JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.56.92

104.168.56.92 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 0%: ?

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	104-168-56-92-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.56.92

Whois 104.168.56.92

IP Abuse Reports for 104.168.56.92:

This IP address has been reported a total of 74 times from 37 distinct sources. 104.168.56.92 was first reported on October 6th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-11-09 20:09:50 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Paul Smith	2025-11-08 22:39:33 (8 months ago)	Email Auth Brute force attack 5/1 in last day	Brute-Force
🇬🇧 NotCool	2025-11-08 22:28:55 (8 months ago)	(SMTPBRUTE) SMTP Login Brute-Force 104.168.56.92 (US/United States/104-168-56-92-host.colocrossing.c ... show more (SMTPBRUTE) SMTP Login Brute-Force 104.168.56.92 (US/United States/104-168-56-92-host.colocrossing.com): 10 in the last 3600 secs show less	Brute-Force
🇹🇷 rtbh.com.tr	2025-11-08 20:09:48 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 ✨	2025-11-07 01:36:30 (8 months ago)	Rule : SMTP 11/07/25 00:45:28 2884 104.168.56.92 *hidden-privacy* ESMTP MailEnable Service, V ... show more Rule : SMTP 11/07/25 00:45:28 2884 104.168.56.92 *hidden-privacy* ESMTP MailEnable Service, Version: 10.53-- ready at 11/07/25 00:45:28 108 0 11/07/25 00:45:28 2884 104.168.56.92 EHLO EHLO iIt9MttE6 *hidden-privacy* [104.168.56.92], this server offers 5 extensions 270 16 11/07/25 00:45:28 2884 104.168.56.92 STARTTLS STARTTLS 220 Ready to start TLS 24 10 11/07/25 00:45:28 2884 104.168.56.92 EHLO EHLO iIt9MttE6 *hidden-privacy* [104.168.56.92], this server offers 5 extensions 162 16 11/07/25 00:45:28 2884 104.168.56.92 AUTH AUTH LOGIN 334 VXNlcm5hbWU6 18 12 11/07/25 00:45:28 2884 104.168.56.92 AUTH {blank} 334 UGFzc3dvcmQ6 18 42 [email protected] 11/07/25 00:45:28 2884 104.168.56.92 AUTH {blank} 535 Invalid Username or Password 34 14 [email protected] show less	Email Spam Port Scan Spoofing
🇸🇬 TAY	2025-11-06 17:58:28 (8 months ago)	Nov 7 01:58:08 jb11 postfix/submission/smtpd[6997]: warning: unknown[104.168.56.92]: SASL LOGIN aut ... show more Nov 7 01:58:08 jb11 postfix/submission/smtpd[6997]: warning: unknown[104.168.56.92]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 7 01:58:16 jb11 postfix/submission/smtpd[6997]: warning: unknown[104.168.56.92]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 7 01:58:28 jb11 postfix/submission/smtpd[6997]: warning: unknown[104.168.56.92]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇬🇧 Aetherweb Ark	2025-11-06 17:24:06 (8 months ago)	(smtpauth) Failed SMTP AUTH login from 104.168.56.92 (US/United States/104-168-56-92-host.colocrossi ... show more (smtpauth) Failed SMTP AUTH login from 104.168.56.92 (US/United States/104-168-56-92-host.colocrossing.com): N in the last X secs show less	Brute-Force
🇹🇷 rtbh.com.tr	2025-11-05 20:09:45 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-11-05 15:11:32 (8 months ago)	2025-11-05T07:11:26.237190-08:00 debug postfix/submission/smtpd[1070047]: disconnect from unknown[10 ... show more 2025-11-05T07:11:26.237190-08:00 debug postfix/submission/smtpd[1070047]: disconnect from unknown[104.168.56.92] ehlo=2 starttls=1 auth=0/1 commands=3/4 2025-11-05T07:11:26.738026-08:00 debug postfix/submission/smtpd[1070047]: disconnect from unknown[104.168.56.92] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
Anonymous	2025-11-04 17:40:53 (8 months ago)	(smtpauth) Failed SMTP AUTH login from 104.168.56.92 (US/United States/104-168-56-92-host.colocrossi ... show more (smtpauth) Failed SMTP AUTH login from 104.168.56.92 (US/United States/104-168-56-92-host.colocrossing.com) show less	Brute-Force
🇺🇸 mind5t0rm	2025-11-03 16:56:29 (8 months ago)	(smtpauth) Failed SMTP AUTH login from 104.168.56.92 (US/United States/104-168-56-92-host.colocrossi ... show more (smtpauth) Failed SMTP AUTH login from 104.168.56.92 (US/United States/104-168-56-92-host.colocrossing.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Nov 3 23:56:11 ptr postfix/smtpd[2159236]: warning: unknown[104.168.56.92]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 3 23:56:17 ptr postfix/smtpd[2159236]: warning: unknown[104.168.56.92]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 3 23:56:27 ptr postfix/smtpd[2159236]: warning: unknown[104.168.56.92]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan
Anonymous	2025-11-03 09:25:29 (8 months ago)	Cluster member 10.170.91.37 (-) said, TEMPDENY 104.168.56.92, Reason:[(zimbra-mta) Failed login from ... show more Cluster member 10.170.91.37 (-) said, TEMPDENY 104.168.56.92, Reason:[(zimbra-mta) Failed login from 104.168.56.92 (US/United States/104-168-56-92-host.colocrossing.com): 30 in the last 3600 secs]; IP: 104.168.56.92; Ports: *; Direction: 0; Trigger: LF_CLUSTER; Logs: show less	Email Spam Brute-Force
🇹🇷 rtbh.com.tr	2025-11-02 20:09:42 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-11-01 20:09:41 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-11-01 09:38:21 (8 months ago)	2025-11-01T02:38:12.036620-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logna ... show more 2025-11-01T02:38:12.036620-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=eric rhost=104.168.56.92 2025-11-01T02:38:20.865038-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=eric rhost=104.168.56.92 ... show less	Brute-Force SSH

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.56.133.145

🇳🇱 138.124.30.187

🇮🇳 110.235.226.12

🇨🇳 223.199.177.120

🇩🇪 209.50.186.226

🇬🇧 193.46.0.164

🇦🇷 191.85.6.149

🇲🇽 187.174.238.116

🇳🇱 178.16.55.216

🇧🇷 138.118.164.104

🇮🇳 117.211.74.211

🇺🇸 75.80.124.218

🇳🇱 51.158.205.203

🇯🇵 8.216.87.203

🇹🇭 1.20.228.110

🇩🇪 2a01:599:a24:978d:8428:6d9d:4eff:32b2

🇺🇸 216.25.89.119

🇺🇸 209.87.164.204

🇪🇨 200.41.3.165

🇦🇷 186.148.85.49