Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nuremberg

Region: Bavaria

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
164.68.105.199 attack
Bokeh
2024-06-20 15:59:45
164.68.105.199 attack
Xnxx
2024-06-20 15:59:34
164.68.105.199 attack
Xnxx
2024-06-20 15:59:26
164.68.105.199 attack
Xnxx
2024-06-20 15:59:21
164.68.105.165 attack
Found on Block CINS-badguys  / proto=6  .  srcport=41861  .  dstport=5038  .     (2483)
2020-09-28 04:30:37
164.68.105.165 attackbotsspam
 TCP (SYN) 164.68.105.165:41861 -> port 5038, len 44
2020-09-27 20:47:35
164.68.105.165 attackbotsspam
 TCP (SYN) 164.68.105.165:48502 -> port 5038, len 44
2020-09-27 12:25:05
164.68.105.165 attackspam
5038/tcp 5038/tcp
[2020-09-15/19]2pkt
2020-09-20 02:59:21
164.68.105.165 attack
" "
2020-09-19 18:59:19
164.68.105.131 attackspambots
Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: Invalid user gmodserver from 164.68.105.131
Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131
Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: Invalid user gmodserver from 164.68.105.131
Aug 16 15:57:40 srv-ubuntu-dev3 sshd[102030]: Failed password for invalid user gmodserver from 164.68.105.131 port 55996 ssh2
Aug 16 16:01:29 srv-ubuntu-dev3 sshd[102595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131  user=root
Aug 16 16:01:31 srv-ubuntu-dev3 sshd[102595]: Failed password for root from 164.68.105.131 port 37242 ssh2
Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028]: Invalid user hannes from 164.68.105.131
Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131
Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028
...
2020-08-16 22:14:43
164.68.105.228 attack
Jun  3 12:06:38 nxxxxxxx0 sshd[8981]: Did not receive identification string from 164.68.105.228
Jun  3 12:07:38 nxxxxxxx0 sshd[9068]: Address 164.68.105.228 maps to melion.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  3 12:07:38 nxxxxxxx0 sshd[9068]: Invalid user soundcode from 164.68.105.228
Jun  3 12:07:38 nxxxxxxx0 sshd[9068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.228 
Jun  3 12:07:40 nxxxxxxx0 sshd[9068]: Failed password for invalid user soundcode from 164.68.105.228 port 34484 ssh2
Jun  3 12:07:40 nxxxxxxx0 sshd[9068]: Received disconnect from 164.68.105.228: 11: Normal Shutdown, Thank you for playing [preauth]
Jun  3 12:07:43 nxxxxxxx0 sshd[9072]: Address 164.68.105.228 maps to melion.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  3 12:07:43 nxxxxxxx0 sshd[9072]: Invalid user aerospike from 164.68.105.228
Jun  3 12:07:43 nxxxxxxx0 sshd[........
-------------------------------
2020-06-06 07:13:55
164.68.105.78 attack
Mar 19 17:00:51 saengerschafter sshd[29883]: Failed password for jira from 164.68.105.78 port 37546 ssh2
Mar 19 17:00:51 saengerschafter sshd[29883]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth]
Mar 19 17:06:22 saengerschafter sshd[30288]: Failed password for r.r from 164.68.105.78 port 40498 ssh2
Mar 19 17:06:22 saengerschafter sshd[30288]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth]
Mar 19 17:09:26 saengerschafter sshd[30746]: Failed password for r.r from 164.68.105.78 port 47708 ssh2
Mar 19 17:09:26 saengerschafter sshd[30746]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth]
Mar 19 17:12:35 saengerschafter sshd[30860]: Failed password for r.r from 164.68.105.78 port 54914 ssh2
Mar 19 17:12:35 saengerschafter sshd[30860]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth]
Mar 19 17:15:38 saengerschafter sshd[31263]: Failed password for r.r from 164.68.105.78 port 33898 ssh2
Mar 19 17:15:38 saengerschafter ssh........
-------------------------------
2020-03-22 19:53:29
164.68.105.78 attackspam
...
2020-03-21 20:00:24
164.68.105.70 attackspambots
Port 22 Scan, PTR: None
2019-12-29 03:22:00
164.68.105.103 attackbots
Oct  6 20:51:31 new sshd[24599]: Failed password for r.r from 164.68.105.103 port 58796 ssh2
Oct  6 20:51:31 new sshd[24599]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 20:56:35 new sshd[25903]: Failed password for r.r from 164.68.105.103 port 49432 ssh2
Oct  6 20:56:35 new sshd[25903]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 21:01:04 new sshd[27198]: Failed password for r.r from 164.68.105.103 port 36792 ssh2
Oct  6 21:01:04 new sshd[27198]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 21:05:29 new sshd[28328]: Failed password for r.r from 164.68.105.103 port 52780 ssh2
Oct  6 21:05:29 new sshd[28328]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 21:09:49 new sshd[29739]: Failed password for r.r from 164.68.105.103 port 40212 ssh2
Oct  6 21:09:49 new sshd[29739]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 21:14:09 new sshd[30482]: Failed........
-------------------------------
2019-10-08 16:49:21
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.68.105.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5738
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;164.68.105.237.			IN	A

