Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.201.95.98 attack
Invalid user jenkins from 138.201.95.98 port 45330
2020-01-19 00:04:29
138.201.95.98 attack
Unauthorized connection attempt detected from IP address 138.201.95.98 to port 2220 [J]
2020-01-18 03:20:37
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.201.95.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2394
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.201.95.159.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012300 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 18:35:14 CST 2025
;; MSG SIZE  rcvd: 107
Host info
159.95.201.138.in-addr.arpa domain name pointer static.159.95.201.138.clients.your-server.de.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
159.95.201.138.in-addr.arpa	name = static.159.95.201.138.clients.your-server.de.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
49.51.170.222 attack
2020-09-18 12:14:19 IPS Alert 1: Executable Code was Detected. Signature ET SHELLCODE Possible Call with No Offset UDP Shellcode. From: 49.51.170.222:10005, to: x.x.0.200:60525, protocol: UDP
2020-09-20 00:59:09
91.134.173.100 attack
5x Failed Password
2020-09-20 01:06:30
109.233.18.74 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-20 01:36:00
107.132.88.42 attack
Sep 19 18:12:13 vps333114 sshd[17822]: Failed password for root from 107.132.88.42 port 58984 ssh2
Sep 19 18:17:41 vps333114 sshd[17961]: Invalid user ts3bot from 107.132.88.42
...
2020-09-20 01:28:15
177.159.111.228 attackbotsspam
SSH 2020-09-19 02:53:02	177.159.111.228	139.99.182.230	>	POST	balimandirabeachresort.indonesiaroom.com	/wp-login.php	HTTP/1.1	-	-
2020-09-20 00:05:03	177.159.111.228	139.99.182.230	>	GET	whiterosehotelbali.indonesiaroom.com	/wp-login.php	HTTP/1.1	-	-
2020-09-20 00:05:05	177.159.111.228	139.99.182.230	>	POST	whiterosehotelbali.indonesiaroom.com	/wp-login.php	HTTP/1.1	-	-
2020-09-20 01:20:11
106.12.90.45 attackbotsspam
$f2bV_matches
2020-09-20 01:26:08
51.79.52.2 attack
Sep 19 05:18:41 mout sshd[12278]: Disconnected from authenticating user root 51.79.52.2 port 50310 [preauth]
Sep 19 05:26:58 mout sshd[13343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.52.2  user=root
Sep 19 05:27:00 mout sshd[13343]: Failed password for root from 51.79.52.2 port 36402 ssh2
2020-09-20 01:26:58
137.74.132.175 attackspambots
Sep 19 18:52:52 h2865660 sshd[6153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.132.175  user=root
Sep 19 18:52:53 h2865660 sshd[6153]: Failed password for root from 137.74.132.175 port 52004 ssh2
Sep 19 18:57:36 h2865660 sshd[6358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.132.175  user=root
Sep 19 18:57:38 h2865660 sshd[6358]: Failed password for root from 137.74.132.175 port 54864 ssh2
Sep 19 18:59:01 h2865660 sshd[6419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.132.175  user=root
Sep 19 18:59:03 h2865660 sshd[6419]: Failed password for root from 137.74.132.175 port 50782 ssh2
...
2020-09-20 01:21:48
106.13.172.167 attack
$f2bV_matches
2020-09-20 01:05:46
114.104.139.68 attackspam
Lines containing failures of 114.104.139.68
Sep 19 03:18:58 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:00 neweola postfix/smtpd[29829]: NOQUEUE: reject: RCPT from unknown[114.104.139.68]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 19 03:19:00 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Sep 19 03:19:02 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:04 neweola postfix/smtpd[29829]: disconnect from unknown[114.104.139.68] ehlo=2 starttls=1 auth=0/1 commands=3/4
Sep 19 03:19:04 neweola postfix/smtpd[29829]: connect from unknown[114.104.139.68]
Sep 19 03:19:07 neweola postfix/smtpd[29829]: lost connection after AUTH from unknown[114.104.139.68]
Sep 19 03:19:07 neweol........
------------------------------
2020-09-20 01:18:48
103.17.110.92 attackbots
SMTP Screen: 103.17.110.92 (India): connected 11 times within 2 minutes
2020-09-20 01:37:38
101.255.81.91 attack
Fail2Ban Ban Triggered (2)
2020-09-20 01:08:16
64.227.97.122 attackbots
Sep 19 10:38:50 email sshd\[4310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.97.122  user=root
Sep 19 10:38:53 email sshd\[4310\]: Failed password for root from 64.227.97.122 port 52358 ssh2
Sep 19 10:42:53 email sshd\[5098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.97.122  user=root
Sep 19 10:42:55 email sshd\[5098\]: Failed password for root from 64.227.97.122 port 36654 ssh2
Sep 19 10:46:43 email sshd\[5837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.97.122  user=root
...
2020-09-20 01:32:34
150.95.31.150 attack
2020-09-19T11:52:02.239453dreamphreak.com sshd[365102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.31.150  user=root
2020-09-19T11:52:04.005185dreamphreak.com sshd[365102]: Failed password for root from 150.95.31.150 port 36066 ssh2
...
2020-09-20 01:04:18
122.51.66.91 attackbotsspam
$f2bV_matches
2020-09-20 01:16:06

Recently Reported IPs

82.22.205.236 92.50.251.159 148.63.108.240 109.242.255.57
171.250.57.119 176.209.118.76 196.181.188.216 225.154.167.168
219.48.186.25 30.223.242.139 227.11.248.220 188.178.220.117
56.4.37.77 97.252.84.198 89.26.103.186 190.191.213.44
151.171.127.21 171.177.102.10 99.108.174.8 109.61.207.94