IP address


.027104.168.171.115hwsrv-129000.hostwindsdns.com
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
AbuseIPDB
104.168.171.115 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-05-16 04:00:00.647000
Was present on blacklist at: 2026-05-16 04:00
Spamhaus XBL CBL
104.168.171.115 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-05-28 01:07:00.564000
Was present on blacklist at: 2026-05-21 01:07

Threat categories

TLRoleCategoryDetails
53 src scan port: many
25 src

Warden events (136)
2026-05-21
ReconScanning (node.9c1411): 8
2026-05-20
ReconScanning (node.9c1411): 10
2026-05-19
ReconScanning (node.9c1411): 6
2026-05-16
ReconScanning (node.ce2b59): 8
2026-05-15
ReconScanning (node.ce2b59): 44
2026-05-14
ReconScanning (node.ce2b59): 60
DShield reports (IP summary, reports)
2026-05-15
Number of reports: 223
Distinct targets: 83
2026-05-16
Number of reports: 152
Distinct targets: 21
2026-05-17
Number of reports: 152
Distinct targets: 21
Origin AS
AS54290 - HOSTWINDS
BGP Prefix
104.168.128.0/17
geo
United States
🕑 America/Chicago
hostname
hwsrv-129000.hostwindsdns.com
Address block ('inetnum' or 'NetRange' in whois database)
104.168.128.0 - 104.168.255.255
last_activity
2026-05-21 21:45:26
last_warden_event
2026-05-21 21:45:26
rep
0.026769211629898093
reserved_range
0
Shodan's InternetDB
Open ports: 21, 22, 53, 80, 110, 111, 143, 443, 993, 995, 2077, 2082, 2083, 2086, 2087
Tags: starttls, self-signed
CPEs: cpe:/a:pureftpd:pure-ftpd, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:apache:http_server
ts_added
2026-05-14 01:06:52.498000
ts_last_update
2026-05-28 01:07:00.660000

Warden event timeline

DShield event timeline

Presence on blacklists