34:04.350278shield sshd\[24037\]: Failed password for invalid user query from 103.108.87.161 port 32824 ssh2 2020-07-17T09:37:05.996161shield sshd\[24665\]: Invalid user sss from 103.108.87.161 port 44576 2020-07-17T09:37:06.005283shield sshd\[24665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.108.87.161 |
2020-07-17 17:43:37 |
| 142.93.127.195 | attackspambots | k+ssh-bruteforce |
2020-07-17 17:41:12 |
| 35.201.225.235 | attackbotsspam | Invalid user milling from 35.201.225.235 port 49044 |
2020-07-17 17:58:45 |