104.168.193.72

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Hostwinds LLC.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	$f2bV_matches	2019-08-19 16:12:34
attackspam	$f2bV_matches	2019-08-11 13:02:16
attackspam	Aug 10 13:41:14 plusreed sshd[6159]: Invalid user nagios from 104.168.193.72 ...	2019-08-11 01:42:30
attackspam	Aug 4 06:39:50 SilenceServices sshd[8670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.193.72 Aug 4 06:39:52 SilenceServices sshd[8670]: Failed password for invalid user george from 104.168.193.72 port 57672 ssh2 Aug 4 06:46:59 SilenceServices sshd[13790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.193.72	2019-08-04 12:53:48

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.193.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29407
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.168.193.72.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 04 12:53:41 CST 2019
;; MSG SIZE  rcvd: 118

Host info

72.193.168.104.in-addr.arpa domain name pointer hwsrv-546883.hostwindsdns.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
72.193.168.104.in-addr.arpa	name = hwsrv-546883.hostwindsdns.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.28.148.242	attack	May 26 07:33:14 *** sshd[6709]: User root from 129.28.148.242 not allowed because not listed in AllowUsers	2020-05-26 15:57:05
118.40.248.20	attack	May 26 09:29:04 piServer sshd[16498]: Failed password for root from 118.40.248.20 port 37108 ssh2 May 26 09:33:20 piServer sshd[16851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.40.248.20 May 26 09:33:22 piServer sshd[16851]: Failed password for invalid user git from 118.40.248.20 port 39647 ssh2 ...	2020-05-26 15:48:41
95.129.40.109	attack	[26/May/2020 09:29:33] SPF check failed: The IP address '95.129.40.109' is not in permitted set for sender 'kimberley.lin@fedex.com' (FAIL) [26/May/2020 09:29:53] Found virus in mail from VIRUS: Trojan.Zmutzy.803	2020-05-26 15:59:14
123.180.139.202	attack	(smtpauth) Failed SMTP AUTH login from 123.180.139.202 (CN/China/-): 5 in the last 3600 secs	2020-05-26 15:54:03
125.160.137.119	attack	(sshd) Failed SSH login from 125.160.137.119 (ID/Indonesia/119.subnet125-160-137.speedy.telkom.net.id): 5 in the last 3600 secs	2020-05-26 15:44:37
14.116.193.91	attackspambots	May 25 20:40:29 NPSTNNYC01T sshd[409]: Failed password for root from 14.116.193.91 port 52656 ssh2 May 25 20:45:15 NPSTNNYC01T sshd[969]: Failed password for root from 14.116.193.91 port 47800 ssh2 ...	2020-05-26 15:17:15
200.61.190.81	attackbots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-05-26 15:26:02
112.85.42.232	attackspambots	May 26 08:38:55 fhem-rasp sshd[30248]: Disconnected from 112.85.42.232 port 35884 [preauth] ...	2020-05-26 15:31:34
175.24.139.99	attackspam	May 25 19:12:44 eddieflores sshd\[9191\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.139.99 user=root May 25 19:12:46 eddieflores sshd\[9191\]: Failed password for root from 175.24.139.99 port 41584 ssh2 May 25 19:16:29 eddieflores sshd\[9494\]: Invalid user map from 175.24.139.99 May 25 19:16:29 eddieflores sshd\[9494\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.139.99 May 25 19:16:31 eddieflores sshd\[9494\]: Failed password for invalid user map from 175.24.139.99 port 52894 ssh2	2020-05-26 15:20:02
111.231.75.5	attackspambots	Invalid user danikar from 111.231.75.5 port 51224	2020-05-26 15:22:28
187.106.92.196	attackbots	2020-05-26T09:13:06.742220amanda2.illicoweb.com sshd\[35638\]: Invalid user user from 187.106.92.196 port 38954 2020-05-26T09:13:06.748784amanda2.illicoweb.com sshd\[35638\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.106.92.196 2020-05-26T09:13:08.903741amanda2.illicoweb.com sshd\[35638\]: Failed password for invalid user user from 187.106.92.196 port 38954 ssh2 2020-05-26T09:17:56.798733amanda2.illicoweb.com sshd\[35790\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.106.92.196 user=root 2020-05-26T09:17:59.430663amanda2.illicoweb.com sshd\[35790\]: Failed password for root from 187.106.92.196 port 43864 ssh2 ...	2020-05-26 15:21:09
41.33.146.1	attackspambots	" "	2020-05-26 15:23:14
54.39.10.53	attack	Port Scan detected! ...	2020-05-26 15:55:40
180.76.56.108	attackbotsspam	SSH Brute-Force reported by Fail2Ban	2020-05-26 15:51:00
157.230.37.16	attackbots	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-05-26 15:33:42

Recently Reported IPs

222.117.216.204	87.17.91.178	179.189.201.95	86.102.108.53
27.14.80.108	179.233.3.218	125.44.189.140	118.70.239.136
144.52.107.55	87.59.77.146	110.156.98.93	92.42.11.26
176.221.2.59	171.229.153.111	191.191.208.149	100.72.197.83
123.119.11.107	180.68.44.97	154.8.154.104	220.4.71.12