104.168.1.71 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.168.14.36	attackspambots	Found on Blocklist de / proto=6 . srcport=42398 . dstport=22 SSH . (991)	2020-10-07 02:37:31
104.168.14.36	attackbots	Found on Blocklist de / proto=6 . srcport=42398 . dstport=22 SSH . (991)	2020-10-06 18:34:54
104.168.11.217	attackbots	spam	2020-09-24 02:18:28
104.168.11.217	attack	spam	2020-09-23 18:26:39
104.168.14.122	attack	TCP (SYN) 104.168.14.122:41260 -> port 22, len 44	2020-08-31 08:30:32
104.168.172.223	attackspam	Aug 25 18:10:02 ajax sshd[5115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.172.223 Aug 25 18:10:04 ajax sshd[5115]: Failed password for invalid user ftp from 104.168.172.223 port 42570 ssh2	2020-08-26 01:50:34
104.168.173.80	attack	Invalid user timemachine from 104.168.173.80 port 49896	2020-08-23 16:06:55
104.168.194.225	attackspambots	Mail contains malware	2020-08-14 13:26:47
104.168.190.54	attack	Automatic report - Port Scan Attack	2020-08-09 06:24:05
104.168.136.218	attackspam	Aug 4 14:22:58 datentool sshd[7487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218 user=r.r Aug 4 14:23:00 datentool sshd[7487]: Failed password for r.r from 104.168.136.218 port 59136 ssh2 Aug 4 14:25:07 datentool sshd[7515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218 user=r.r Aug 4 14:25:09 datentool sshd[7515]: Failed password for r.r from 104.168.136.218 port 46482 ssh2 Aug 4 14:26:31 datentool sshd[7594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218 user=r.r Aug 4 14:26:33 datentool sshd[7594]: Failed password for r.r from 104.168.136.218 port 59192 ssh2 Aug 4 14:27:46 datentool sshd[7613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218 user=r.r Aug 4 14:27:48 datentool sshd[7613]: Failed password for r.r from 104.168.136......... -------------------------------	2020-08-05 01:55:19
104.168.138.77	attackbotsspam	Attempted connection to port 5501.	2020-08-01 14:06:09
104.168.169.143	attack	E-Mail Spam (RBL) [REJECTED]	2020-07-27 12:09:25
104.168.164.184	attack	Jul 24 17:27:09 ns381471 sshd[5099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.164.184 Jul 24 17:27:12 ns381471 sshd[5099]: Failed password for invalid user patrick from 104.168.164.184 port 62490 ssh2	2020-07-24 23:43:09
104.168.167.224	attackspam	Automatic report - XMLRPC Attack	2020-07-20 13:50:09
104.168.170.30	attackspam	scan	2020-07-17 17:13:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.1.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55589
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.1.71.			IN	A

;; AUTHORITY SECTION:
.			557	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:36:16 CST 2022
;; MSG SIZE  rcvd: 105

