Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nuremberg

Region: Bavaria

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
164.68.105.199 attack
Bokeh
2024-06-20 15:59:45
164.68.105.199 attack
Xnxx
2024-06-20 15:59:34
164.68.105.199 attack
Xnxx
2024-06-20 15:59:26
164.68.105.199 attack
Xnxx
2024-06-20 15:59:21
164.68.105.165 attack
Found on Block CINS-badguys  / proto=6  .  srcport=41861  .  dstport=5038  .     (2483)
2020-09-28 04:30:37
164.68.105.165 attackbotsspam
 TCP (SYN) 164.68.105.165:41861 -> port 5038, len 44
2020-09-27 20:47:35
164.68.105.165 attackbotsspam
 TCP (SYN) 164.68.105.165:48502 -> port 5038, len 44
2020-09-27 12:25:05
164.68.105.165 attackspam
5038/tcp 5038/tcp
[2020-09-15/19]2pkt
2020-09-20 02:59:21
164.68.105.165 attack
" "
2020-09-19 18:59:19
164.68.105.131 attackspambots
Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: Invalid user gmodserver from 164.68.105.131
Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131
Aug 16 15:57:39 srv-ubuntu-dev3 sshd[102030]: Invalid user gmodserver from 164.68.105.131
Aug 16 15:57:40 srv-ubuntu-dev3 sshd[102030]: Failed password for invalid user gmodserver from 164.68.105.131 port 55996 ssh2
Aug 16 16:01:29 srv-ubuntu-dev3 sshd[102595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131  user=root
Aug 16 16:01:31 srv-ubuntu-dev3 sshd[102595]: Failed password for root from 164.68.105.131 port 37242 ssh2
Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028]: Invalid user hannes from 164.68.105.131
Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.131
Aug 16 16:05:10 srv-ubuntu-dev3 sshd[103028
...
2020-08-16 22:14:43
164.68.105.228 attack
Jun  3 12:06:38 nxxxxxxx0 sshd[8981]: Did not receive identification string from 164.68.105.228
Jun  3 12:07:38 nxxxxxxx0 sshd[9068]: Address 164.68.105.228 maps to melion.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  3 12:07:38 nxxxxxxx0 sshd[9068]: Invalid user soundcode from 164.68.105.228
Jun  3 12:07:38 nxxxxxxx0 sshd[9068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.105.228 
Jun  3 12:07:40 nxxxxxxx0 sshd[9068]: Failed password for invalid user soundcode from 164.68.105.228 port 34484 ssh2
Jun  3 12:07:40 nxxxxxxx0 sshd[9068]: Received disconnect from 164.68.105.228: 11: Normal Shutdown, Thank you for playing [preauth]
Jun  3 12:07:43 nxxxxxxx0 sshd[9072]: Address 164.68.105.228 maps to melion.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  3 12:07:43 nxxxxxxx0 sshd[9072]: Invalid user aerospike from 164.68.105.228
Jun  3 12:07:43 nxxxxxxx0 sshd[........
-------------------------------
2020-06-06 07:13:55
164.68.105.78 attack
Mar 19 17:00:51 saengerschafter sshd[29883]: Failed password for jira from 164.68.105.78 port 37546 ssh2
Mar 19 17:00:51 saengerschafter sshd[29883]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth]
Mar 19 17:06:22 saengerschafter sshd[30288]: Failed password for r.r from 164.68.105.78 port 40498 ssh2
Mar 19 17:06:22 saengerschafter sshd[30288]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth]
Mar 19 17:09:26 saengerschafter sshd[30746]: Failed password for r.r from 164.68.105.78 port 47708 ssh2
Mar 19 17:09:26 saengerschafter sshd[30746]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth]
Mar 19 17:12:35 saengerschafter sshd[30860]: Failed password for r.r from 164.68.105.78 port 54914 ssh2
Mar 19 17:12:35 saengerschafter sshd[30860]: Received disconnect from 164.68.105.78: 11: Bye Bye [preauth]
Mar 19 17:15:38 saengerschafter sshd[31263]: Failed password for r.r from 164.68.105.78 port 33898 ssh2
Mar 19 17:15:38 saengerschafter ssh........
-------------------------------
2020-03-22 19:53:29
164.68.105.78 attackspam
...
2020-03-21 20:00:24
164.68.105.70 attackspambots
Port 22 Scan, PTR: None
2019-12-29 03:22:00
164.68.105.103 attackbots
Oct  6 20:51:31 new sshd[24599]: Failed password for r.r from 164.68.105.103 port 58796 ssh2
Oct  6 20:51:31 new sshd[24599]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 20:56:35 new sshd[25903]: Failed password for r.r from 164.68.105.103 port 49432 ssh2
Oct  6 20:56:35 new sshd[25903]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 21:01:04 new sshd[27198]: Failed password for r.r from 164.68.105.103 port 36792 ssh2
Oct  6 21:01:04 new sshd[27198]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 21:05:29 new sshd[28328]: Failed password for r.r from 164.68.105.103 port 52780 ssh2
Oct  6 21:05:29 new sshd[28328]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 21:09:49 new sshd[29739]: Failed password for r.r from 164.68.105.103 port 40212 ssh2
Oct  6 21:09:49 new sshd[29739]: Received disconnect from 164.68.105.103: 11: Bye Bye [preauth]
Oct  6 21:14:09 new sshd[30482]: Failed........
-------------------------------
2019-10-08 16:49:21
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.68.105.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43134
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;164.68.105.37.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030700 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 07 16:10:46 CST 2022
