104.168.13.61 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.168.136.218	attackspam	Aug 4 14:22:58 datentool sshd[7487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218 user=r.r Aug 4 14:23:00 datentool sshd[7487]: Failed password for r.r from 104.168.136.218 port 59136 ssh2 Aug 4 14:25:07 datentool sshd[7515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218 user=r.r Aug 4 14:25:09 datentool sshd[7515]: Failed password for r.r from 104.168.136.218 port 46482 ssh2 Aug 4 14:26:31 datentool sshd[7594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218 user=r.r Aug 4 14:26:33 datentool sshd[7594]: Failed password for r.r from 104.168.136.218 port 59192 ssh2 Aug 4 14:27:46 datentool sshd[7613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.218 user=r.r Aug 4 14:27:48 datentool sshd[7613]: Failed password for r.r from 104.168.136......... -------------------------------	2020-08-05 01:55:19
104.168.138.77	attackbotsspam	Attempted connection to port 5501.	2020-08-01 14:06:09
104.168.136.233	attack	Spam	2020-05-28 04:33:37
104.168.136.225	attack	...	2020-05-15 22:10:37
104.168.136.225	attackspam	May 13 05:58:49 legacy sshd[13973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.225 May 13 05:58:50 legacy sshd[13973]: Failed password for invalid user ubstep from 104.168.136.225 port 38074 ssh2 May 13 06:04:12 legacy sshd[14103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.136.225 ...	2020-05-13 12:10:45
104.168.133.166	attackbots	Nov 20 05:37:34 vpn01 sshd[9462]: Failed password for root from 104.168.133.166 port 41664 ssh2 ...	2019-11-20 13:17:39
104.168.133.166	attackbots	Nov 19 11:42:27 wbs sshd\[19490\]: Invalid user th from 104.168.133.166 Nov 19 11:42:27 wbs sshd\[19490\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-605185.hostwindsdns.com Nov 19 11:42:29 wbs sshd\[19490\]: Failed password for invalid user th from 104.168.133.166 port 35494 ssh2 Nov 19 11:48:17 wbs sshd\[20024\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-605185.hostwindsdns.com user=root Nov 19 11:48:19 wbs sshd\[20024\]: Failed password for root from 104.168.133.166 port 44380 ssh2	2019-11-20 05:53:10
104.168.134.59	attackbotsspam	SSH bruteforce (Triggered fail2ban)	2019-11-19 13:37:13
104.168.134.59	attackbotsspam	Nov 18 18:42:04 marvibiene sshd[4024]: Invalid user server from 104.168.134.59 port 52410 Nov 18 18:42:04 marvibiene sshd[4024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.134.59 Nov 18 18:42:04 marvibiene sshd[4024]: Invalid user server from 104.168.134.59 port 52410 Nov 18 18:42:06 marvibiene sshd[4024]: Failed password for invalid user server from 104.168.134.59 port 52410 ssh2 ...	2019-11-19 02:53:23
104.168.133.166	attackbots	Nov 17 08:42:23 lnxweb62 sshd[21188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.133.166	2019-11-17 20:21:18
104.168.133.166	attackbots	Automatic report - SSH Brute-Force Attack	2019-11-13 05:53:46
104.168.133.166	attackspam	Nov 8 12:55:57 www6-3 sshd[32638]: Invalid user ik from 104.168.133.166 port 33990 Nov 8 12:55:57 www6-3 sshd[32638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.133.166 Nov 8 12:55:59 www6-3 sshd[32638]: Failed password for invalid user ik from 104.168.133.166 port 33990 ssh2 Nov 8 12:55:59 www6-3 sshd[32638]: Received disconnect from 104.168.133.166 port 33990:11: Bye Bye [preauth] Nov 8 12:55:59 www6-3 sshd[32638]: Disconnected from 104.168.133.166 port 33990 [preauth] Nov 8 13:18:38 www6-3 sshd[1808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.133.166 user=r.r Nov 8 13:18:41 www6-3 sshd[1808]: Failed password for r.r from 104.168.133.166 port 38420 ssh2 Nov 8 13:18:41 www6-3 sshd[1808]: Received disconnect from 104.168.133.166 port 38420:11: Bye Bye [preauth] Nov 8 13:18:41 www6-3 sshd[1808]: Disconnected from 104.168.133.166 port 38420 [preauth] Nov 8........ -------------------------------	2019-11-09 06:27:43
104.168.134.59	attackspambots	Oct 27 11:20:47 server sshd\[12138\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-536529.hostwindsdns.com user=root Oct 27 11:20:49 server sshd\[12138\]: Failed password for root from 104.168.134.59 port 56154 ssh2 Oct 27 11:35:12 server sshd\[15951\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-536529.hostwindsdns.com user=root Oct 27 11:35:14 server sshd\[15951\]: Failed password for root from 104.168.134.59 port 47198 ssh2 Oct 27 11:44:13 server sshd\[18150\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-536529.hostwindsdns.com user=root ...	2019-10-27 19:02:55
104.168.134.59	attackspambots	2019-10-22T12:59:11.701316abusebot-5.cloudsearch.cf sshd\[20301\]: Invalid user letmein123 from 104.168.134.59 port 41806	2019-10-22 21:23:00
104.168.134.59	attack	Oct 18 13:31:35 php1 sshd\[30800\]: Invalid user !@123456qwa from 104.168.134.59 Oct 18 13:31:35 php1 sshd\[30800\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.134.59 Oct 18 13:31:37 php1 sshd\[30800\]: Failed password for invalid user !@123456qwa from 104.168.134.59 port 59342 ssh2 Oct 18 13:40:13 php1 sshd\[31635\]: Invalid user opensayzme from 104.168.134.59 Oct 18 13:40:13 php1 sshd\[31635\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.134.59	2019-10-19 07:48:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.13.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29026
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.13.61.			IN	A

