Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.18.50.120 attack
*** Phishing website that camouflaged Amazon.com.
(redirect from)
https://subscriber.jglboots.com/
domain: subscriber.jglboots.com
IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278
IP v4 address: 104.18.50.120 / 104.18.51.120
location: USA
hosting: Cloudflare, Inc
web: https://www.cloudflare.com/abuse
abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com
(redirect to)
https://counts-pontis-name-flare-and-safty.telemagico.com/
domain: counts-pontis-name-flare-and-safty.telemagico.com
IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1
IP v4 address: 104.24.99.241 / 104.24.98.241
location: USA
hosting: Cloudflare, Inc
web: https://www.cloudflare.com/abuse
abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com
2020-05-04 03:15:46
104.18.54.70 spam
Used undred times per day for SPAM, PHISHING, SCAM and SEXE on STOLLEN list we don't know where without our agreement, as usual with LIERS and ROBERS !
Especially by namecheap.com with creatensend.com ?
https://www.mywot.com/scorecard/creatensend.com
https://www.mywot.com/scorecard/namecheap.com
Or uniregistry.com with casinovips.com ?
https://www.mywot.com/scorecard/casinovips.com
https://www.mywot.com/scorecard/uniregistry.com
And the same few hours before...
By GoDaddy.com, une autre SOUS MERDE adepte d'ESCROCS commebonusmasters.com...
https://www.mywot.com/scorecard/bonusmasters.com
https://www.mywot.com/scorecard/godaddy.com
2020-02-20 05:28:25
104.18.53.191 attack
*** Phishing website that camouflaged Google.
https://google-chrome.doysstv.com/?index
2020-01-04 20:34:01
104.18.52.191 attackspambots
*** Phishing website that camouflaged Google.
https://google-chrome.doysstv.com/?index
2020-01-04 18:36:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.5.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59965
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.5.40.			IN	A

;; AUTHORITY SECTION:
.			299	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 79 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 18:11:26 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 40.5.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 40.5.18.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.167 attackbots
Automatic report BANNED IP
2020-08-28 04:29:47
188.166.58.179 attackbots
Automatic Fail2ban report - Trying login SSH
2020-08-28 04:21:29
198.245.50.81 attackspam
Aug 27 18:08:39 IngegnereFirenze sshd[316]: Failed password for invalid user isabelle from 198.245.50.81 port 54404 ssh2
...
2020-08-28 04:26:42
165.227.181.9 attackspambots
Aug 27 15:56:57 rancher-0 sshd[1304579]: Invalid user user1 from 165.227.181.9 port 32886
...
2020-08-28 04:18:53
122.176.74.219 attackspambots
Unauthorized connection attempt from IP address 122.176.74.219 on Port 445(SMB)
2020-08-28 04:00:28
96.114.71.146 attackbotsspam
Aug 27 15:43:52 eventyay sshd[21455]: Failed password for root from 96.114.71.146 port 43526 ssh2
Aug 27 15:45:37 eventyay sshd[21497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.114.71.146
Aug 27 15:45:39 eventyay sshd[21497]: Failed password for invalid user mdm from 96.114.71.146 port 43674 ssh2
...
2020-08-28 04:23:16
222.124.17.227 attack
Fail2Ban
2020-08-28 04:34:05
45.237.200.196 attack
Aug 27 12:56:43 *** sshd[12106]: Invalid user mig from 45.237.200.196
2020-08-28 03:58:01
192.241.139.236 attack
fail2ban
2020-08-28 04:20:57
111.231.87.209 attack
2020-08-27T13:16:49.911302shield sshd\[16178\]: Invalid user hank from 111.231.87.209 port 55502
2020-08-27T13:16:49.926857shield sshd\[16178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.87.209
2020-08-27T13:16:52.012968shield sshd\[16178\]: Failed password for invalid user hank from 111.231.87.209 port 55502 ssh2
2020-08-27T13:20:36.458603shield sshd\[16632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.87.209  user=root
2020-08-27T13:20:38.374333shield sshd\[16632\]: Failed password for root from 111.231.87.209 port 37790 ssh2
2020-08-28 04:04:21
190.85.149.170 attack
1598532980 - 08/27/2020 14:56:20 Host: 190.85.149.170/190.85.149.170 Port: 445 TCP Blocked
2020-08-28 04:14:47
109.153.156.79 attack
Automatic report - Port Scan Attack
2020-08-28 04:17:40
124.163.228.79 attackbots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-27T19:15:59Z and 2020-08-27T19:24:22Z
2020-08-28 04:18:09
112.85.42.89 attackbots
Aug 28 01:52:51 dhoomketu sshd[2703883]: Failed password for root from 112.85.42.89 port 15289 ssh2
Aug 28 01:54:00 dhoomketu sshd[2703919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89  user=root
Aug 28 01:54:03 dhoomketu sshd[2703919]: Failed password for root from 112.85.42.89 port 45190 ssh2
Aug 28 01:55:16 dhoomketu sshd[2703951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89  user=root
Aug 28 01:55:18 dhoomketu sshd[2703951]: Failed password for root from 112.85.42.89 port 51662 ssh2
...
2020-08-28 04:27:17
192.241.175.48 attackspam
2020-08-27T14:27:34.5657851495-001 sshd[21420]: Invalid user ftpuser from 192.241.175.48 port 58326
2020-08-27T14:27:36.9539981495-001 sshd[21420]: Failed password for invalid user ftpuser from 192.241.175.48 port 58326 ssh2
2020-08-27T14:31:45.7695931495-001 sshd[21642]: Invalid user priyam from 192.241.175.48 port 50780
2020-08-27T14:31:45.7725871495-001 sshd[21642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.175.48
2020-08-27T14:31:45.7695931495-001 sshd[21642]: Invalid user priyam from 192.241.175.48 port 50780
2020-08-27T14:31:47.6154731495-001 sshd[21642]: Failed password for invalid user priyam from 192.241.175.48 port 50780 ssh2
...
2020-08-28 04:03:43

Recently Reported IPs

88.39.135.177 104.18.5.43 104.18.5.44 104.18.5.48
104.18.5.51 104.18.5.59 104.18.5.61 104.18.5.63
104.18.5.64 104.18.5.88 104.18.5.95 104.18.5.97
104.18.59.63 104.18.6.101 104.18.6.128 104.18.6.137
104.18.6.14 104.18.6.140 104.18.6.148 104.18.6.168