Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Hostwinds LLC.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Invalid user elliza from 104.168.145.77 port 57088
2019-12-26 14:28:20
attackbots
Dec 24 15:29:42 unicornsoft sshd\[14325\]: User root from 104.168.145.77 not allowed because not listed in AllowUsers
Dec 24 15:29:43 unicornsoft sshd\[14325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77  user=root
Dec 24 15:29:45 unicornsoft sshd\[14325\]: Failed password for invalid user root from 104.168.145.77 port 57820 ssh2
2019-12-25 05:03:54
attackspambots
Dec 23 16:52:22 eventyay sshd[4413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
Dec 23 16:52:24 eventyay sshd[4413]: Failed password for invalid user yuai from 104.168.145.77 port 33522 ssh2
Dec 23 16:58:46 eventyay sshd[4602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
...
2019-12-24 00:50:31
attackbotsspam
Dec 21 17:47:30 game-panel sshd[1850]: Failed password for uucp from 104.168.145.77 port 41272 ssh2
Dec 21 17:56:16 game-panel sshd[2277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
Dec 21 17:56:18 game-panel sshd[2277]: Failed password for invalid user stribley from 104.168.145.77 port 46134 ssh2
2019-12-22 02:17:37
attackbots
Triggered by Fail2Ban at Vostok web server
2019-12-21 06:05:40
attackspam
$f2bV_matches
2019-12-18 03:29:48
attack
Dec 10 15:38:46 hcbbdb sshd\[10011\]: Invalid user jitendra from 104.168.145.77
Dec 10 15:38:46 hcbbdb sshd\[10011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
Dec 10 15:38:48 hcbbdb sshd\[10011\]: Failed password for invalid user jitendra from 104.168.145.77 port 37410 ssh2
Dec 10 15:47:59 hcbbdb sshd\[11209\]: Invalid user niquette from 104.168.145.77
Dec 10 15:47:59 hcbbdb sshd\[11209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
2019-12-11 00:09:12
attack
Dec  9 01:40:42 jane sshd[14508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77 
Dec  9 01:40:44 jane sshd[14508]: Failed password for invalid user dtrmp4 from 104.168.145.77 port 46688 ssh2
...
2019-12-09 08:49:14
attackspambots
Nov 26 13:04:09 sachi sshd\[23879\]: Invalid user password from 104.168.145.77
Nov 26 13:04:09 sachi sshd\[23879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
Nov 26 13:04:11 sachi sshd\[23879\]: Failed password for invalid user password from 104.168.145.77 port 44058 ssh2
Nov 26 13:09:55 sachi sshd\[24433\]: Invalid user shi from 104.168.145.77
Nov 26 13:09:55 sachi sshd\[24433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
2019-11-27 09:47:26
attack
Nov 25 05:31:04 cloud sshd[28575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77  user=r.r
Nov 25 05:31:06 cloud sshd[28575]: Failed password for r.r from 104.168.145.77 port 41100 ssh2
Nov 25 05:37:55 cloud sshd[28877]: Invalid user bosc from 104.168.145.77 port 49590
Nov 25 05:37:55 cloud sshd[28877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.168.145.77
2019-11-26 15:22:37
attackspam
Nov 24 13:27:44 auw2 sshd\[31869\]: Invalid user danni from 104.168.145.77
Nov 24 13:27:44 auw2 sshd\[31869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
Nov 24 13:27:46 auw2 sshd\[31869\]: Failed password for invalid user danni from 104.168.145.77 port 57364 ssh2
Nov 24 13:35:15 auw2 sshd\[32464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77  user=daemon
Nov 24 13:35:17 auw2 sshd\[32464\]: Failed password for daemon from 104.168.145.77 port 36966 ssh2
2019-11-25 07:43:34
attackbotsspam
2019-11-24T09:48:24.897224ns547587 sshd\[5481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77  user=root
2019-11-24T09:48:27.406742ns547587 sshd\[5481\]: Failed password for root from 104.168.145.77 port 43978 ssh2
2019-11-24T09:55:28.449605ns547587 sshd\[8231\]: Invalid user rosiah from 104.168.145.77 port 52378
2019-11-24T09:55:28.455391ns547587 sshd\[8231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
...
2019-11-25 00:04:45
attackbots
Nov  3 16:55:32 vps691689 sshd[6525]: Failed password for root from 104.168.145.77 port 41790 ssh2
Nov  3 17:01:07 vps691689 sshd[6593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77
...
2019-11-04 00:17:46
attackspambots
Oct 25 17:04:18 plusreed sshd[7756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77  user=root
Oct 25 17:04:20 plusreed sshd[7756]: Failed password for root from 104.168.145.77 port 49328 ssh2
...
2019-10-26 05:10:24
Comments on same subnet:
IP Type Details Datetime
104.168.145.99 attackspam
$f2bV_matches
2020-05-26 05:07:13
104.168.145.233 attackspam
Sep 29 08:47:07 localhost postfix/smtpd[27853]: lost connection after CONNECT from hwsrv-574506.hostwindsdns.com[104.168.145.233]
Sep 29 09:14:19 localhost postfix/smtpd[1959]: lost connection after CONNECT from hwsrv-574506.hostwindsdns.com[104.168.145.233]
Sep 29 09:14:25 localhost postfix/smtpd[1959]: lost connection after RCPT from hwsrv-574506.hostwindsdns.com[104.168.145.233]
Sep 29 09:14:31 localhost postfix/smtpd[1959]: lost connection after RCPT from hwsrv-574506.hostwindsdns.com[104.168.145.233]
Sep 29 09:14:44 localhost postfix/smtpd[1959]: lost connection after RCPT from hwsrv-574506.hostwindsdns.com[104.168.145.233]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.168.145.233
2019-10-03 17:54:18
104.168.145.233 attack
mail relay > 100 attempts
019-09-11 14:55:04 SMTP connection from [104.168.145.233]:61346 (TCP/IP connection count = 1)
2019:09:11-14:55:05 exim-in[11624]: 2019-09-11 14:55:05 H=hwsrv-574506.hostwindsdns.com (hwc-hwp-4966180) [104.168.145.233]:61346 F= rejected RCPT : Relay not permitted
2019:09:11-14:55:05 exim-in[11624]: 2019-09-11 14:55:05 SMTP connection from hwsrv-574506.hostwindsdns.com (hwc-hwp-4966180) [104.168.145.233]:61346 closed by DROP in ACL
2019-09-12 04:12:07
104.168.145.196 spambots
spam
2019-09-10 14:37:51
104.168.145.233 attack
Attempt to login to email server on SMTP service on 09-09-2019 16:00:53.
2019-09-10 03:50:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.145.77
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1558
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.168.145.77.			IN	A

