Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.18.4.135 spam
Phishing
2023-06-15 05:17:06
104.18.44.158 attackbots
RUSSIAN SCAMMERS !
2020-04-20 18:13:49
104.18.47.6 attack
Brute force attack against VPN service
2020-04-01 01:18:33
104.18.48.6 attackspam
web spam and scam
2019-07-10 18:30:37
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.4.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10878
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.4.161.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021602 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 05:49:14 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 161.4.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.4.18.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
213.184.252.110 attackbots
Sep 20 23:28:13 php1 sshd\[4225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.184.252.110  user=root
Sep 20 23:28:15 php1 sshd\[4225\]: Failed password for root from 213.184.252.110 port 36224 ssh2
Sep 20 23:28:27 php1 sshd\[4228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.184.252.110  user=root
Sep 20 23:28:29 php1 sshd\[4228\]: Failed password for root from 213.184.252.110 port 40846 ssh2
Sep 20 23:28:31 php1 sshd\[4228\]: Failed password for root from 213.184.252.110 port 40846 ssh2
2020-09-21 18:09:19
165.22.215.192 attack
Sep 21 11:18:34 host1 sshd[381940]: Failed password for root from 165.22.215.192 port 50316 ssh2
Sep 21 11:22:38 host1 sshd[382248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.215.192  user=root
Sep 21 11:22:40 host1 sshd[382248]: Failed password for root from 165.22.215.192 port 50040 ssh2
Sep 21 11:22:38 host1 sshd[382248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.215.192  user=root
Sep 21 11:22:40 host1 sshd[382248]: Failed password for root from 165.22.215.192 port 50040 ssh2
...
2020-09-21 17:30:32
177.73.2.57 attackbots
Auto Fail2Ban report, multiple SSH login attempts.
2020-09-21 17:29:59
46.101.165.62 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 25 - port: 17233 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 17:40:36
119.115.128.2 attackspam
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.115.128.2 
Failed password for invalid user pi from 119.115.128.2 port 52329 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.115.128.2
2020-09-21 17:31:08
68.115.18.134 attack
SS5,WP GET /wp-login.php
2020-09-21 17:55:41
66.215.205.128 attackbots
SSH Server BruteForce Attack
2020-09-21 17:50:55
201.163.180.183 attack
Sep 21 14:21:37 gw1 sshd[27158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.163.180.183
Sep 21 14:21:40 gw1 sshd[27158]: Failed password for invalid user admin from 201.163.180.183 port 36801 ssh2
...
2020-09-21 17:38:38
89.248.160.139 attackspam
 TCP (SYN) 89.248.160.139:57871 -> port 18089, len 44
2020-09-21 17:51:56
1.34.164.204 attack
Port scan followed by SSH.
2020-09-21 17:31:52
117.2.181.37 attackspambots
Honeypot attack, port: 5555, PTR: localhost.
2020-09-21 18:00:55
142.44.161.132 attackspambots
Sep 21 06:23:29 ws12vmsma01 sshd[56639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.ip-142-44-161.net 
Sep 21 06:23:29 ws12vmsma01 sshd[56639]: Invalid user user from 142.44.161.132
Sep 21 06:23:31 ws12vmsma01 sshd[56639]: Failed password for invalid user user from 142.44.161.132 port 40676 ssh2
...
2020-09-21 17:56:45
81.70.57.192 attack
Sep 18 21:26:59 finn sshd[3838]: Invalid user backupftp from 81.70.57.192 port 41908
Sep 18 21:26:59 finn sshd[3838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.57.192
Sep 18 21:27:01 finn sshd[3838]: Failed password for invalid user backupftp from 81.70.57.192 port 41908 ssh2
Sep 18 21:27:01 finn sshd[3838]: Received disconnect from 81.70.57.192 port 41908:11: Bye Bye [preauth]
Sep 18 21:27:01 finn sshd[3838]: Disconnected from 81.70.57.192 port 41908 [preauth]
Sep 18 21:37:11 finn sshd[6444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.57.192  user=r.r
Sep 18 21:37:13 finn sshd[6444]: Failed password for r.r from 81.70.57.192 port 43098 ssh2
Sep 18 21:37:13 finn sshd[6444]: Received disconnect from 81.70.57.192 port 43098:11: Bye Bye [preauth]
Sep 18 21:37:13 finn sshd[6444]: Disconnected from 81.70.57.192 port 43098 [preauth]
Sep 18 21:43:37 finn sshd[7941]: pam_unix(........
-------------------------------
2020-09-21 17:52:11
200.38.232.248 attackbots
scan for /wp-config.bak
2020-09-21 17:54:21
122.152.208.242 attackbots
" "
2020-09-21 17:35:19

Recently Reported IPs

104.18.4.13 104.18.4.164 104.18.4.178 104.18.4.180
104.18.4.183 104.18.4.187 104.18.4.188 104.18.4.189
104.18.4.193 104.18.4.196 104.18.4.200 104.18.4.207
104.18.4.216 104.18.4.22 104.18.4.231 104.18.4.35
104.18.4.52 104.18.4.56 193.254.179.10 104.18.4.65