104.168.142.194

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Hostwinds LLC.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	port 23	2020-06-20 04:42:22

Comments on same subnet:

IP	Type	Details	Datetime
104.168.142.227	attackbots	lfd: (smtpauth) Failed SMTP AUTH login from 104.168.142.227 (hwsrv-273223.hostwindsdns.com): 5 in the last 3600 secs - Fri Jun 22 19:11:59 2018	2020-04-30 13:06:04
104.168.142.227	attackbotsspam	lfd: (smtpauth) Failed SMTP AUTH login from 104.168.142.227 (hwsrv-273223.hostwindsdns.com): 5 in the last 3600 secs - Fri Jun 22 19:11:59 2018	2020-02-23 23:48:05
104.168.142.229	attack	2020-01-19T23:42:11.3404711495-001 sshd[29566]: Invalid user lena from 104.168.142.229 port 55354 2020-01-19T23:42:11.3496611495-001 sshd[29566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-656802.hostwindsdns.com 2020-01-19T23:42:11.3404711495-001 sshd[29566]: Invalid user lena from 104.168.142.229 port 55354 2020-01-19T23:42:13.0808461495-001 sshd[29566]: Failed password for invalid user lena from 104.168.142.229 port 55354 ssh2 2020-01-19T23:44:41.3200111495-001 sshd[29648]: Invalid user admin from 104.168.142.229 port 50442 2020-01-19T23:44:41.3232021495-001 sshd[29648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-656802.hostwindsdns.com 2020-01-19T23:44:41.3200111495-001 sshd[29648]: Invalid user admin from 104.168.142.229 port 50442 2020-01-19T23:44:42.9783291495-001 sshd[29648]: Failed password for invalid user admin from 104.168.142.229 port 50442 ssh2 2020-01-19T23:47:09.1872401 ...	2020-01-20 13:09:22
104.168.142.229	attackspambots	Jan 17 14:51:45 dedicated sshd[8525]: Invalid user vnc from 104.168.142.229 port 39966	2020-01-17 23:38:18
104.168.142.229	attackbots	Unauthorized connection attempt detected from IP address 104.168.142.229 to port 2220 [J]	2020-01-17 04:56:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.142.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54771
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.168.142.194.		IN	A

;; AUTHORITY SECTION:
.			212	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061901 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 20 04:42:18 CST 2020
;; MSG SIZE  rcvd: 119