;; MSG SIZE  rcvd: 106
Host info
37.105.68.164.in-addr.arpa domain name pointer ip-37-105-68-164.static.contabo.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
37.105.68.164.in-addr.arpa	name = ip-37-105-68-164.static.contabo.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
193.150.72.3 attack
Apr 11 03:56:22 sshgateway sshd\[19327\]: Invalid user admin from 193.150.72.3
Apr 11 03:56:22 sshgateway sshd\[19327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.150.72.3
Apr 11 03:56:25 sshgateway sshd\[19327\]: Failed password for invalid user admin from 193.150.72.3 port 38794 ssh2
2020-04-11 12:10:34
198.37.117.31 attack
Apr 11 06:09:36 eventyay sshd[31917]: Failed password for root from 198.37.117.31 port 60874 ssh2
Apr 11 06:14:07 eventyay sshd[32068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.37.117.31
Apr 11 06:14:08 eventyay sshd[32068]: Failed password for invalid user mohrodin from 198.37.117.31 port 43578 ssh2
...
2020-04-11 12:20:16
106.13.53.173 attackbotsspam
Apr 11 05:55:50 h2829583 sshd[29689]: Failed password for root from 106.13.53.173 port 47630 ssh2
2020-04-11 12:40:24
51.255.170.237 attack
51.255.170.237 - - [11/Apr/2020:07:56:09 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2020-04-11 12:23:05
198.27.122.201 attackspam
Apr 11 06:38:30 markkoudstaal sshd[31221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.122.201
Apr 11 06:38:31 markkoudstaal sshd[31221]: Failed password for invalid user feihongkeji!@# from 198.27.122.201 port 59512 ssh2
Apr 11 06:42:27 markkoudstaal sshd[31772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.122.201
2020-04-11 12:46:55
211.51.253.234 attackspambots
Apr 11 05:56:11 hell sshd[10637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.51.253.234
Apr 11 05:56:13 hell sshd[10637]: Failed password for invalid user support from 211.51.253.234 port 36962 ssh2
...
2020-04-11 12:18:53
139.215.217.181 attackspam
Apr 11 05:54:50 vps647732 sshd[27873]: Failed password for root from 139.215.217.181 port 53939 ssh2
...
2020-04-11 12:15:47
94.191.24.214 attackspambots
SSH Brute-Force. Ports scanning.
2020-04-11 12:30:00
49.49.192.165 attack
Apr 11 05:55:35 debian-2gb-nbg1-2 kernel: \[8836340.593888\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=49.49.192.165 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=48 ID=15719 PROTO=TCP SPT=37981 DPT=23 WINDOW=43195 RES=0x00 SYN URGP=0
2020-04-11 12:50:02
14.116.199.99 attackspam
2020-04-11T03:47:17.794840shield sshd\[8553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.199.99  user=root
2020-04-11T03:47:19.961347shield sshd\[8553\]: Failed password for root from 14.116.199.99 port 41948 ssh2
2020-04-11T03:50:21.237198shield sshd\[8918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.199.99  user=root
2020-04-11T03:50:23.664573shield sshd\[8918\]: Failed password for root from 14.116.199.99 port 45560 ssh2
2020-04-11T03:56:24.426217shield sshd\[9735\]: Invalid user mdpi from 14.116.199.99 port 52784
2020-04-11 12:12:26
45.141.87.20 attack
RDP Bruteforce
2020-04-11 12:37:50
95.48.54.106 attackspam
Apr 11 05:55:33 cloud sshd[8921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.48.54.106 
Apr 11 05:55:35 cloud sshd[8921]: Failed password for invalid user historymo from 95.48.54.106 port 33076 ssh2
2020-04-11 12:48:22
173.53.23.48 attack
Apr 11 05:52:53 legacy sshd[29710]: Failed password for root from 173.53.23.48 port 48046 ssh2
Apr 11 05:56:22 legacy sshd[29828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.53.23.48
Apr 11 05:56:24 legacy sshd[29828]: Failed password for invalid user l from 173.53.23.48 port 55486 ssh2
...
2020-04-11 12:11:28
109.230.243.102 attackbotsspam
Brute force attack against VPN service
2020-04-11 12:27:42
23.80.97.103 attackspam
(From claudiauclement@yahoo.com) Hi, We are wondering if you would be interested in our service, where we can provide you with a dofollow link from Amazon (DA 96) back to brown4chiro.com?

The price is just $57 per link, via Paypal.

To explain backlinks, DA and the benefit they have for your website, along with a sample of an existing link, please read here: https://textuploader.com/16jn8

Please take a look at an example here: https://www.amazon.com/Tsouaq-com-Evaluate-the-best-products/dp/B07S2QXHSV/
You can see the dofollow link under 'Developer Info'.

If you're interested, reply to this email but please make sure you include the word INTERESTED in the subject line field, so we can get to your reply sooner.

Kind Regards,
Claudia.

PS. This does not involve selling anything so you do not need to have a product.
2020-04-11 12:13:14

Recently Reported IPs

234.147.81.104 109.48.153.77 40.182.144.236 204.219.33.135
54.89.97.127 168.126.40.150 115.185.198.236 70.253.116.233
133.104.177.32 241.51.155.79 114.149.74.164 84.52.49.201
21.152.250.82 104.238.231.238 37.75.128.174 173.31.51.159
8.132.68.215 198.205.28.138 72.14.71.214 168.7.90.151