IP address


.068104.168.120.14104-168-120-14-host.colocrossing.com
Shodan(more info)
Passive DNS
Tags: IP in hostname

Threat categories

TLRoleCategoryDetails
25 src login protocol: vnc

OTX pulses
[6a46577996ca3c57eda75cd5] 2026-07-02 12:20:09.500000 | VNC honeypot logs for 2026/07/02
Author name:jnazario
Pulse modified:2026-07-02 12:20:09.500000
Indicator created:2026-07-02 12:20:10
Indicator role:None
Indicator title:
Indicator expiration:2026-08-01 12:00:00
[6a45060aa7e79d7e8a38b222] 2026-07-01 12:20:26.295000 | VNC honeypot logs for 2026/07/01
Author name:jnazario
Pulse modified:2026-07-01 12:20:26.295000
Indicator created:2026-07-01 12:20:27
Indicator role:None
Indicator title:
Indicator expiration:2026-07-31 12:00:00
[6a43b53da238bbda91019add] 2026-06-30 12:23:25.268000 | VNC honeypot logs for 2026/06/30
Author name:jnazario
Pulse modified:2026-06-30 12:23:25.268000
Indicator created:2026-06-30 12:23:26
Indicator role:None
Indicator title:
Indicator expiration:2026-07-30 12:00:00
Origin AS
AS36352 - AS-COLOCROSSING
BGP Prefix
104.168.120.0/24
geo
United States, Buffalo
🕑 America/New_York
hostname
104-168-120-14-host.colocrossing.com
hostname_class
['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database)
104.168.0.0 - 104.168.127.255
last_activity
2026-07-02 17:03:13.346000
rep
0.06774193548387097
reserved_range
0
Shodan's InternetDB
Open ports: 22, 53, 110, 993
Tags: starttls
CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux
ts_added
2026-07-02 17:03:01.057000
ts_last_update
2026-07-10 17:03:11.142000

Warden event timeline

DShield event timeline

OTX pulses