Host info

71.1.168.104.in-addr.arpa domain name pointer 104-168-1-71-host.colocrossing.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
71.1.168.104.in-addr.arpa	name = 104-168-1-71-host.colocrossing.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.24.255.191	attackspambots	Jul 13 21:35:36 s64-1 sshd[2924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.255.191 Jul 13 21:35:37 s64-1 sshd[2924]: Failed password for invalid user ftptest from 118.24.255.191 port 52126 ssh2 Jul 13 21:41:48 s64-1 sshd[3005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.255.191 ...	2019-07-14 03:52:06
192.117.186.215	attackspambots	Jul 13 21:43:57 meumeu sshd[12246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.117.186.215 Jul 13 21:43:59 meumeu sshd[12246]: Failed password for invalid user subhana from 192.117.186.215 port 45554 ssh2 Jul 13 21:50:15 meumeu sshd[13493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.117.186.215 ...	2019-07-14 04:03:34
118.24.57.53	attackspambots	Jul 13 21:57:45 localhost sshd\[7462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.57.53 user=root Jul 13 21:57:47 localhost sshd\[7462\]: Failed password for root from 118.24.57.53 port 60552 ssh2 Jul 13 22:00:23 localhost sshd\[7842\]: Invalid user ying from 118.24.57.53 port 58626	2019-07-14 04:17:29
159.203.74.227	attackspam	Jul 13 20:05:09 ns41 sshd[29194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.74.227 Jul 13 20:05:11 ns41 sshd[29194]: Failed password for invalid user one from 159.203.74.227 port 35562 ssh2 Jul 13 20:10:52 ns41 sshd[29481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.74.227	2019-07-14 03:49:32
37.108.54.143	attack	SPF Fail sender not permitted to send mail for @evilazrael.de	2019-07-14 03:48:50
186.147.34.246	attackbotsspam	Automatic report - Port Scan Attack	2019-07-14 04:31:42
177.92.240.252	attackspambots	failed_logins	2019-07-14 03:46:58
142.93.198.152	attack	Jul 13 19:51:32 mail sshd\[9711\]: Invalid user hdfs from 142.93.198.152 port 57874 Jul 13 19:51:32 mail sshd\[9711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.198.152 Jul 13 19:51:34 mail sshd\[9711\]: Failed password for invalid user hdfs from 142.93.198.152 port 57874 ssh2 Jul 13 19:57:16 mail sshd\[9816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.198.152 user=redis Jul 13 19:57:18 mail sshd\[9816\]: Failed password for redis from 142.93.198.152 port 59830 ssh2 ...	2019-07-14 04:22:13
41.90.9.34	attackspambots	Brute force attempt	2019-07-14 03:50:07
78.80.24.74	attack	Lines containing failures of 78.80.24.74 Jul 13 16:53:01 mellenthin postfix/smtpd[7337]: connect from 78-80-24-74.nat.epc.tmcz.cz[78.80.24.74] Jul x@x Jul 13 16:53:02 mellenthin postfix/smtpd[7337]: lost connection after DATA from 78-80-24-74.nat.epc.tmcz.cz[78.80.24.74] Jul 13 16:53:02 mellenthin postfix/smtpd[7337]: disconnect from 78-80-24-74.nat.epc.tmcz.cz[78.80.24.74] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=78.80.24.74	2019-07-14 04:34:57
46.101.88.10	attack	Jul 8 19:24:44 * sshd[28780]: Failed password for invalid user creative from 46.101.88.10 port 17323 ssh2 Jul 9 20:45:06 * sshd[11784]: Failed password for invalid user austin from 46.101.88.10 port 37752 ssh2 Jul 12 14:39:53 * sshd[9648]: Failed password for invalid user resin from 46.101.88.10 port 46146 ssh2 Jul 13 21:43:53 * sshd[11150]: Failed password for invalid user tester from 46.101.88.10 port 39029 ssh2	2019-07-14 04:23:47
101.109.83.140	attackspam	Jul 14 01:07:42 vibhu-HP-Z238-Microtower-Workstation sshd\[2900\]: Invalid user puneet from 101.109.83.140 Jul 14 01:07:42 vibhu-HP-Z238-Microtower-Workstation sshd\[2900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.109.83.140 Jul 14 01:07:45 vibhu-HP-Z238-Microtower-Workstation sshd\[2900\]: Failed password for invalid user puneet from 101.109.83.140 port 33664 ssh2 Jul 14 01:13:45 vibhu-HP-Z238-Microtower-Workstation sshd\[3506\]: Invalid user administrador from 101.109.83.140 Jul 14 01:13:45 vibhu-HP-Z238-Microtower-Workstation sshd\[3506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.109.83.140 ...	2019-07-14 03:47:31
45.67.14.151	attackspambots	2x TCP 3389 (RDP) since 2019-07-12 08:11	2019-07-14 04:12:43
113.141.66.18	attack	firewall-block, port(s): 445/tcp	2019-07-14 04:21:06
181.44.129.75	attackspam	Lines containing failures of 181.44.129.75 Jul 13 05:49:09 mellenthin postfix/smtpd[14657]: connect from unknown[181.44.129.75] Jul x@x Jul 13 05:49:10 mellenthin postfix/smtpd[14657]: lost connection after DATA from unknown[181.44.129.75] Jul 13 05:49:10 mellenthin postfix/smtpd[14657]: disconnect from unknown[181.44.129.75] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 13 16:52:53 mellenthin postfix/smtpd[5627]: connect from unknown[181.44.129.75] Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.44.129.75	2019-07-14 04:14:52

Recently Reported IPs

104.168.1.72	104.168.0.151	104.168.1.78	101.109.184.223
104.168.1.88	104.168.1.84	104.168.1.86	104.168.1.80
104.168.1.90	104.168.100.187	104.168.101.63	63.179.103.31
101.109.184.225	104.168.100.167	104.168.101.64	104.168.100.189
104.168.107.54	104.168.107.51	104.168.107.100	104.168.110.216