JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.102.203

104.168.102.203 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 27%: ?

27%

ISP	RackNerd LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	104-168-102-203-host.colocrossing.com
Domain Name	racknerd.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.102.203

Whois 104.168.102.203

IP Abuse Reports for 104.168.102.203:

This IP address has been reported a total of 37 times from 8 distinct sources. 104.168.102.203 was first reported on August 7th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-08-19 14:01:49 (1 month ago)	Unauthorized access attempts on ports: 5000	Port Scan
🇺🇸 wristhulk	2026-08-18 16:17:58 (1 month ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇩🇪 anycast_ac	2026-08-18 12:35:53 (1 month ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc). Family fingerprint: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc). Family fingerprint: vnc-scanner Commands captured: $ client RFB version: RFB 003.008 $ chose security type: 2 (VNC) $ server challenge: b9ce5becbc85cc92d98def4e2518a118 $ client response (DES of password): 097a683404fd0d257e78db6b578911f7 show less	DDoS Attack
🇨🇭 TOCE	2026-08-18 09:16:48 (1 month ago)	29 hits seen on 2026-08-18, ports 5901 (VNC) on a honeypot from www.toce.ch	Brute-Force
🇨🇭 TOCE	2026-08-17 21:48:42 (1 month ago)	51 hits seen on 2026-08-17, ports 5901 (VNC) on a honeypot from www.toce.ch	Brute-Force
🇺🇸 wristhulk	2026-08-17 15:27:59 (1 month ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇩🇪 anycast_ac	2026-08-17 11:52:32 (1 month ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc). Family fingerprint: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc). Family fingerprint: vnc-scanner Commands captured: $ client RFB version: RFB 003.008 $ chose security type: 2 (VNC) $ server challenge: 727c068c8f2fdc6567b5fbea7005f916 $ client response (DES of password): 8f6e030a0b41aaa1e58803f8b10c7f09 show less	DDoS Attack
🇺🇸 sargetun	2026-08-17 08:10:02 (1 month ago)	Honeypot: VNC probe on port 5900 at 2026-08-17 08:05:51.362297. Automated report from VPS honeypot.	Port Scan
🇨🇭 TOCE	2026-08-16 21:19:38 (1 month ago)	32 hits seen on 2026-08-16, ports 5901 (VNC) on a honeypot from www.toce.ch	Brute-Force
🇺🇸 wristhulk	2026-08-16 15:18:19 (1 month ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇮🇱 spd.co.il	2026-08-16 14:01:38 (1 month ago)	Unauthorized access attempts on ports: 5000	Port Scan
🇩🇪 anycast_ac	2026-08-16 11:50:17 (1 month ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc). Family fingerprint: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc). Family fingerprint: vnc-scanner Commands captured: $ client RFB version: RFB 003.008 $ chose security type: 2 (VNC) $ server challenge: 31a7e757d0a2f3d993a4aa317788969b $ client response (DES of password): 5f01c4b1005d1aebf0198399024654ed show less	DDoS Attack
🇨🇭 TOCE	2026-08-15 21:44:04 (1 month ago)	43 hits seen on 2026-08-15, ports 5901 (VNC) on a honeypot from www.toce.ch	Brute-Force
🇺🇸 wristhulk	2026-08-15 13:32:51 (1 month ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇩🇪 anycast_ac	2026-08-15 11:30:59 (1 month ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc). Family fingerprint: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc). Family fingerprint: vnc-scanner Commands captured: $ client RFB version: RFB 003.008 $ chose security type: 2 (VNC) $ server challenge: 603599df26b0f2882551fd26e9f5af69 $ client response (DES of password): 93e794ce61679e4c6b9797a78ada24a7 show less	DDoS Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 159.65.172.38

🇧🇪 34.52.146.37

🇮🇳 223.185.36.197

🇲🇾 202.165.26.42

🇮🇶 185.56.193.161

🇺🇸 98.113.203.148

🇩🇪 51.68.188.39

🇺🇸 20.118.219.117

🇺🇸 2602:80d:1007::cb

🇳🇱 185.93.89.66

🇺🇸 184.190.12.223

🇯🇵 172.104.84.122

🇵🇾 143.202.209.172

🇻🇳 123.30.240.27

🇺🇸 66.132.195.102

🇺🇸 34.125.161.15

🇭🇰 199.45.155.15

🇹🇼 188.253.7.4

🇩🇪 167.94.146.42

🇳🇱 160.119.76.138