104.18.30.161 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.30.4	attack	"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www.starvingbarber.com	2020-05-25 00:12:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.30.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26127
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.30.161.			IN	A

;; AUTHORITY SECTION:
.			319	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 47 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:53:27 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 161.30.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.30.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.184	attackspam	2020-06-03T08:08:32.215060shield sshd\[4662\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184 user=root 2020-06-03T08:08:34.024271shield sshd\[4662\]: Failed password for root from 218.92.0.184 port 7161 ssh2 2020-06-03T08:08:36.808885shield sshd\[4662\]: Failed password for root from 218.92.0.184 port 7161 ssh2 2020-06-03T08:08:40.340700shield sshd\[4662\]: Failed password for root from 218.92.0.184 port 7161 ssh2 2020-06-03T08:08:42.949469shield sshd\[4662\]: Failed password for root from 218.92.0.184 port 7161 ssh2	2020-06-03 16:12:27
139.59.79.202	attackbots	$f2bV_matches	2020-06-03 16:01:20
196.220.67.2	attackbots	<6 unauthorized SSH connections	2020-06-03 16:05:54
190.228.29.221	attack	190.228.29.221 - - [03/Jun/2020:06:24:06 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 190.228.29.221 - - [03/Jun/2020:06:24:07 +0200] "POST /wp-login.php HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 190.228.29.221 - - [03/Jun/2020:06:24:08 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 190.228.29.221 - - [03/Jun/2020:06:24:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 190.228.29.221 - - [03/Jun/2020:06:24:09 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 190.228.29.221 - - [03/Jun/2020:06:24:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2008 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ...	2020-06-03 16:24:06
54.37.136.87	attack	$f2bV_matches	2020-06-03 16:16:27
139.59.77.240	attackspambots	(sshd) Failed SSH login from 139.59.77.240 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 3 10:20:52 s1 sshd[10336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=root Jun 3 10:20:54 s1 sshd[10336]: Failed password for root from 139.59.77.240 port 59984 ssh2 Jun 3 10:36:46 s1 sshd[10954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=root Jun 3 10:36:48 s1 sshd[10954]: Failed password for root from 139.59.77.240 port 50202 ssh2 Jun 3 10:40:46 s1 sshd[11083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=root	2020-06-03 16:43:28
111.252.239.253	attackspambots	20/6/2@23:52:34: FAIL: Alarm-Telnet address from=111.252.239.253 ...	2020-06-03 16:36:25
81.163.12.115	attackspambots	(smtpauth) Failed SMTP AUTH login from 81.163.12.115 (PL/Poland/81-163-12-115.net.lasnet.pl): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-03 08:23:21 plain authenticator failed for 81-163-12-115.net.lasnet.pl [81.163.12.115]: 535 Incorrect authentication data (set_id=sourenco.cominfo)	2020-06-03 16:04:51
217.136.39.206	attackspambots	Jun 3 05:53:15 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=217.136.39.206, lip=172.104.140.148, session= Jun 3 05:53:21 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=217.136.39.206, lip=172.104.140.148, session= Jun 3 05:53:21 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=217.136.39.206, lip=172.104.140.148, session=<5Ra29yWnls7ZiCfO> Jun 3 05:53:30 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=217.136.39.206, lip=172.104.140.148, session=<3/F8+CWno87ZiCfO> Jun 3 05:53:32 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=217.136.39.206, lip=172.104.140.14 ...	2020-06-03 16:00:46
222.186.31.166	attackspam	SSH/22 MH Probe, BF, Hack -	2020-06-03 16:38:18
112.169.9.160	attackbotsspam	Jun 3 04:26:13 Tower sshd[32180]: Connection from 112.169.9.160 port 34180 on 192.168.10.220 port 22 rdomain "" Jun 3 04:26:14 Tower sshd[32180]: Failed password for root from 112.169.9.160 port 34180 ssh2 Jun 3 04:26:14 Tower sshd[32180]: Received disconnect from 112.169.9.160 port 34180:11: Bye Bye [preauth] Jun 3 04:26:14 Tower sshd[32180]: Disconnected from authenticating user root 112.169.9.160 port 34180 [preauth]	2020-06-03 16:36:54
64.225.47.162	attack	Jun 3 13:28:49 web1 sshd[11332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.47.162 user=root Jun 3 13:28:51 web1 sshd[11332]: Failed password for root from 64.225.47.162 port 42716 ssh2 Jun 3 13:42:19 web1 sshd[14691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.47.162 user=root Jun 3 13:42:22 web1 sshd[14691]: Failed password for root from 64.225.47.162 port 44914 ssh2 Jun 3 13:45:50 web1 sshd[15594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.47.162 user=root Jun 3 13:45:53 web1 sshd[15594]: Failed password for root from 64.225.47.162 port 51006 ssh2 Jun 3 13:49:09 web1 sshd[16395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.47.162 user=root Jun 3 13:49:11 web1 sshd[16395]: Failed password for root from 64.225.47.162 port 57094 ssh2 Jun 3 13:52:37 web1 sshd[17333]: pa ...	2020-06-03 16:33:02
103.86.68.50	attackspambots	Jun 3 13:54:03 itv-usvr-01 sshd[20397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.68.50 user=root Jun 3 13:54:05 itv-usvr-01 sshd[20397]: Failed password for root from 103.86.68.50 port 16308 ssh2 Jun 3 13:58:20 itv-usvr-01 sshd[20585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.68.50 user=root Jun 3 13:58:22 itv-usvr-01 sshd[20585]: Failed password for root from 103.86.68.50 port 20184 ssh2 Jun 3 14:02:30 itv-usvr-01 sshd[20783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.68.50 user=root Jun 3 14:02:31 itv-usvr-01 sshd[20783]: Failed password for root from 103.86.68.50 port 23974 ssh2	2020-06-03 16:03:36
159.203.188.165	attack	159.203.188.165 - - [03/Jun/2020:05:45:20 +0200] "POST /xmlrpc.php HTTP/1.1" 403 20981 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.203.188.165 - - [03/Jun/2020:05:52:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-03 16:27:54
160.153.154.2	attackbots	Automatic report - XMLRPC Attack	2020-06-03 16:29:37

Recently Reported IPs

104.18.30.140	104.18.30.155	104.18.30.165	104.18.30.17
104.18.30.170	104.18.30.173	104.18.30.171	104.21.65.252
104.18.30.183	104.18.30.196	104.18.30.18	104.18.30.203
104.18.30.200	104.18.30.215	104.18.30.217	104.18.30.225
104.18.30.230	104.18.30.229	104.18.30.227	104.18.30.237