Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Hostwinds LLC.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: CONNECT from [104.168.157.78]:37969 to [176.31.12.44]:25
Oct 15 13:58:52 mxgate1 postfix/dnsblog[18433]: addr 104.168.157.78 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 15 13:58:52 mxgate1 postfix/dnsblog[18434]: addr 104.168.157.78 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: PREGREET 27 after 0.24 from [104.168.157.78]:37969: EHLO 02d70123.aircooll.co

Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: DNSBL rank 3 for [104.168.157.78]:37969
Oct x@x
Oct 15 13:58:53 mxgate1 postfix/postscreen[18142]: DISCONNECT [104.168.157.78]:37969


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.168.157.78
2019-10-15 21:42:15
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.157.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64725
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.168.157.78.			IN	A

;; AUTHORITY SECTION:
.			458	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101500 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 15 21:42:11 CST 2019
;; MSG SIZE  rcvd: 118
Host info
78.157.168.104.in-addr.arpa domain name pointer client-104-168-157-78.hostwindsdns.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
78.157.168.104.in-addr.arpa	name = client-104-168-157-78.hostwindsdns.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
125.25.175.117 attackspam
20/6/27@08:13:45: FAIL: Alarm-Network address from=125.25.175.117
20/6/27@08:13:45: FAIL: Alarm-Network address from=125.25.175.117
...
2020-06-28 04:34:58
161.35.49.231 attack
xmlrpc attack
2020-06-28 04:46:34
223.223.190.130 attackspambots
Jun 27 21:13:24 plex sshd[3352]: Failed password for invalid user server from 223.223.190.130 port 41529 ssh2
Jun 27 21:13:22 plex sshd[3352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.223.190.130
Jun 27 21:13:22 plex sshd[3352]: Invalid user server from 223.223.190.130 port 41529
Jun 27 21:13:24 plex sshd[3352]: Failed password for invalid user server from 223.223.190.130 port 41529 ssh2
Jun 27 21:15:59 plex sshd[3466]: Invalid user brian from 223.223.190.130 port 17990
2020-06-28 04:33:17
164.132.98.229 attackspambots
164.132.98.229 - - [27/Jun/2020:21:46:26 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
164.132.98.229 - - [27/Jun/2020:21:46:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
164.132.98.229 - - [27/Jun/2020:21:46:29 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-06-28 04:49:42
82.146.45.123 attackbotsspam
Fail2Ban Ban Triggered
2020-06-28 04:30:51
51.91.110.51 attackspam
SSH invalid-user multiple login attempts
2020-06-28 04:56:11
140.203.204.59 attackbotsspam
Invalid user app from 140.203.204.59 port 60154
2020-06-28 04:45:37
170.83.230.2 attackbotsspam
Jun 27 20:13:22 l02a sshd[32629]: Invalid user hvu from 170.83.230.2
Jun 27 20:13:22 l02a sshd[32629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170-83-230-2.l2ktelecom.net.br 
Jun 27 20:13:22 l02a sshd[32629]: Invalid user hvu from 170.83.230.2
Jun 27 20:13:24 l02a sshd[32629]: Failed password for invalid user hvu from 170.83.230.2 port 39522 ssh2
2020-06-28 04:34:29
4.7.94.244 attackspam
(sshd) Failed SSH login from 4.7.94.244 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 27 22:48:28 ubnt-55d23 sshd[30265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.7.94.244  user=root
Jun 27 22:48:30 ubnt-55d23 sshd[30265]: Failed password for root from 4.7.94.244 port 57680 ssh2
2020-06-28 04:57:41
112.85.42.227 attackbotsspam
Jun 27 16:23:57 NPSTNNYC01T sshd[21715]: Failed password for root from 112.85.42.227 port 36757 ssh2
Jun 27 16:24:00 NPSTNNYC01T sshd[21715]: Failed password for root from 112.85.42.227 port 36757 ssh2
Jun 27 16:24:02 NPSTNNYC01T sshd[21715]: Failed password for root from 112.85.42.227 port 36757 ssh2
...
2020-06-28 04:37:56
109.125.240.73 attackspambots
Automatic report - XMLRPC Attack
2020-06-28 04:29:55
193.178.131.133 attackbots
Jun 27 21:48:21 * sshd[15118]: Failed password for news from 193.178.131.133 port 32936 ssh2
2020-06-28 04:31:34
185.143.73.148 attackspambots
Jun 27 22:45:54 srv01 postfix/smtpd\[30567\]: warning: unknown\[185.143.73.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 27 22:46:26 srv01 postfix/smtpd\[30441\]: warning: unknown\[185.143.73.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 27 22:46:32 srv01 postfix/smtpd\[30566\]: warning: unknown\[185.143.73.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 27 22:47:05 srv01 postfix/smtpd\[29465\]: warning: unknown\[185.143.73.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 27 22:47:34 srv01 postfix/smtpd\[737\]: warning: unknown\[185.143.73.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-28 05:00:50
202.137.154.154 attackspambots
Brute force attempt
2020-06-28 04:27:09
85.93.20.83 attackspambots
200627 16:29:53 [Warning] Access denied for user 'root'@'85.93.20.83' (using password: YES)
200627 16:29:58 [Warning] Access denied for user 'Admin'@'85.93.20.83' (using password: YES)
200627 16:30:02 [Warning] Access denied for user 'bankruptcy'@'85.93.20.83' (using password: YES)
...
2020-06-28 05:03:12

Recently Reported IPs

207.184.30.106 46.102.114.246 24.222.137.253 123.30.157.199
182.22.91.71 122.167.81.85 107.180.108.34 37.114.139.208
116.58.38.85 1.54.161.53 142.44.211.179 80.82.78.100
43.243.165.150 190.152.39.146 66.96.183.7 118.75.163.244
103.71.231.252 88.204.175.210 134.73.16.250 85.132.110.166