Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.168.243.221 spam
Spammer using interterkgroup.org. [104.168.243.221]  Blacklisted in https://multirbl.valli.org/lookup/104.168.243.221.html, https://cleantalk.org/blacklists/104.168.243.221#anc131368, https://www.liveipmap.com/104.168.243.221?lang=en_us
2022-09-21 02:15:19
104.168.214.53 attackspambots
[f2b] sshd bruteforce, retries: 1
2020-10-12 05:31:58
104.168.214.53 attack
[f2b] sshd bruteforce, retries: 1
2020-10-11 21:38:42
104.168.214.53 attack
5x Failed Password
2020-10-11 13:35:31
104.168.214.53 attackbotsspam
20 attempts against mh-ssh on ice
2020-10-11 06:59:12
104.168.214.86 attack
Oct  8 11:05:14 mail postfix/smtpd[27643]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: authentication failure
2020-10-09 05:12:13
104.168.214.86 attack
Oct  7 22:46:27 mellenthin postfix/smtpd[26683]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: UGFzc3dvcmQ6
Oct  7 22:46:34 mellenthin postfix/smtpd[26683]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: UGFzc3dvcmQ6
2020-10-08 21:25:49
104.168.214.86 attack
Oct  7 22:46:27 mellenthin postfix/smtpd[26683]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: UGFzc3dvcmQ6
Oct  7 22:46:34 mellenthin postfix/smtpd[26683]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: UGFzc3dvcmQ6
2020-10-08 13:19:54
104.168.214.86 attackspam
Oct  7 22:46:27 mellenthin postfix/smtpd[26683]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: UGFzc3dvcmQ6
Oct  7 22:46:34 mellenthin postfix/smtpd[26683]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: UGFzc3dvcmQ6
2020-10-08 08:40:21
104.168.28.195 attackspam
SSH brutforce
2020-09-28 02:33:46
104.168.28.195 attackbots
Invalid user uno8 from 104.168.28.195 port 58841
2020-09-27 18:40:08
104.168.246.59 attack
.
2020-09-27 04:38:00
104.168.246.59 attack
.
2020-09-27 04:37:49
104.168.28.214 attackspam
Aug 25 08:10:03 mockhub sshd[15514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.28.214
Aug 25 08:10:05 mockhub sshd[15514]: Failed password for invalid user lxx from 104.168.28.214 port 43056 ssh2
...
2020-08-26 02:51:27
104.168.28.214 attackbots
SSH authentication failure x 6 reported by Fail2Ban
...
2020-08-20 03:52:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.2.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17238
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.2.172.			IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:38:10 CST 2022
;; MSG SIZE  rcvd: 106
Host info
172.2.168.104.in-addr.arpa domain name pointer 104-168-2-172-host.colocrossing.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
172.2.168.104.in-addr.arpa	name = 104-168-2-172-host.colocrossing.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
125.163.239.178 attackspambots
Unauthorized connection attempt from IP address 125.163.239.178 on Port 445(SMB)
2019-11-01 01:00:53
51.75.53.115 attackbots
Oct 31 13:23:42 localhost sshd\[54187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.53.115  user=root
Oct 31 13:23:44 localhost sshd\[54187\]: Failed password for root from 51.75.53.115 port 52222 ssh2
Oct 31 13:27:41 localhost sshd\[54296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.53.115  user=root
Oct 31 13:27:43 localhost sshd\[54296\]: Failed password for root from 51.75.53.115 port 35502 ssh2
Oct 31 13:31:46 localhost sshd\[54398\]: Invalid user mika from 51.75.53.115 port 47016
...
2019-11-01 00:26:25
196.188.241.10 attackspam
Unauthorized connection attempt from IP address 196.188.241.10 on Port 445(SMB)
2019-11-01 00:38:28
116.72.20.255 attackspambots
Unauthorized connection attempt from IP address 116.72.20.255 on Port 445(SMB)
2019-11-01 00:19:01
109.194.54.130 attack
Automatic report - Banned IP Access
2019-11-01 00:36:00
51.77.145.82 attackbotsspam
Oct 31 15:27:02 vps691689 sshd[2459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.145.82
Oct 31 15:27:05 vps691689 sshd[2459]: Failed password for invalid user !QAZxsw23 from 51.77.145.82 port 47536 ssh2
...
