104.18.31.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.31.4	attackspam	"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www.starvingbarber.com	2020-05-25 00:57:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.31.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58312
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.31.13.			IN	A

;; AUTHORITY SECTION:
.			449	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:53:43 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 13.31.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 13.31.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.147.215.8	attack	[2020-05-20 17:29:46] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:58556' - Wrong password [2020-05-20 17:29:46] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-20T17:29:46.626-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4637",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/58556",Challenge="7b4043a0",ReceivedChallenge="7b4043a0",ReceivedHash="53116d4f32f7a541a11a076fef95c299" [2020-05-20 17:30:28] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:54606' - Wrong password [2020-05-20 17:30:28] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-20T17:30:28.186-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4930",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-05-21 05:30:47
152.250.252.179	attack	Too many connections or unauthorized access detected from Arctic banned ip	2020-05-21 05:57:11
85.105.112.134	attackbots	Honeypot attack, port: 445, PTR: 85.105.112.134.static.ttnet.com.tr.	2020-05-21 05:46:40
114.237.109.253	attack	Brute force attempt	2020-05-21 05:34:26
54.37.68.66	attack	May 20 20:31:11 ns382633 sshd\[28512\]: Invalid user trn from 54.37.68.66 port 53016 May 20 20:31:11 ns382633 sshd\[28512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.68.66 May 20 20:31:12 ns382633 sshd\[28512\]: Failed password for invalid user trn from 54.37.68.66 port 53016 ssh2 May 20 20:41:03 ns382633 sshd\[30395\]: Invalid user matthew from 54.37.68.66 port 40414 May 20 20:41:03 ns382633 sshd\[30395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.68.66	2020-05-21 05:44:36
139.59.124.118	attack	Invalid user lv from 139.59.124.118 port 42214	2020-05-21 05:29:22
89.176.9.98	attack	DATE:2020-05-20 21:08:40, IP:89.176.9.98, PORT:ssh SSH brute force auth (docker-dc)	2020-05-21 05:36:49
106.54.242.120	attack	SSH Brute Force	2020-05-21 05:55:16
51.91.77.104	attackbotsspam	May 20 22:02:10 dev0-dcde-rnet sshd[19957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.77.104 May 20 22:02:12 dev0-dcde-rnet sshd[19957]: Failed password for invalid user mlp from 51.91.77.104 port 42186 ssh2 May 20 22:06:14 dev0-dcde-rnet sshd[19993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.77.104	2020-05-21 05:37:08
220.130.81.34	attackspam	Honeypot attack, port: 81, PTR: 220-130-81-34.HINET-IP.hinet.net.	2020-05-21 05:41:03
14.162.5.19	attackbotsspam	1589990355 - 05/20/2020 17:59:15 Host: 14.162.5.19/14.162.5.19 Port: 445 TCP Blocked	2020-05-21 05:45:39
106.13.63.215	attackspam	May 20 20:50:23 DAAP sshd[21438]: Invalid user hcg from 106.13.63.215 port 42874 May 20 20:50:23 DAAP sshd[21438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.215 May 20 20:50:23 DAAP sshd[21438]: Invalid user hcg from 106.13.63.215 port 42874 May 20 20:50:24 DAAP sshd[21438]: Failed password for invalid user hcg from 106.13.63.215 port 42874 ssh2 May 20 20:52:51 DAAP sshd[21471]: Invalid user jjw from 106.13.63.215 port 47860 ...	2020-05-21 05:36:33
202.70.65.229	attackspambots	May 20 20:58:04 163-172-32-151 sshd[30032]: Invalid user yja from 202.70.65.229 port 57718 ...	2020-05-21 06:03:13
180.142.131.43	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-05-21 05:55:35
165.22.31.24	attack	REQUESTED PAGE: /wp-login.php	2020-05-21 05:46:21

Recently Reported IPs

104.18.31.141	104.18.31.155	104.18.31.158	104.18.31.164
104.18.31.161	104.18.31.165	104.18.31.17	104.18.31.18
104.18.31.173	104.18.31.171	104.21.65.3	104.18.31.196
104.18.31.170	104.18.31.229	104.18.31.227	104.18.31.200
104.18.31.183	104.18.31.225	104.18.31.215	104.18.31.231