;; AUTHORITY SECTION:
.			479	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:37:04 CST 2022
;; MSG SIZE  rcvd: 106

Host info

61.13.168.104.in-addr.arpa domain name pointer 104-168-13-61-host.colocrossing.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
61.13.168.104.in-addr.arpa	name = 104-168-13-61-host.colocrossing.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.51.90.60	attack	Jun 18 08:22:41 ip-172-31-61-156 sshd[28849]: Failed password for invalid user matias from 49.51.90.60 port 46416 ssh2 Jun 18 08:22:39 ip-172-31-61-156 sshd[28849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.90.60 Jun 18 08:22:39 ip-172-31-61-156 sshd[28849]: Invalid user matias from 49.51.90.60 Jun 18 08:22:41 ip-172-31-61-156 sshd[28849]: Failed password for invalid user matias from 49.51.90.60 port 46416 ssh2 Jun 18 08:26:41 ip-172-31-61-156 sshd[29040]: Invalid user apollo from 49.51.90.60 ...	2020-06-18 16:55:57
152.136.108.226	attack	Jun 18 08:01:17 ArkNodeAT sshd\[24472\]: Invalid user chrf from 152.136.108.226 Jun 18 08:01:17 ArkNodeAT sshd\[24472\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.108.226 Jun 18 08:01:20 ArkNodeAT sshd\[24472\]: Failed password for invalid user chrf from 152.136.108.226 port 42618 ssh2	2020-06-18 17:09:20
186.4.242.37	attackspam	Jun 18 10:45:49 hosting sshd[13177]: Invalid user ts from 186.4.242.37 port 49610 ...	2020-06-18 17:12:01
117.4.101.26	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-06-18 17:27:35
73.250.49.54	attackbotsspam	Port Scan detected! ...	2020-06-18 17:04:30
24.172.172.2	attack	Jun 18 04:45:51 onepixel sshd[1887273]: Failed password for invalid user sy from 24.172.172.2 port 57556 ssh2 Jun 18 04:50:23 onepixel sshd[1889503]: Invalid user jxt from 24.172.172.2 port 59594 Jun 18 04:50:23 onepixel sshd[1889503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.172.172.2 Jun 18 04:50:23 onepixel sshd[1889503]: Invalid user jxt from 24.172.172.2 port 59594 Jun 18 04:50:25 onepixel sshd[1889503]: Failed password for invalid user jxt from 24.172.172.2 port 59594 ssh2	2020-06-18 17:36:57
140.143.57.195	attackbots	2020-06-18T11:07:17.392505vps751288.ovh.net sshd\[21850\]: Invalid user jobs from 140.143.57.195 port 47956 2020-06-18T11:07:17.400929vps751288.ovh.net sshd\[21850\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.195 2020-06-18T11:07:19.361787vps751288.ovh.net sshd\[21850\]: Failed password for invalid user jobs from 140.143.57.195 port 47956 ssh2 2020-06-18T11:11:17.477603vps751288.ovh.net sshd\[21896\]: Invalid user cnt from 140.143.57.195 port 37974 2020-06-18T11:11:17.488262vps751288.ovh.net sshd\[21896\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.195	2020-06-18 17:21:44
201.183.155.111	attackspam	Email rejected due to spam filtering	2020-06-18 17:36:26
201.240.21.166	attack	2020-06-17 23:34:08.331986-0500 localhost smtpd[43525]: NOQUEUE: reject: RCPT from unknown[201.240.21.166]: 554 5.7.1 Service unavailable; Client host [201.240.21.166] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/201.240.21.166; from= to= proto=ESMTP helo=	2020-06-18 17:25:53
177.0.108.210	attack	Jun 18 10:04:32 srv sshd[31920]: Failed password for root from 177.0.108.210 port 46676 ssh2	2020-06-18 17:00:52
37.0.20.10	attack	IP: 37.0.20.10 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS35467 DataDiensten Fryslan B.V. Netherlands (NL) CIDR 37.0.16.0/21 Log Date: 18/06/2020 7:35:17 AM UTC	2020-06-18 17:06:00
188.213.49.210	attack	WordPress XMLRPC scan :: 188.213.49.210 0.044 - [18/Jun/2020:07:29:12 0000] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 503 18039 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.90 Safari/537.36 2345Explorer/9.3.2.17331" "HTTP/1.1"	2020-06-18 17:42:09
68.99.85.62	attackspambots	Port Scan detected from 68.99.85.62 (US/United States/Arizona/Mesa/ip68-99-85-62.ph.ph.cox.net). 4 hits in the last 280 seconds	2020-06-18 16:59:46
61.97.248.227	attack	$f2bV_matches	2020-06-18 17:08:09
51.178.29.191	attack	Jun 18 08:17:46 server sshd[2121]: Failed password for invalid user seven from 51.178.29.191 port 51224 ssh2 Jun 18 08:20:47 server sshd[4741]: Failed password for invalid user user from 51.178.29.191 port 45788 ssh2 Jun 18 08:23:47 server sshd[6893]: Failed password for root from 51.178.29.191 port 40372 ssh2	2020-06-18 17:01:51

Recently Reported IPs

104.168.13.99	104.168.133.14	104.168.13.9	104.168.13.48
104.168.13.90	104.168.13.79	104.168.13.7	104.168.13.46
101.109.191.172	104.168.13.53	104.168.14.121	104.168.135.137
104.168.14.112	104.168.14.143	104.168.14.124	104.168.136.103
104.168.137.240	104.168.14.30	104.168.14.35	104.168.14.105