104.18.5.212 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.50.120	attack	*** Phishing website that camouflaged Amazon.com. (redirect from) https://subscriber.jglboots.com/ domain: subscriber.jglboots.com IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278 IP v4 address: 104.18.50.120 / 104.18.51.120 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com (redirect to) https://counts-pontis-name-flare-and-safty.telemagico.com/ domain: counts-pontis-name-flare-and-safty.telemagico.com IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1 IP v4 address: 104.24.99.241 / 104.24.98.241 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com	2020-05-04 03:15:46
104.18.54.70	spam	Used undred times per day for SPAM, PHISHING, SCAM and SEXE on STOLLEN list we don't know where without our agreement, as usual with LIERS and ROBERS ! Especially by namecheap.com with creatensend.com ? https://www.mywot.com/scorecard/creatensend.com https://www.mywot.com/scorecard/namecheap.com Or uniregistry.com with casinovips.com ? https://www.mywot.com/scorecard/casinovips.com https://www.mywot.com/scorecard/uniregistry.com And the same few hours before... By GoDaddy.com, une autre SOUS MERDE adepte d'ESCROCS commebonusmasters.com... https://www.mywot.com/scorecard/bonusmasters.com https://www.mywot.com/scorecard/godaddy.com	2020-02-20 05:28:25
104.18.53.191	attack	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 20:34:01
104.18.52.191	attackspambots	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 18:36:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.5.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36582
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.5.212.			IN	A

;; AUTHORITY SECTION:
.			171	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031100 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 11 18:47:11 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 212.5.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 212.5.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
47.88.153.61	attackbots	Sep 12 15:27:30 sip sshd[25719]: Failed password for root from 47.88.153.61 port 58664 ssh2 Sep 12 15:41:47 sip sshd[29477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.88.153.61 Sep 12 15:41:49 sip sshd[29477]: Failed password for invalid user apache from 47.88.153.61 port 35243 ssh2	2020-09-13 03:20:00
182.59.234.131	attackspambots	Icarus honeypot on github	2020-09-13 03:46:13
183.250.89.179	attackspambots	TCP (SYN) 183.250.89.179:59592 -> port 4785, len 44	2020-09-13 03:36:27
147.135.133.88	attackspam	Sep 12 19:14:14 onepixel sshd[3632053]: Failed password for root from 147.135.133.88 port 55959 ssh2 Sep 12 19:15:54 onepixel sshd[3632336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.133.88 user=root Sep 12 19:15:57 onepixel sshd[3632336]: Failed password for root from 147.135.133.88 port 42971 ssh2 Sep 12 19:17:38 onepixel sshd[3632620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.133.88 user=root Sep 12 19:17:40 onepixel sshd[3632620]: Failed password for root from 147.135.133.88 port 58212 ssh2	2020-09-13 03:25:41
168.205.124.246	attackbotsspam	Invalid user admin from 168.205.124.246 port 36954	2020-09-13 03:43:08
190.214.21.185	attackspambots	Icarus honeypot on github	2020-09-13 03:31:38
5.190.189.164	attack	(smtpauth) Failed SMTP AUTH login from 5.190.189.164 (IR/Iran/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-11 21:18:09 plain authenticator failed for ([5.190.189.164]) [5.190.189.164]: 535 Incorrect authentication data (set_id=info@electrojosh.com)	2020-09-13 03:35:57
78.169.5.219	attack	1599842918 - 09/11/2020 18:48:38 Host: 78.169.5.219/78.169.5.219 Port: 445 TCP Blocked	2020-09-13 03:26:30
123.30.149.76	attackspam	Sep 12 20:30:26 rancher-0 sshd[8351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.149.76 user=root Sep 12 20:30:29 rancher-0 sshd[8351]: Failed password for root from 123.30.149.76 port 52207 ssh2 ...	2020-09-13 03:21:16
50.201.12.90	attackbots	Unauthorized connection attempt from IP address 50.201.12.90 on Port 445(SMB)	2020-09-13 03:53:35
34.244.139.68	attackbots	Port Scan: TCP/80	2020-09-13 03:34:37
87.103.120.250	attackbots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-12T18:44:38Z and 2020-09-12T18:52:10Z	2020-09-13 03:18:50
222.229.109.174	attackspam	TCP (SYN) 222.229.109.174:42934 -> port 22, len 44	2020-09-13 03:48:21
167.172.38.238	attackbots	TCP (SYN) 167.172.38.238:44086 -> port 12063, len 44	2020-09-13 03:16:22
187.145.225.240	attackbots	SSH Invalid Login	2020-09-13 03:34:11

Recently Reported IPs

104.18.5.177	104.18.5.69	104.18.6.100	104.18.6.152
104.18.6.154	104.18.6.226	104.18.6.237	104.18.6.238
104.18.6.76	104.18.65.23	104.18.66.23	104.18.69.91
104.18.7.100	104.18.7.152	104.18.7.154	104.18.7.226
104.18.7.237	104.18.7.238	104.18.7.76	104.18.70.91