104.18.5.248 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.50.120	attack	*** Phishing website that camouflaged Amazon.com. (redirect from) https://subscriber.jglboots.com/ domain: subscriber.jglboots.com IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278 IP v4 address: 104.18.50.120 / 104.18.51.120 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com (redirect to) https://counts-pontis-name-flare-and-safty.telemagico.com/ domain: counts-pontis-name-flare-and-safty.telemagico.com IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1 IP v4 address: 104.24.99.241 / 104.24.98.241 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com	2020-05-04 03:15:46
104.18.54.70	spam	Used undred times per day for SPAM, PHISHING, SCAM and SEXE on STOLLEN list we don't know where without our agreement, as usual with LIERS and ROBERS ! Especially by namecheap.com with creatensend.com ? https://www.mywot.com/scorecard/creatensend.com https://www.mywot.com/scorecard/namecheap.com Or uniregistry.com with casinovips.com ? https://www.mywot.com/scorecard/casinovips.com https://www.mywot.com/scorecard/uniregistry.com And the same few hours before... By GoDaddy.com, une autre SOUS MERDE adepte d'ESCROCS commebonusmasters.com... https://www.mywot.com/scorecard/bonusmasters.com https://www.mywot.com/scorecard/godaddy.com	2020-02-20 05:28:25
104.18.53.191	attack	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 20:34:01
104.18.52.191	attackspambots	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 18:36:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.5.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33128
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.5.248.			IN	A

;; AUTHORITY SECTION:
.			262	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032301 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 24 04:31:49 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 248.5.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 248.5.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
34.210.112.240	attackbots	Abusive spam From: Teaparty 247 illicit e-mail harvesting UBE 216.24.226.172 - phishing redirect api.keen.io	2020-04-29 22:29:43
167.71.209.43	attackbots	Apr 29 14:32:26 markkoudstaal sshd[14383]: Failed password for root from 167.71.209.43 port 46462 ssh2 Apr 29 14:36:49 markkoudstaal sshd[15261]: Failed password for root from 167.71.209.43 port 48910 ssh2	2020-04-29 22:34:47
202.91.71.18	attackbotsspam	Unauthorized connection attempt from IP address 202.91.71.18 on Port 445(SMB)	2020-04-29 22:45:27
187.141.71.27	attack	Bruteforce detected by fail2ban	2020-04-29 22:45:57
172.111.176.60	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-29 22:41:01
128.201.51.241	attackspambots	Unauthorized connection attempt from IP address 128.201.51.241 on Port 445(SMB)	2020-04-29 22:08:43
157.32.150.215	attackbots	Apr 29 13:31:07 ntop sshd[8310]: Invalid user ubnt from 157.32.150.215 port 51131 Apr 29 13:31:08 ntop sshd[8310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.32.150.215 Apr 29 13:31:10 ntop sshd[8310]: Failed password for invalid user ubnt from 157.32.150.215 port 51131 ssh2 Apr 29 13:31:10 ntop sshd[8310]: Connection closed by invalid user ubnt 157.32.150.215 port 51131 [preauth] Apr 29 13:34:08 ntop sshd[9424]: Invalid user ubnt from 157.32.150.215 port 56329 Apr 29 13:34:08 ntop sshd[9424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.32.150.215 Apr 29 13:34:10 ntop sshd[9424]: Failed password for invalid user ubnt from 157.32.150.215 port 56329 ssh2 Apr 29 13:34:12 ntop sshd[9424]: Connection closed by invalid user ubnt 157.32.150.215 port 56329 [preauth] Apr 29 13:37:11 ntop sshd[10811]: Invalid user ubnt from 157.32.150.215 port 61642 Apr 29 13:37:11 ntop sshd[10811]:........ -------------------------------	2020-04-29 22:07:31
90.150.172.114	attack	Unauthorized connection attempt from IP address 90.150.172.114 on Port 445(SMB)	2020-04-29 22:08:07
201.184.169.106	attackspam	Apr 29 15:23:02 srv-ubuntu-dev3 sshd[130406]: Invalid user anj from 201.184.169.106 Apr 29 15:23:02 srv-ubuntu-dev3 sshd[130406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.184.169.106 Apr 29 15:23:02 srv-ubuntu-dev3 sshd[130406]: Invalid user anj from 201.184.169.106 Apr 29 15:23:04 srv-ubuntu-dev3 sshd[130406]: Failed password for invalid user anj from 201.184.169.106 port 35394 ssh2 Apr 29 15:27:20 srv-ubuntu-dev3 sshd[131059]: Invalid user dw from 201.184.169.106 Apr 29 15:27:20 srv-ubuntu-dev3 sshd[131059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.184.169.106 Apr 29 15:27:20 srv-ubuntu-dev3 sshd[131059]: Invalid user dw from 201.184.169.106 Apr 29 15:27:22 srv-ubuntu-dev3 sshd[131059]: Failed password for invalid user dw from 201.184.169.106 port 46350 ssh2 Apr 29 15:31:44 srv-ubuntu-dev3 sshd[1005]: Invalid user binh from 201.184.169.106 ...	2020-04-29 22:40:41
18.229.33.200	attack	Wordpress_xmlrpc_attack	2020-04-29 22:45:10
157.47.82.184	attackbots	Unauthorized connection attempt from IP address 157.47.82.184 on Port 445(SMB)	2020-04-29 22:49:47
185.202.1.240	attack	SSH Brute Force	2020-04-29 22:41:26
45.14.150.86	attackbots	5x Failed Password	2020-04-29 22:33:53
142.4.9.161	attackspambots	Account phishing spam	2020-04-29 22:21:36
220.136.39.65	attackbotsspam	Unauthorized connection attempt from IP address 220.136.39.65 on Port 445(SMB)	2020-04-29 22:31:12

Recently Reported IPs

104.18.5.170	104.18.6.126	104.18.6.230	104.18.6.241
104.18.6.69	104.18.6.88	104.18.67.78	104.18.7.126
104.18.7.230	104.18.7.241	104.18.7.69	104.18.7.88
104.18.90.50	104.19.11.70	104.19.112.235	104.19.129.112
104.19.135.193	104.19.142.246	104.19.152.64	104.19.162.226