104.168.220.242

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.168.220.64	attackbots	k+ssh-bruteforce	2020-04-23 17:35:02
104.168.220.187	attackspam	2019-10-28T23:51:52.072324static.108.197.76.144.clients.your-server.de sshd[17481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.220.187 user=r.r 2019-10-28T23:51:54.065849static.108.197.76.144.clients.your-server.de sshd[17481]: Failed password for r.r from 104.168.220.187 port 48944 ssh2 2019-10-28T23:55:43.716591static.108.197.76.144.clients.your-server.de sshd[17888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.220.187 user=r.r 2019-10-28T23:55:45.755408static.108.197.76.144.clients.your-server.de sshd[17888]: Failed password for r.r from 104.168.220.187 port 34422 ssh2 2019-10-28T23:59:35.094080static.108.197.76.144.clients.your-server.de sshd[18202]: Invalid user aery from 104.168.220.187 2019-10-28T23:59:35.096316static.108.197.76.144.clients.your-server.de sshd[18202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104......... ------------------------------	2019-11-01 13:00:22
104.168.220.187	attack	Fail2Ban - SSH Bruteforce Attempt	2019-10-29 22:54:10

Type

Details

Datetime

104.168.220.64

attackbots

k+ssh-bruteforce

2020-04-23 17:35:02

104.168.220.187

attackspam

2019-10-28T23:51:52.072324static.108.197.76.144.clients.your-server.de sshd[17481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.220.187  user=r.r
2019-10-28T23:51:54.065849static.108.197.76.144.clients.your-server.de sshd[17481]: Failed password for r.r from 104.168.220.187 port 48944 ssh2
2019-10-28T23:55:43.716591static.108.197.76.144.clients.your-server.de sshd[17888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.220.187  user=r.r
2019-10-28T23:55:45.755408static.108.197.76.144.clients.your-server.de sshd[17888]: Failed password for r.r from 104.168.220.187 port 34422 ssh2
2019-10-28T23:59:35.094080static.108.197.76.144.clients.your-server.de sshd[18202]: Invalid user aery from 104.168.220.187
2019-10-28T23:59:35.096316static.108.197.76.144.clients.your-server.de sshd[18202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.........
------------------------------

2019-11-01 13:00:22

104.168.220.187

attack

Fail2Ban - SSH Bruteforce Attempt

2019-10-29 22:54:10

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.220.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1015
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.220.242.		IN	A

;; AUTHORITY SECTION:
.			225	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 13:51:21 CST 2022
;; MSG SIZE  rcvd: 108

Host info

242.220.168.104.in-addr.arpa domain name pointer hwsrv-903510.hostwindsdns.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.220.168.104.in-addr.arpa	name = hwsrv-903510.hostwindsdns.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
54.37.156.188	attack	Dec 22 01:55:31 ny01 sshd[12848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.156.188 Dec 22 01:55:33 ny01 sshd[12848]: Failed password for invalid user guest from 54.37.156.188 port 43906 ssh2 Dec 22 02:00:35 ny01 sshd[13517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.156.188	2019-12-22 19:38:20
45.82.153.141	attackbots	93 attempts in 3 hours attempting to login to SMTP	2019-12-22 19:33:19
175.5.26.87	attackspam	Scanning	2019-12-22 19:32:43
88.132.237.187	attackbotsspam	$f2bV_matches	2019-12-22 19:49:06
182.245.100.236	attackspambots	Scanning	2019-12-22 19:12:44
80.211.9.57	attack	SSH Brute Force, server-1 sshd[20145]: Failed password for invalid user ubuntu from 80.211.9.57 port 51778 ssh2	2019-12-22 19:19:05
61.187.53.119	attackspam	2019-12-22T12:04:51.102104scmdmz1 sshd[28273]: Invalid user fatih from 61.187.53.119 port 5337 2019-12-22T12:04:51.104876scmdmz1 sshd[28273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.187.53.119 2019-12-22T12:04:51.102104scmdmz1 sshd[28273]: Invalid user fatih from 61.187.53.119 port 5337 2019-12-22T12:04:53.269123scmdmz1 sshd[28273]: Failed password for invalid user fatih from 61.187.53.119 port 5337 ssh2 2019-12-22T12:11:55.022341scmdmz1 sshd[28817]: Invalid user rohit from 61.187.53.119 port 5339 ...	2019-12-22 19:17:36
5.132.115.161	attackbots	Dec 22 00:57:49 php1 sshd\[19057\]: Invalid user joerg from 5.132.115.161 Dec 22 00:57:49 php1 sshd\[19057\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161-115-132-5.ftth.glasoperator.nl Dec 22 00:57:50 php1 sshd\[19057\]: Failed password for invalid user joerg from 5.132.115.161 port 46988 ssh2 Dec 22 01:02:47 php1 sshd\[19873\]: Invalid user vcsa from 5.132.115.161 Dec 22 01:02:47 php1 sshd\[19873\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161-115-132-5.ftth.glasoperator.nl	2019-12-22 19:21:22
94.200.197.46	attackspambots	Dec 22 12:20:28 cp sshd[31017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.200.197.46 Dec 22 12:20:30 cp sshd[31017]: Failed password for invalid user terraria_user from 94.200.197.46 port 44268 ssh2 Dec 22 12:29:59 cp sshd[3786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.200.197.46	2019-12-22 19:37:28
222.163.182.226	attackbots	Scanning	2019-12-22 19:39:22
142.44.137.62	attack	SSH brutforce	2019-12-22 19:20:51
185.34.17.54	attackspambots	Dec 22 08:05:13 exim[3104]: [1\41] 1iivIb-0000o4-3K H=(tmdpa.com) [185.34.17.54] F= rejected after DATA: This message scored 16.9 spam points.	2019-12-22 19:39:53
93.174.95.106	attack	93.174.95.106 was recorded 5 times by 5 hosts attempting to connect to the following ports: 2375,5009,520,6666,14265. Incident counter (4h, 24h, all-time): 5, 28, 2693	2019-12-22 19:30:25
69.45.19.242	attack	12/22/2019-01:25:04.841883 69.45.19.242 Protocol: 17 ET SCAN Sipvicious User-Agent Detected (friendly-scanner)	2019-12-22 19:49:33
61.223.136.52	attack	1576995937 - 12/22/2019 07:25:37 Host: 61.223.136.52/61.223.136.52 Port: 445 TCP Blocked	2019-12-22 19:18:18

Recently Reported IPs

104.168.216.202	104.25.71.35	104.168.219.225	104.168.234.104
104.168.220.241	104.168.234.110	104.168.234.153	104.168.234.156
104.168.234.198	104.168.234.106	104.168.234.243	104.168.234.212
104.168.234.250	104.168.234.205	104.168.234.253	104.168.234.184
104.168.234.38	104.168.234.61	104.168.234.51	104.168.234.81