104.18.1.107 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.12.94	spambotsattackproxynormal	Ip	2022-05-11 11:40:42
104.18.116.17	attack	14red.com casino spam - casino with very bad reputation Received: from HE1EUR01HT170.eop-EUR01.prod.protection.outlook.com (2603:10a6:802:1::35) by VI1PR0501MB2301.eurprd05.prod.outlook.com with HTTPS via VI1PR0902CA0046.EURPRD09.PROD.OUTLOOK.COM; Wed, 31 Jul 2019 16:52:30 +0000 Received: from HE1EUR01FT007.eop-EUR01.prod.protection.outlook.com (10.152.0.51) by HE1EUR01HT170.eop-EUR01.prod.protection.outlook.com (10.152.1.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.14; Wed, 31 Jul 2019 16:52:30 +0000 Authentication-Results: spf=none (sender IP is 169.159.171.139) smtp.mailfrom=luxido.cz; hotmail.co.uk; dkim=none (message not signed) header.d=none;hotmail.co.uk; dmarc=none action=none header.from=luxido.cz; Received-SPF: None (protection.outlook.com: luxido.cz does not designate permitted sender hosts) Received: from static-public-169.159.171.igen.co.za (169.159.171.139)	2019-08-01 05:33:34

Type

Details

Datetime

104.18.12.94

spambotsattackproxynormal

Ip

2022-05-11 11:40:42

104.18.116.17

attack

14red.com casino spam - casino with very bad reputation
Received: from HE1EUR01HT170.eop-EUR01.prod.protection.outlook.com (2603:10a6:802:1::35) by VI1PR0501MB2301.eurprd05.prod.outlook.com with HTTPS via VI1PR0902CA0046.EURPRD09.PROD.OUTLOOK.COM; Wed, 31 Jul 2019 16:52:30 +0000 Received: from HE1EUR01FT007.eop-EUR01.prod.protection.outlook.com (10.152.0.51) by HE1EUR01HT170.eop-EUR01.prod.protection.outlook.com (10.152.1.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.14; Wed, 31 Jul 2019 16:52:30 +0000 Authentication-Results: spf=none (sender IP is 169.159.171.139) smtp.mailfrom=luxido.cz; hotmail.co.uk; dkim=none (message not signed) header.d=none;hotmail.co.uk; dmarc=none action=none header.from=luxido.cz; Received-SPF: None (protection.outlook.com: luxido.cz does not designate permitted sender hosts) Received: from static-public-169.159.171.igen.co.za (169.159.171.139)

2019-08-01 05:33:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.1.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45337
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.1.107.			IN	A

;; AUTHORITY SECTION:
.			8	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 03:15:52 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 107.1.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 107.1.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.129.188.226	attackbots	Jan 16 17:29:39 nextcloud sshd\[18115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.129.188.226 user=root Jan 16 17:29:42 nextcloud sshd\[18115\]: Failed password for root from 77.129.188.226 port 38704 ssh2 Jan 16 17:33:38 nextcloud sshd\[23661\]: Invalid user zenoss from 77.129.188.226 Jan 16 17:33:38 nextcloud sshd\[23661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.129.188.226 ...	2020-01-17 00:58:20
197.210.153.46	attack	Unauthorized connection attempt from IP address 197.210.153.46 on Port 445(SMB)	2020-01-17 01:07:36
36.92.95.10	attackbotsspam	SSH Brute Force	2020-01-17 01:21:38
92.55.160.239	attackbots	1579179621 - 01/16/2020 14:00:21 Host: 92.55.160.239/92.55.160.239 Port: 445 TCP Blocked	2020-01-17 01:24:24
186.219.217.188	attackspam	Unauthorized connection attempt from IP address 186.219.217.188 on Port 445(SMB)	2020-01-17 01:05:22
77.247.110.166	attackspam	[2020-01-16 11:15:00] NOTICE[2175] chan_sip.c: Registration from '"770" ' failed for '77.247.110.166:6312' - Wrong password [2020-01-16 11:15:00] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-16T11:15:00.913-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="770",SessionID="0x7f5ac48ee978",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.166/6312",Challenge="40e7268f",ReceivedChallenge="40e7268f",ReceivedHash="7789cc1cc4192ed7703147de924b4459" [2020-01-16 11:15:01] NOTICE[2175] chan_sip.c: Registration from '"770" ' failed for '77.247.110.166:6312' - Wrong password [2020-01-16 11:15:01] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-16T11:15:01.016-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="770",SessionID="0x7f5ac400f638",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.24 ...	2020-01-17 01:21:00
106.53.19.38	attack	Unauthorized connection attempt detected from IP address 106.53.19.38 to port 2220 [J]	2020-01-17 00:47:15
142.93.196.133	attackbotsspam	Unauthorized connection attempt detected from IP address 142.93.196.133 to port 2220 [J]	2020-01-17 01:19:00
200.57.235.141	attack	Automatic report - Port Scan Attack	2020-01-17 01:13:59
187.167.68.31	attackbots	Unauthorized connection attempt from IP address 187.167.68.31 on Port 445(SMB)	2020-01-17 01:19:43
83.245.199.157	attack	Unauthorized connection attempt from IP address 83.245.199.157 on Port 445(SMB)	2020-01-17 00:58:57
95.27.46.125	attack	Unauthorized connection attempt from IP address 95.27.46.125 on Port 445(SMB)	2020-01-17 01:17:36
122.226.119.138	attack	Unauthorized connection attempt from IP address 122.226.119.138 on Port 445(SMB)	2020-01-17 01:25:56
122.155.165.240	attackbots	Jan 16 17:05:10 vmanager6029 sshd\[23217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.165.240 user=root Jan 16 17:05:12 vmanager6029 sshd\[23217\]: Failed password for root from 122.155.165.240 port 58162 ssh2 Jan 16 17:07:53 vmanager6029 sshd\[23277\]: Invalid user cg from 122.155.165.240 port 51104	2020-01-17 00:56:22
170.81.147.188	attack	Unauthorized connection attempt detected from IP address 170.81.147.188 to port 1433	2020-01-17 01:20:42

Recently Reported IPs

104.18.1.100	104.18.1.145	104.18.1.159	104.18.1.160
104.18.1.171	104.18.1.172	104.18.1.175	104.18.1.184
104.18.1.188	104.18.1.195	104.18.1.197	104.18.1.20
104.18.1.202	104.18.1.207	104.18.1.22	104.18.1.23
104.18.1.230	45.11.98.72	104.18.1.65	104.18.1.87