Host info

194.142.168.104.in-addr.arpa domain name pointer hwsrv-740489.hostwindsdns.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
194.142.168.104.in-addr.arpa	name = hwsrv-740489.hostwindsdns.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
179.83.56.223	attackbotsspam	Automatic report - Port Scan Attack	2020-01-01 15:53:19
92.63.194.81	attack	01/01/2020-01:28:16.580361 92.63.194.81 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-01 15:44:26
218.107.213.89	attack	Jan 1 08:38:26 host postfix/smtpd[48456]: warning: unknown[218.107.213.89]: SASL LOGIN authentication failed: authentication failure Jan 1 08:38:29 host postfix/smtpd[48456]: warning: unknown[218.107.213.89]: SASL LOGIN authentication failed: authentication failure ...	2020-01-01 15:49:29
203.92.33.93	attackbots	C1,WP GET /lappan/wp-login.php	2020-01-01 15:34:13
178.128.86.127	attackbotsspam	Jan 1 07:16:24 server sshd[3669]: Failed password for invalid user saint from 178.128.86.127 port 42126 ssh2 Jan 1 07:25:03 server sshd[3923]: Failed password for invalid user admin from 178.128.86.127 port 39250 ssh2 Jan 1 07:27:42 server sshd[3972]: Failed password for invalid user gamm from 178.128.86.127 port 34256 ssh2	2020-01-01 16:06:07
51.75.29.61	attackbots	Jan 1 08:22:11 eventyay sshd[27704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.29.61 Jan 1 08:22:13 eventyay sshd[27704]: Failed password for invalid user sya from 51.75.29.61 port 44564 ssh2 Jan 1 08:31:25 eventyay sshd[27768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.29.61 ...	2020-01-01 15:57:50
109.77.114.126	attackspambots	Unauthorized connection attempt detected from IP address 109.77.114.126 to port 9000	2020-01-01 15:59:59
139.219.0.20	attackbots	Lines containing failures of 139.219.0.20 Dec 31 02:21:43 shared06 sshd[19150]: Invalid user seremet from 139.219.0.20 port 52094 Dec 31 02:21:43 shared06 sshd[19150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Dec 31 02:21:45 shared06 sshd[19150]: Failed password for invalid user seremet from 139.219.0.20 port 52094 ssh2 Dec 31 02:21:45 shared06 sshd[19150]: Received disconnect from 139.219.0.20 port 52094:11: Bye Bye [preauth] Dec 31 02:21:45 shared06 sshd[19150]: Disconnected from invalid user seremet 139.219.0.20 port 52094 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.219.0.20	2020-01-01 15:38:15
152.136.225.47	attackspambots	Jan 1 07:23:26 v22018076622670303 sshd\[9484\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.225.47 user=root Jan 1 07:23:27 v22018076622670303 sshd\[9484\]: Failed password for root from 152.136.225.47 port 50468 ssh2 Jan 1 07:28:37 v22018076622670303 sshd\[9515\]: Invalid user bowry from 152.136.225.47 port 53820 Jan 1 07:28:37 v22018076622670303 sshd\[9515\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.225.47 ...	2020-01-01 15:31:50
176.15.4.13	attackbots	Jan 1 06:28:16 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=176.15.4.13, lip=10.140.194.78, TLS, session=	2020-01-01 15:43:39
37.187.54.67	attack	2020-01-01T07:50:41.263529shield sshd\[9679\]: Invalid user 1qazsedc from 37.187.54.67 port 57783 2020-01-01T07:50:41.267972shield sshd\[9679\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.ip-37-187-54.eu 2020-01-01T07:50:43.245518shield sshd\[9679\]: Failed password for invalid user 1qazsedc from 37.187.54.67 port 57783 ssh2 2020-01-01T07:53:34.623974shield sshd\[10865\]: Invalid user hhhhhhhhh from 37.187.54.67 port 44764 2020-01-01T07:53:34.628359shield sshd\[10865\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.ip-37-187-54.eu	2020-01-01 16:05:12
112.169.255.1	attack	Jan 1 08:07:52 minden010 sshd[11519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.169.255.1 Jan 1 08:07:54 minden010 sshd[11519]: Failed password for invalid user kunze from 112.169.255.1 port 50510 ssh2 Jan 1 08:11:29 minden010 sshd[16362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.169.255.1 ...	2020-01-01 15:54:13
106.13.31.93	attack	Jan 1 07:36:57 localhost sshd\[25951\]: Invalid user bot from 106.13.31.93 port 51232 Jan 1 07:36:57 localhost sshd\[25951\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.31.93 Jan 1 07:36:59 localhost sshd\[25951\]: Failed password for invalid user bot from 106.13.31.93 port 51232 ssh2 Jan 1 07:41:45 localhost sshd\[26138\]: Invalid user marija from 106.13.31.93 port 48846 Jan 1 07:41:45 localhost sshd\[26138\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.31.93 ...	2020-01-01 15:51:11
222.186.190.2	attack	$f2bV_matches	2020-01-01 16:02:07
159.89.165.36	attackbots	Jan 1 07:28:20 zeus sshd[14354]: Failed password for mysql from 159.89.165.36 port 57712 ssh2 Jan 1 07:32:03 zeus sshd[14442]: Failed password for root from 159.89.165.36 port 32954 ssh2 Jan 1 07:35:31 zeus sshd[14531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.165.36	2020-01-01 16:01:40

Recently Reported IPs

45.68.109.161	224.151.204.232	214.63.164.47	233.17.141.138
185.36.107.237	51.159.66.110	106.67.172.140	204.196.139.70
161.5.218.147	239.13.218.116	202.93.76.170	151.132.192.127
194.2.51.127	238.35.195.48	143.199.167.156	39.247.6.253
190.202.178.146	76.172.87.46	52.186.140.214	49.248.13.186