104.18.5.5 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.50.120	attack	*** Phishing website that camouflaged Amazon.com. (redirect from) https://subscriber.jglboots.com/ domain: subscriber.jglboots.com IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278 IP v4 address: 104.18.50.120 / 104.18.51.120 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com (redirect to) https://counts-pontis-name-flare-and-safty.telemagico.com/ domain: counts-pontis-name-flare-and-safty.telemagico.com IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1 IP v4 address: 104.24.99.241 / 104.24.98.241 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com	2020-05-04 03:15:46
104.18.54.70	spam	Used undred times per day for SPAM, PHISHING, SCAM and SEXE on STOLLEN list we don't know where without our agreement, as usual with LIERS and ROBERS ! Especially by namecheap.com with creatensend.com ? https://www.mywot.com/scorecard/creatensend.com https://www.mywot.com/scorecard/namecheap.com Or uniregistry.com with casinovips.com ? https://www.mywot.com/scorecard/casinovips.com https://www.mywot.com/scorecard/uniregistry.com And the same few hours before... By GoDaddy.com, une autre SOUS MERDE adepte d'ESCROCS commebonusmasters.com... https://www.mywot.com/scorecard/bonusmasters.com https://www.mywot.com/scorecard/godaddy.com	2020-02-20 05:28:25
104.18.53.191	attack	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 20:34:01
104.18.52.191	attackspambots	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 18:36:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.5.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60656
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.5.5.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 02:51:25 CST 2022
;; MSG SIZE  rcvd: 103

Host info

Host 5.5.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.5.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.54.187.20	attack	Sep 28 07:13:21 vpn01 sshd[32085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.187.20 Sep 28 07:13:23 vpn01 sshd[32085]: Failed password for invalid user sales from 106.54.187.20 port 39718 ssh2 ...	2020-09-29 00:30:53
222.186.30.35	attackbots	Sep 28 17:34:43 rocket sshd[19944]: Failed password for root from 222.186.30.35 port 23340 ssh2 Sep 28 17:34:51 rocket sshd[19955]: Failed password for root from 222.186.30.35 port 53163 ssh2 ...	2020-09-29 00:39:57
201.211.208.231	attackspambots	445/tcp 445/tcp [2020-09-27]2pkt	2020-09-29 00:46:57
218.78.54.80	attackbotsspam	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-09-29 00:29:55
180.254.130.78	attackspam	445/tcp 445/tcp [2020-09-25]2pkt	2020-09-29 00:41:13
111.72.194.53	attack	Sep 28 00:29:24 srv01 postfix/smtpd\[20759\]: warning: unknown\[111.72.194.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 00:29:35 srv01 postfix/smtpd\[20759\]: warning: unknown\[111.72.194.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 00:29:51 srv01 postfix/smtpd\[20759\]: warning: unknown\[111.72.194.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 00:30:09 srv01 postfix/smtpd\[20759\]: warning: unknown\[111.72.194.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 00:30:21 srv01 postfix/smtpd\[20759\]: warning: unknown\[111.72.194.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-29 00:36:36
175.24.95.240	attackbots	2020-09-28T16:15:01.700783abusebot-8.cloudsearch.cf sshd[6978]: Invalid user user3 from 175.24.95.240 port 41088 2020-09-28T16:15:01.708107abusebot-8.cloudsearch.cf sshd[6978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.95.240 2020-09-28T16:15:01.700783abusebot-8.cloudsearch.cf sshd[6978]: Invalid user user3 from 175.24.95.240 port 41088 2020-09-28T16:15:03.504812abusebot-8.cloudsearch.cf sshd[6978]: Failed password for invalid user user3 from 175.24.95.240 port 41088 ssh2 2020-09-28T16:18:29.661807abusebot-8.cloudsearch.cf sshd[7063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.95.240 user=root 2020-09-28T16:18:31.347341abusebot-8.cloudsearch.cf sshd[7063]: Failed password for root from 175.24.95.240 port 54872 ssh2 2020-09-28T16:21:44.544084abusebot-8.cloudsearch.cf sshd[7066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.95.240 us ...	2020-09-29 00:26:22
223.130.31.230	attack	23/tcp 23/tcp [2020-09-25/27]2pkt	2020-09-29 00:38:58
116.132.58.234	attack	1433/tcp 1433/tcp 1433/tcp... [2020-09-25/27]4pkt,1pt.(tcp)	2020-09-29 00:34:37
179.95.147.35	attackspambots	Automatic report - Port Scan Attack	2020-09-29 00:42:39
187.188.16.178	attackbotsspam	Sep 27 07:17:28 serwer sshd\[7331\]: Invalid user pi from 187.188.16.178 port 58810 Sep 27 07:17:29 serwer sshd\[7333\]: Invalid user pi from 187.188.16.178 port 41436 Sep 27 07:17:29 serwer sshd\[7331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.16.178 Sep 27 07:17:29 serwer sshd\[7333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.16.178 ...	2020-09-29 00:49:56
36.133.84.2	attackbotsspam	Automatic Fail2ban report - Trying login SSH	2020-09-29 00:35:39
62.112.11.88	attackspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-28T14:52:00Z and 2020-09-28T15:01:16Z	2020-09-29 00:14:57
189.162.99.17	attackspam	SSH Bruteforce Attempt on Honeypot	2020-09-29 00:16:53
186.155.17.228	attackspambots	TCP (SYN) 186.155.17.228:8341 -> port 23, len 44	2020-09-29 00:38:36

Recently Reported IPs

104.18.5.29	104.18.5.246	104.18.6.132	104.18.6.54
104.18.6.16	104.18.67.13	174.242.71.228	134.165.1.93
104.18.68.13	104.18.7.132	104.18.7.16	104.18.70.6
104.18.69.6	104.18.71.6	104.18.7.54	104.18.72.6
104.18.73.59	104.18.73.54	104.18.73.6	104.18.74.53