104.168.157.99

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.168.157.78	attackspam	Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: CONNECT from [104.168.157.78]:37969 to [176.31.12.44]:25 Oct 15 13:58:52 mxgate1 postfix/dnsblog[18433]: addr 104.168.157.78 listed by domain zen.spamhaus.org as 127.0.0.3 Oct 15 13:58:52 mxgate1 postfix/dnsblog[18434]: addr 104.168.157.78 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: PREGREET 27 after 0.24 from [104.168.157.78]:37969: EHLO 02d70123.aircooll.co Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: DNSBL rank 3 for [104.168.157.78]:37969 Oct x@x Oct 15 13:58:53 mxgate1 postfix/postscreen[18142]: DISCONNECT [104.168.157.78]:37969 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.168.157.78	2019-10-15 21:42:15

Type

Details

Datetime

104.168.157.78

attackspam

Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: CONNECT from [104.168.157.78]:37969 to [176.31.12.44]:25
Oct 15 13:58:52 mxgate1 postfix/dnsblog[18433]: addr 104.168.157.78 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 15 13:58:52 mxgate1 postfix/dnsblog[18434]: addr 104.168.157.78 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: PREGREET 27 after 0.24 from [104.168.157.78]:37969: EHLO 02d70123.aircooll.co

Oct 15 13:58:52 mxgate1 postfix/postscreen[18142]: DNSBL rank 3 for [104.168.157.78]:37969
Oct x@x
Oct 15 13:58:53 mxgate1 postfix/postscreen[18142]: DISCONNECT [104.168.157.78]:37969


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.168.157.78

2019-10-15 21:42:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.157.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57021
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.157.99.			IN	A

;; AUTHORITY SECTION:
.			380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:38:26 CST 2022
;; MSG SIZE  rcvd: 107

Host info

99.157.168.104.in-addr.arpa domain name pointer wekapps.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
99.157.168.104.in-addr.arpa	name = wekapps.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.58.117.252	attack	Automatic report - XMLRPC Attack	2020-08-05 02:36:27
218.92.0.251	attackspam	Aug 4 20:09:16 plg sshd[25345]: Failed none for invalid user root from 218.92.0.251 port 15203 ssh2 Aug 4 20:09:17 plg sshd[25345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.251 user=root Aug 4 20:09:18 plg sshd[25345]: Failed password for invalid user root from 218.92.0.251 port 15203 ssh2 Aug 4 20:09:22 plg sshd[25345]: Failed password for invalid user root from 218.92.0.251 port 15203 ssh2 Aug 4 20:09:26 plg sshd[25345]: Failed password for invalid user root from 218.92.0.251 port 15203 ssh2 Aug 4 20:09:30 plg sshd[25345]: Failed password for invalid user root from 218.92.0.251 port 15203 ssh2 Aug 4 20:09:34 plg sshd[25345]: Failed password for invalid user root from 218.92.0.251 port 15203 ssh2 Aug 4 20:09:34 plg sshd[25345]: error: maximum authentication attempts exceeded for invalid user root from 218.92.0.251 port 15203 ssh2 [preauth] ...	2020-08-05 02:11:26
34.93.41.18	attack	Aug 4 14:56:18 vps46666688 sshd[28680]: Failed password for root from 34.93.41.18 port 42108 ssh2 ...	2020-08-05 02:36:39
103.230.122.43	attackspam	2020-08-04T20:09:28.764473hostname sshd[100495]: Failed password for root from 103.230.122.43 port 36928 ssh2 ...	2020-08-05 02:10:23
14.239.85.185	attack	Unauthorized connection attempt from IP address 14.239.85.185 on Port 445(SMB)	2020-08-05 02:26:37
88.231.76.135	attackbots	DATE:2020-08-04 20:01:02, IP:88.231.76.135, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-08-05 02:24:27
119.96.124.131	attackbots	Brute-Force	2020-08-05 02:17:29
49.88.112.67	attackspam	Aug 4 15:00:01 dns1 sshd[17748]: Failed password for root from 49.88.112.67 port 61718 ssh2 Aug 4 15:00:05 dns1 sshd[17748]: Failed password for root from 49.88.112.67 port 61718 ssh2 Aug 4 15:00:09 dns1 sshd[17748]: Failed password for root from 49.88.112.67 port 61718 ssh2	2020-08-05 02:10:57
88.241.79.62	attack	Unauthorized connection attempt from IP address 88.241.79.62 on Port 445(SMB)	2020-08-05 02:27:25
177.223.63.26	attackbotsspam	Attempting to exploit via a http POST	2020-08-05 02:20:54
125.231.96.212	attack	Unauthorized connection attempt from IP address 125.231.96.212 on Port 445(SMB)	2020-08-05 02:12:05
14.192.192.183	attack	$f2bV_matches	2020-08-05 02:13:26
51.158.112.98	attackbots	2020-08-03T10:40:43.453100hostname sshd[66379]: Failed password for root from 51.158.112.98 port 41848 ssh2 ...	2020-08-05 02:10:44
92.38.130.196	attack	Aug 4 14:00:53 Host-KEWR-E postfix/smtpd[3593]: NOQUEUE: reject: RCPT from unknown[92.38.130.196]: 554 5.7.1 <12417-195-3431-2755-elena=vestibtech.com@mail.proearnerst.icu>: Sender address rejected: We reject all .icu domains; from=<12417-195-3431-2755-elena=vestibtech.com@mail.proearnerst.icu> to= proto=ESMTP helo= ...	2020-08-05 02:30:25
211.247.46.189	attackspam	firewall-block, port(s): 26/tcp	2020-08-05 02:50:20

Recently Reported IPs

104.168.139.154	104.168.158.25	104.168.173.154	104.168.163.162
104.168.213.171	104.168.214.207	104.168.204.218	104.168.190.92
104.168.198.187	104.21.64.103	104.168.202.185	104.168.176.98
104.168.215.59	104.168.182.98	104.168.34.153	104.17.1.48
104.17.100.18	104.21.64.108	104.17.10.12	104.17.100.98