Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.18.4.135 spam
Phishing
2023-06-15 05:17:06
104.18.44.158 attackbots
RUSSIAN SCAMMERS !
2020-04-20 18:13:49
104.18.47.6 attack
Brute force attack against VPN service
2020-04-01 01:18:33
104.18.48.6 attackspam
web spam and scam
2019-07-10 18:30:37
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.4.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4043
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.4.49.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:28:46 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 49.4.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.4.18.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
189.91.157.230 attackspambots
1590580204 - 05/27/2020 13:50:04 Host: 189.91.157.230/189.91.157.230 Port: 445 TCP Blocked
2020-05-28 02:16:50
139.162.122.110 attackspambots
...
2020-05-28 02:23:26
139.170.150.250 attackbots
(sshd) Failed SSH login from 139.170.150.250 (CN/China/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 27 17:44:07 andromeda sshd[24155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.250  user=root
May 27 17:44:09 andromeda sshd[24155]: Failed password for root from 139.170.150.250 port 5222 ssh2
May 27 17:47:34 andromeda sshd[24240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.250  user=root
2020-05-28 02:18:29
220.228.192.200 attackbotsspam
Fail2Ban Ban Triggered (2)
2020-05-28 01:55:12
162.223.91.170 attack
May 27 17:30:48 h2065291 sshd[11212]: reveeclipse mapping checking getaddrinfo for host.coloup.com [162.223.91.170] failed - POSSIBLE BREAK-IN ATTEMPT!
May 27 17:30:48 h2065291 sshd[11212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.223.91.170  user=r.r
May 27 17:30:50 h2065291 sshd[11212]: Failed password for r.r from 162.223.91.170 port 34198 ssh2
May 27 17:30:50 h2065291 sshd[11212]: Received disconnect from 162.223.91.170: 11: Bye Bye [preauth]
May 27 17:44:49 h2065291 sshd[11470]: reveeclipse mapping checking getaddrinfo for host.coloup.com [162.223.91.170] failed - POSSIBLE BREAK-IN ATTEMPT!
May 27 17:44:49 h2065291 sshd[11470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.223.91.170  user=r.r
May 27 17:44:51 h2065291 sshd[11470]: Failed password for r.r from 162.223.91.170 port 34774 ssh2
May 27 17:44:51 h2065291 sshd[11470]: Received disconnect from 162.223.91.170: 11........
-------------------------------
2020-05-28 02:30:59
190.196.147.180 attack
Unauthorised access (May 27) SRC=190.196.147.180 LEN=52 TTL=116 ID=3553 DF TCP DPT=445 WINDOW=8192 SYN
2020-05-28 02:29:17
162.243.143.105 attack
162.243.143.105 - - - [27/May/2020:17:21:11 +0200] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 404 162 "-" "Mozilla/5.0 zgrab/0.x" "-" "-"
2020-05-28 02:10:19
195.154.237.111 attackspam
May 27 11:22:36 mockhub sshd[26039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.237.111
May 27 11:22:38 mockhub sshd[26039]: Failed password for invalid user tordo from 195.154.237.111 port 39236 ssh2
...
2020-05-28 02:26:08
206.189.164.136 attackspam
2020-05-27T13:00:40.134346server.mjenks.net sshd[1899303]: Failed password for root from 206.189.164.136 port 60188 ssh2
2020-05-27T13:05:04.300645server.mjenks.net sshd[1899877]: Invalid user admin from 206.189.164.136 port 35920
2020-05-27T13:05:04.307953server.mjenks.net sshd[1899877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.164.136
2020-05-27T13:05:04.300645server.mjenks.net sshd[1899877]: Invalid user admin from 206.189.164.136 port 35920
2020-05-27T13:05:06.231750server.mjenks.net sshd[1899877]: Failed password for invalid user admin from 206.189.164.136 port 35920 ssh2
...
2020-05-28 02:17:33
178.128.108.100 attackspam
May 27 20:13:35 h2779839 sshd[21394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.108.100  user=root
May 27 20:13:36 h2779839 sshd[21394]: Failed password for root from 178.128.108.100 port 45144 ssh2
May 27 20:16:36 h2779839 sshd[21440]: Invalid user host from 178.128.108.100 port 36686
May 27 20:16:36 h2779839 sshd[21440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.108.100
May 27 20:16:36 h2779839 sshd[21440]: Invalid user host from 178.128.108.100 port 36686
May 27 20:16:38 h2779839 sshd[21440]: Failed password for invalid user host from 178.128.108.100 port 36686 ssh2
May 27 20:19:33 h2779839 sshd[21481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.108.100  user=root
May 27 20:19:34 h2779839 sshd[21481]: Failed password for root from 178.128.108.100 port 56466 ssh2
May 27 20:22:32 h2779839 sshd[21544]: Invalid user revenueaccou
...
2020-05-28 02:30:38
112.169.152.105 attack
Auto Fail2Ban report, multiple SSH login attempts.
2020-05-28 02:25:09
217.61.6.112 attackspam
May 26 19:59:08 mx sshd[11203]: Failed password for root from 217.61.6.112 port 38254 ssh2
2020-05-28 02:01:50
193.23.3.19 attackbots
(mod_security) mod_security (id:210492) triggered by 193.23.3.19 (RU/Russia/-): 5 in the last 3600 secs
2020-05-28 02:28:49
185.53.88.41 attackbots
[2020-05-27 12:28:46] NOTICE[1157][C-00009f05] chan_sip.c: Call from '' (185.53.88.41:5071) to extension '972595778361' rejected because extension not found in context 'public'.
[2020-05-27 12:28:46] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-27T12:28:46.964-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f5f10787a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.41/5071",ACLName="no_extension_match"
[2020-05-27 12:37:29] NOTICE[1157][C-00009f0b] chan_sip.c: Call from '' (185.53.88.41:5071) to extension '011972595778361' rejected because extension not found in context 'public'.
[2020-05-27 12:37:29] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-27T12:37:29.552-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.41
...
2020-05-28 02:09:54
176.113.115.33 attackspam
May 27 20:22:36 debian-2gb-nbg1-2 kernel: \[12862549.521500\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=176.113.115.33 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=29384 PROTO=TCP SPT=59606 DPT=6338 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-28 02:24:10

Recently Reported IPs

104.18.27.71 104.18.5.49 104.18.79.53 104.18.4.100
104.18.5.100 104.18.8.29 104.18.9.29 104.19.159.97
104.19.160.97 104.19.189.33 104.19.188.33 104.194.78.126
104.19.239.121 104.19.238.121 104.196.146.49 104.196.152.243
104.196.169.16 104.196.169.253 104.196.171.202 104.196.173.61