This IP address has been reported a total of
100
times from
75 distinct
sources.
68.183.211.150 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 21
reports;
France
with 20
reports;
United States of America
with 17
reports.
The most common categories in these recent reports were:
Port Scan
43
times;
Brute-Force
28
times;
Web App Attack
22
times;
Hacking
21
times;
Bad Web Bot
13
times;
Other
21
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot Finding: repeated TCP service probing on TCP/9042 (service); 6 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/9042 (service); 6 application-level events across 6 source port(s). Sensor(s): Honeytrap.
show less
[68.183.211.150] triggered by honeypot on port [80], Timestamp [2026-10-05T23:05:38Z]METHOD=GET PATH ...
show more[68.183.211.150] triggered by honeypot on port [80], Timestamp [2026-10-05T23:05:38Z]METHOD=GET PATH=/query?q=SHOW+DIAGNOSTICS HTTP=HTTP/1.1 UA="Go-http-client/1.1" HOST="95.182.92.103:80" REF="-"
show less
Port Scan
Hacking
Anonymous
2026-10-05 19:00:06 SMTP protocol synchronization error \(input sent without waiting for greeting\): ...
show more2026-10-05 19:00:06 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=\[68.183.211.150\] input="\026\003\003\001\250\001"
2026-10-05 19:00:11 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=\[68.183.211.150\] input="\026\003\003\001\250\001"
2026-10-05 19:00:16 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=\[68.183.211.150\] input="\026\003\003\001Y\001"
...
show less
Brute-Force
Anonymous
[Sun Oct 04 17:14:28.104859 2026] [access_compat:error] [pid 1616914:tid 1616914] [client 68.183.211 ...
show more[Sun Oct 04 17:14:28.104859 2026] [access_compat:error] [pid 1616914:tid 1616914] [client 68.183.211.150:57168] AH01797: client denied by server configuration: /var/www/html/cgi-bin
[Sun Oct 04 17:14:43.080919 2026] [access_compat:error] [pid 1620524:tid 1620524] [client 68.183.211.150:25238] AH01797: client denied by server configuration: /var/www/html/query
...
show less
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,tls_certificate_expired,tls_unsafe_ci ...
show more[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,tls_certificate_expired,tls_unsafe_ciphers
show less
Honeypot Finding: repeated TCP service probing on TCP/2525 (service); 4 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/2525 (service); 4 application-level events across 4 source port(s). Sensor(s): Honeytrap.
show less
Honeypot Finding: repeated TCP service probing on TCP/10250 (service); 3 application-level events ac ...
show moreHoneypot Finding: repeated TCP service probing on TCP/10250 (service); 3 application-level events across 3 source port(s). Sensor(s): Honeytrap, Tanner.
show less
2026-10-05T22:22:26.443855+02:00 hades postfix/submission/smtpd[2186968]: improper command pipelinin ...
show more2026-10-05T22:22:26.443855+02:00 hades postfix/submission/smtpd[2186968]: improper command pipelining after CONNECT from unknown[68.183.211.150]: \026\003\003\001\245\001\000\001\241\003\0039\001(\234&He\030F\312\357\325<\363\217QWU#\376^G8\306\317n\274\376\355\302\336| \200\275\260\253\353((\252\3540i\333\231Xh\213\366\261\365\227P\003\207\226\343\215\241NscA\267\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
2026-10-05T22:22:26.503312+02:00 hades postfix/submission/smtpd[2186972]: improper command pipelining after CONNECT from unknown[68.183.211.150]: \026\003\003\001\245\001\000\001\241\003\003v\340\377\217_\277uV4\361!\333\232\365\315@\210\206\024\206\316P\364\037\332]\261\3130P\344\020 \337g\023v\337\031n\340f\344HD\271\346\016\235\004\262\003\t\246\337\226\032\321\217Fq\373\0335\344\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000=
2026-10-05T22:22:26.667589+02:00 hades postfix/submission/smtpd[2186968]: i
...
show less