;; AUTHORITY SECTION:
.			454	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102501 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 26 05:10:21 CST 2019
;; MSG SIZE  rcvd: 118
Host info
77.145.168.104.in-addr.arpa domain name pointer client-104-168-145-77.hostwindsdns.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
77.145.168.104.in-addr.arpa	name = client-104-168-145-77.hostwindsdns.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
64.225.22.43 attack
scans 2 times in preceeding hours on the ports (in chronological order) 1235 1235 resulting in total of 4 scans from 64.225.0.0/17 block.
2020-06-07 03:04:31
162.243.138.126 attack
scans once in preceeding hours on the ports (in chronological order) 8983 resulting in total of 34 scans from 162.243.0.0/16 block.
2020-06-07 03:10:36
162.243.136.136 attackspambots
 TCP (SYN) 162.243.136.136:44414 -> port 23, len 40
2020-06-07 03:14:13
223.100.53.196 attack
scans once in preceeding hours on the ports (in chronological order) 2323 resulting in total of 7 scans from 223.64.96.0/12 block.
2020-06-07 03:07:13
2a00:c760:83:def:aced:ffff:b921:360f attackspambots
[munged]::443 2a00:c760:83:def:aced:ffff:b921:360f - - [06/Jun/2020:20:06:38 +0200] "POST /[munged]: HTTP/1.1" 200 7776 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 2a00:c760:83:def:aced:ffff:b921:360f - - [06/Jun/2020:20:06:42 +0200] "POST /[munged]: HTTP/1.1" 200 7646 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 2a00:c760:83:def:aced:ffff:b921:360f - - [06/Jun/2020:20:06:44 +0200] "POST /[munged]: HTTP/1.1" 200 7646 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 2a00:c760:83:def:aced:ffff:b921:360f - - [06/Jun/2020:20:06:47 +0200] "POST /[munged]: HTTP/1.1" 200 7645 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 2a00:c760:83:def:aced:ffff:b921:360f - - [06/Jun/2020:20:06:49 +0200] "POST /[munged]: HTTP/1.1" 200 7642 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]:
2020-06-07 03:26:33
162.243.137.157 attackspambots
 TCP (SYN) 162.243.137.157:37786 -> port 88, len 44
2020-06-07 03:12:22
78.30.38.152 attackbots
firewall-block, port(s): 80/tcp
2020-06-07 03:26:00
189.114.140.70 attack
Jun  6 14:28:30 haigwepa sshd[31547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.114.140.70 
Jun  6 14:28:32 haigwepa sshd[31547]: Failed password for invalid user admin from 189.114.140.70 port 38483 ssh2
...
2020-06-07 03:29:01
162.243.138.123 attackbotsspam
scans once in preceeding hours on the ports (in chronological order) 49152 resulting in total of 34 scans from 162.243.0.0/16 block.
2020-06-07 03:10:56
68.183.34.236 attackbots
scans once in preceeding hours on the ports (in chronological order) 6485 resulting in total of 2 scans from 68.183.0.0/16 block.
2020-06-07 03:02:29
49.88.112.111 attack
June 06 2020, 15:24:25 [sshd] - Banned from the Mad Pony WordPress hosting platform by Fail2ban.
2020-06-07 03:27:53
79.124.62.82 attackbots
Fail2Ban Ban Triggered
2020-06-07 03:16:54
162.243.137.229 attackspambots
Jun  6 21:32:35 debian kernel: [370914.949634] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=162.243.137.229 DST=89.252.131.35 LEN=68 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=UDP SPT=51897 DPT=111 LEN=48
2020-06-07 03:11:51
51.91.247.125 attackspambots
scans once in preceeding hours on the ports (in chronological order) 9042 resulting in total of 1 scans from 51.91.247.0/24 block.
2020-06-07 03:05:22
80.82.77.139 attack
Unauthorized connection attempt detected from IP address 80.82.77.139 to port 2455
2020-06-07 03:00:18

Recently Reported IPs

2804:14d:72a4:8add:ed9f:fa18:aa5e:67cb 190.37.157.17 193.146.75.142 77.42.78.45
3.112.222.189 119.235.49.186 18.212.112.0 51.75.37.174
183.53.158.143 23.94.160.159 162.241.70.208 112.175.124.138
81.218.196.107 159.192.201.158 183.151.42.82 77.42.127.35
208.186.112.101 103.72.10.9 94.177.242.218 1.4.192.72