;; AUTHORITY SECTION:
.			119	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040200 1800 900 604800 86400

;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 02 19:07:34 CST 2022
;; MSG SIZE  rcvd: 107
Host info
237.105.68.164.in-addr.arpa domain name pointer vmi282237.contaboserver.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
237.105.68.164.in-addr.arpa	name = vmi282237.contaboserver.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
49.233.79.78 attack
Invalid user sandro from 49.233.79.78 port 52868
2020-09-28 14:33:32
167.172.25.74 attack
prod8
...
2020-09-28 14:39:37
220.186.140.42 attackspam
Sep 28 03:32:09 vps8769 sshd[5617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.140.42
Sep 28 03:32:10 vps8769 sshd[5617]: Failed password for invalid user csgoserver from 220.186.140.42 port 53196 ssh2
...
2020-09-28 14:27:50
95.175.17.4 attackspambots
Sep 28 07:47:00 s2 sshd[13104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.175.17.4 
Sep 28 07:47:02 s2 sshd[13104]: Failed password for invalid user jeff from 95.175.17.4 port 42636 ssh2
Sep 28 07:59:16 s2 sshd[13697]: Failed password for root from 95.175.17.4 port 56690 ssh2
2020-09-28 15:00:39
58.33.107.221 attackbots
Sep 27 17:48:56 NPSTNNYC01T sshd[1600]: Failed password for root from 58.33.107.221 port 52820 ssh2
Sep 27 17:51:50 NPSTNNYC01T sshd[2099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.33.107.221
Sep 27 17:51:52 NPSTNNYC01T sshd[2099]: Failed password for invalid user postgres from 58.33.107.221 port 38708 ssh2
...
2020-09-28 14:33:17
42.240.129.58 attackbots
Port scan denied
2020-09-28 14:51:49
45.143.221.107 attackbotsspam
Port scanning [6 denied]
2020-09-28 15:03:13
167.71.211.104 attack
Sep 28 06:32:06 haigwepa sshd[17294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.211.104 
Sep 28 06:32:08 haigwepa sshd[17294]: Failed password for invalid user dante from 167.71.211.104 port 56264 ssh2
...
2020-09-28 14:27:02
58.215.12.226 attackspam
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
2020-09-28 15:01:09
43.241.50.132 attackspam
Port Scan
...
2020-09-28 14:44:32
222.186.175.148 attackspam
Sep 28 08:35:17 mail sshd[31704]: Failed password for root from 222.186.175.148 port 19460 ssh2
Sep 28 08:35:20 mail sshd[31704]: Failed password for root from 222.186.175.148 port 19460 ssh2
...
2020-09-28 14:48:53
52.13.201.144 attackspambots
Sep 28 08:24:16 minden010 sshd[20029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.13.201.144
Sep 28 08:24:18 minden010 sshd[20029]: Failed password for invalid user jay from 52.13.201.144 port 59618 ssh2
Sep 28 08:28:00 minden010 sshd[21263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.13.201.144
...
2020-09-28 14:35:46
142.93.127.173 attackbotsspam
Sep 28 08:09:59 pve1 sshd[24984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.127.173 
Sep 28 08:10:02 pve1 sshd[24984]: Failed password for invalid user admin1 from 142.93.127.173 port 49832 ssh2
...
2020-09-28 14:54:40
193.233.141.132 attack
0,84-01/27 [bc01/m23] PostRequest-Spammer scoring: zurich
2020-09-28 14:58:30
115.72.141.103 attack
Port Scan detected!
...
2020-09-28 14:30:01

Recently Reported IPs

123.144.120.160 242.28.186.157 187.85.19.60 110.42.4.177
86.93.156.192 100.64.88.120 170.1.4.253 77.204.247.88
93.8.104.108 138.68.180.134 171.249.89.111 185.63.23.145
133.255.70.158 72.117.210.28 190.79.158.212 255.129.243.66
37.96.229.255 115.35.230.31 188.27.147.63 10.31.69.189