172.104.4.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
172.104.44.238	attackspambots	Jul 31 02:08:33 pixelmemory sshd[3599449]: Failed password for root from 172.104.44.238 port 53664 ssh2 Jul 31 02:12:51 pixelmemory sshd[3604399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.44.238 user=root Jul 31 02:12:54 pixelmemory sshd[3604399]: Failed password for root from 172.104.44.238 port 38328 ssh2 Jul 31 02:17:06 pixelmemory sshd[3608816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.44.238 user=root Jul 31 02:17:08 pixelmemory sshd[3608816]: Failed password for root from 172.104.44.238 port 51216 ssh2 ...	2020-07-31 17:46:05
172.104.4.208	attackbotsspam	Jul 28 12:20:17 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=172.104.4.208 DST=77.73.69.240 LEN=40 TOS=0x08 PREC=0x20 TTL=49 ID=57903 PROTO=TCP SPT=16935 DPT=23 WINDOW=49598 RES=0x00 SYN URGP=0 Jul 28 12:20:19 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=172.104.4.208 DST=77.73.69.240 LEN=40 TOS=0x08 PREC=0x20 TTL=49 ID=57903 PROTO=TCP SPT=16935 DPT=23 WINDOW=49598 RES=0x00 SYN URGP=0 Jul 28 12:20:31 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=172.104.4.208 DST=77.73.69.240 LEN=40 TOS=0x08 PREC=0x20 TTL=49 ID=57903 PROTO=TCP SPT=16935 DPT=23 WINDOW=49598 RES=0x00 SYN URGP=0 Jul 28 12:20:32 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=172.104.4.208 DST=77.73.69.240 LEN=40 TOS=0x08 PREC=0x20 TTL=49 ID=57903 PROTO=TCP SPT=16935 DPT=23 WINDOW=49598 RES=0x00 SYN URGP=0 Jul 28 12:20:36 hidden kernel: [UF ...	2020-07-28 18:31:55
172.104.41.248	attackspam	Automatic report - XMLRPC Attack	2020-07-01 01:48:32
172.104.49.92	attack	Apr 19 03:37:09 mailman postfix/smtpd[19817]: NOQUEUE: reject: RCPT from li1629-92.members.linode.com[172.104.49.92]: 554 5.7.1 Service unavailable; Client host [172.104.49.92] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/172.104.49.92; from= to=<[munged][at][munged]> proto=ESMTP helo= Apr 19 03:37:11 mailman postfix/smtpd[19817]: NOQUEUE: reject: RCPT from li1629-92.members.linode.com[172.104.49.92]: 554 5.7.1 Service unavailable; Client host [172.104.49.92] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/172.104.49.92; from= to=<[munged][at][munged]> proto=ESMTP helo=	2020-05-10 00:15:18
172.104.41.86	attackspam	scan r	2020-02-25 08:06:47
172.104.41.167	attackbots	Lines containing failures of 172.104.41.167 Oct 7 13:09:56 shared06 sshd[22111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.41.167 user=r.r Oct 7 13:09:59 shared06 sshd[22111]: Failed password for r.r from 172.104.41.167 port 60834 ssh2 Oct 7 13:09:59 shared06 sshd[22111]: Received disconnect from 172.104.41.167 port 60834:11: Bye Bye [preauth] Oct 7 13:09:59 shared06 sshd[22111]: Disconnected from authenticating user r.r 172.104.41.167 port 60834 [preauth] Oct 7 13:31:57 shared06 sshd[30261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.41.167 user=r.r Oct 7 13:31:59 shared06 sshd[30261]: Failed password for r.r from 172.104.41.167 port 44606 ssh2 Oct 7 13:31:59 shared06 sshd[30261]: Received disconnect from 172.104.41.167 port 44606:11: Bye Bye [preauth] Oct 7 13:31:59 shared06 sshd[30261]: Disconnected from authenticating user r.r 172.104.41.167 port 44606........ ------------------------------	2019-10-07 21:38:29

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.104.4.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42697
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;172.104.4.142.			IN	A

;; AUTHORITY SECTION:
.			559	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 15:13:18 CST 2022
;; MSG SIZE  rcvd: 106

Host info

142.4.104.172.in-addr.arpa domain name pointer nanjult1.armadaservers.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.4.104.172.in-addr.arpa	name = nanjult1.armadaservers.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
101.108.186.202	attackbots	Unauthorized connection attempt detected from IP address 101.108.186.202 to port 8000 [T]	2020-02-01 01:04:08
51.38.129.120	attack	Unauthorized connection attempt detected from IP address 51.38.129.120 to port 2220 [J]	2020-02-01 01:10:10
159.192.171.239	attackspam	Unauthorized connection attempt detected from IP address 159.192.171.239 to port 23 [J]	2020-02-01 01:28:43
120.78.152.166	attackbotsspam	Unauthorized connection attempt detected from IP address 120.78.152.166 to port 1433 [J]	2020-02-01 00:58:53
218.92.0.179	attackspambots	scan z	2020-02-01 01:39:06
104.148.5.120	attack	Honeypot attack, port: 445, PTR: e120.zapation.com.	2020-02-01 01:34:44
58.210.115.102	attackbotsspam	Unauthorized connection attempt detected from IP address 58.210.115.102 to port 81 [T]	2020-02-01 01:09:43
162.241.65.175	attackbots	Fail2Ban - SSH Bruteforce Attempt	2020-02-01 00:55:33
116.102.42.204	attackspam	Unauthorized connection attempt detected from IP address 116.102.42.204 to port 5555 [J]	2020-02-01 01:30:54
113.180.114.78	attack	Unauthorized connection attempt detected from IP address 113.180.114.78 to port 81 [J]	2020-02-01 01:33:13
150.109.167.155	attack	Unauthorized connection attempt detected from IP address 150.109.167.155 to port 7402 [J]	2020-02-01 01:29:13
121.151.108.27	attack	Unauthorized connection attempt detected from IP address 121.151.108.27 to port 5555 [J]	2020-02-01 00:58:12
218.149.69.25	attackbotsspam	Unauthorized connection attempt detected from IP address 218.149.69.25 to port 4567 [J]	2020-02-01 01:18:42
109.99.88.18	attack	Unauthorized connection attempt detected from IP address 109.99.88.18 to port 23 [J]	2020-02-01 01:33:49
170.106.37.189	attackspambots	Unauthorized connection attempt detected from IP address 170.106.37.189 to port 514 [J]	2020-02-01 00:55:17

Recently Reported IPs

172.104.39.195	172.104.41.57	172.104.40.208	172.104.42.147
172.104.42.230	172.104.44.116	172.104.44.165	172.104.44.197
172.104.48.121	172.104.49.161	172.104.42.237	172.104.49.180
172.104.45.89	172.104.46.32	172.104.45.66	172.104.50.244
172.104.48.79	172.104.51.32	172.104.47.193	172.104.52.148