2019-11-01 01:00:13
51.83.71.72 attack
Oct 31 17:33:26 mail postfix/smtpd[19038]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 31 17:33:45 mail postfix/smtpd[19012]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 31 17:33:49 mail postfix/smtpd[18961]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-01 00:46:50
190.144.135.118 attack
Oct 31 04:42:36 kapalua sshd\[6026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.135.118  user=root
Oct 31 04:42:38 kapalua sshd\[6026\]: Failed password for root from 190.144.135.118 port 38874 ssh2
Oct 31 04:46:14 kapalua sshd\[6312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.135.118  user=root
Oct 31 04:46:16 kapalua sshd\[6312\]: Failed password for root from 190.144.135.118 port 56269 ssh2
Oct 31 04:50:07 kapalua sshd\[6586\]: Invalid user gi from 190.144.135.118
2019-11-01 00:29:30
89.36.217.142 attack
2019-10-31T13:06:29.802960abusebot-6.cloudsearch.cf sshd\[1472\]: Invalid user sohu from 89.36.217.142 port 44346
2019-11-01 00:34:32
222.186.169.192 attackbots
Brute force attempt
2019-11-01 01:00:37
41.210.128.37 attackspambots
2019-10-31T11:57:21.649267shield sshd\[32452\]: Invalid user scan from 41.210.128.37 port 59162
2019-10-31T11:57:21.653494shield sshd\[32452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=h25.n1.ips.mtn.co.ug
2019-10-31T11:57:24.074594shield sshd\[32452\]: Failed password for invalid user scan from 41.210.128.37 port 59162 ssh2
2019-10-31T12:02:42.076096shield sshd\[1481\]: Invalid user anup from 41.210.128.37 port 49820
2019-10-31T12:02:42.081314shield sshd\[1481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=h25.n1.ips.mtn.co.ug
2019-11-01 00:39:40
122.166.159.56 attackspam
Oct 31 16:53:49 cp sshd[16806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.166.159.56
Oct 31 16:53:49 cp sshd[16806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.166.159.56
2019-11-01 00:30:21
167.172.82.230 attackbotsspam
Lines containing failures of 167.172.82.230
Oct 31 06:46:45 zabbix sshd[79640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.82.230  user=r.r
Oct 31 06:46:47 zabbix sshd[79640]: Failed password for r.r from 167.172.82.230 port 47148 ssh2
Oct 31 06:46:47 zabbix sshd[79640]: Received disconnect from 167.172.82.230 port 47148:11: Bye Bye [preauth]
Oct 31 06:46:47 zabbix sshd[79640]: Disconnected from authenticating user r.r 167.172.82.230 port 47148 [preauth]
Oct 31 07:04:24 zabbix sshd[81004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.82.230  user=r.r
Oct 31 07:04:26 zabbix sshd[81004]: Failed password for r.r from 167.172.82.230 port 42114 ssh2
Oct 31 07:04:27 zabbix sshd[81004]: Received disconnect from 167.172.82.230 port 42114:11: Bye Bye [preauth]
Oct 31 07:04:27 zabbix sshd[81004]: Disconnected from authenticating user r.r 167.172.82.230 port 42114 [preauth]
Oct 3........
------------------------------
2019-11-01 00:37:30
74.63.250.6 attackbotsspam
2019-10-31T12:02:13.023378abusebot-7.cloudsearch.cf sshd\[20876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.63.250.6  user=root
2019-11-01 01:02:08
199.249.230.68 attackspam
Automatic report - XMLRPC Attack
2019-11-01 00:19:17

Recently Reported IPs

104.168.2.180 101.109.191.207 104.168.2.200 101.109.191.211
101.109.191.34 101.109.191.36 101.109.191.4 101.109.191.41
117.76.27.8 101.109.191.63 101.109.191.65 161.241.95.2
104.168.4.175 104.168.4.172 104.168.47.142 104.168.4.176
104.168.4.208 104.168.46.203 104.168.4.204 104.168.4.218