104.18.5.6 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.50.120	attack	*** Phishing website that camouflaged Amazon.com. (redirect from) https://subscriber.jglboots.com/ domain: subscriber.jglboots.com IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278 IP v4 address: 104.18.50.120 / 104.18.51.120 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com (redirect to) https://counts-pontis-name-flare-and-safty.telemagico.com/ domain: counts-pontis-name-flare-and-safty.telemagico.com IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1 IP v4 address: 104.24.99.241 / 104.24.98.241 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com	2020-05-04 03:15:46
104.18.54.70	spam	Used undred times per day for SPAM, PHISHING, SCAM and SEXE on STOLLEN list we don't know where without our agreement, as usual with LIERS and ROBERS ! Especially by namecheap.com with creatensend.com ? https://www.mywot.com/scorecard/creatensend.com https://www.mywot.com/scorecard/namecheap.com Or uniregistry.com with casinovips.com ? https://www.mywot.com/scorecard/casinovips.com https://www.mywot.com/scorecard/uniregistry.com And the same few hours before... By GoDaddy.com, une autre SOUS MERDE adepte d'ESCROCS commebonusmasters.com... https://www.mywot.com/scorecard/bonusmasters.com https://www.mywot.com/scorecard/godaddy.com	2020-02-20 05:28:25
104.18.53.191	attack	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 20:34:01
104.18.52.191	attackspambots	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 18:36:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.5.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.5.6.			IN	A

;; AUTHORITY SECTION:
.			205	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031500 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 16 01:32:04 CST 2022
;; MSG SIZE  rcvd: 103

Host info

Host 6.5.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.5.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
189.124.0.233	attackbotsspam	Jun 18 10:24:48 mail.srvfarm.net postfix/smtps/smtpd[1383618]: warning: 189-124-0-233.tcvnet.com.br[189.124.0.233]: SASL PLAIN authentication failed: Jun 18 10:24:49 mail.srvfarm.net postfix/smtps/smtpd[1383618]: lost connection after AUTH from 189-124-0-233.tcvnet.com.br[189.124.0.233] Jun 18 10:30:16 mail.srvfarm.net postfix/smtps/smtpd[1383077]: warning: 189-124-0-233.tcvnet.com.br[189.124.0.233]: SASL PLAIN authentication failed: Jun 18 10:30:16 mail.srvfarm.net postfix/smtps/smtpd[1383077]: lost connection after AUTH from 189-124-0-233.tcvnet.com.br[189.124.0.233] Jun 18 10:34:48 mail.srvfarm.net postfix/smtps/smtpd[1392585]: warning: 189-124-0-233.tcvnet.com.br[189.124.0.233]: SASL PLAIN authentication failed:	2020-06-19 04:29:57
103.242.14.68	attack	Registration form abuse	2020-06-19 04:50:42
129.213.58.48	attackspam	2020-05-05T19:43:32.622Z CLOSE host=129.213.58.48 port=16649 fd=4 time=20.017 bytes=14 ...	2020-06-19 04:17:47
202.169.45.20	attackbotsspam	Registration form abuse	2020-06-19 04:41:08
129.213.102.103	attackbotsspam	2020-05-09T16:58:09.484Z CLOSE host=129.213.102.103 port=53000 fd=4 time=20.008 bytes=22 ...	2020-06-19 04:48:45
129.205.113.47	attackbotsspam	2020-05-12T08:21:46.604Z CLOSE host=129.205.113.47 port=62910 fd=4 time=20.013 bytes=15 ...	2020-06-19 04:49:20
45.162.21.212	attack	Jun 18 10:10:25 mail.srvfarm.net postfix/smtps/smtpd[1384169]: warning: unknown[45.162.21.212]: SASL PLAIN authentication failed: Jun 18 10:10:26 mail.srvfarm.net postfix/smtps/smtpd[1384169]: lost connection after AUTH from unknown[45.162.21.212] Jun 18 10:12:40 mail.srvfarm.net postfix/smtps/smtpd[1384169]: warning: unknown[45.162.21.212]: SASL PLAIN authentication failed: Jun 18 10:12:41 mail.srvfarm.net postfix/smtps/smtpd[1384169]: lost connection after AUTH from unknown[45.162.21.212] Jun 18 10:15:57 mail.srvfarm.net postfix/smtps/smtpd[1384169]: warning: unknown[45.162.21.212]: SASL PLAIN authentication failed:	2020-06-19 04:39:49
222.186.30.76	attack	Jun 19 03:51:54 itv-usvr-02 sshd[20458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Jun 19 03:51:57 itv-usvr-02 sshd[20458]: Failed password for root from 222.186.30.76 port 38110 ssh2	2020-06-19 04:54:03
61.64.177.20	attack	Port probing on unauthorized port 23	2020-06-19 04:53:31
217.112.142.226	attackbots	Jun 18 10:18:31 web01.agentur-b-2.de postfix/smtpd[1112049]: NOQUEUE: reject: RCPT from unknown[217.112.142.226]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 18 10:18:59 web01.agentur-b-2.de postfix/smtpd[1112045]: NOQUEUE: reject: RCPT from unknown[217.112.142.226]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 18 10:23:08 web01.agentur-b-2.de postfix/smtpd[1104395]: NOQUEUE: reject: RCPT from dog.yxbown.com[217.112.142.226]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 18 10:23:18 web01.agentur-b-2.de postfix/smtpd[1104395]: NOQUEUE: reject: RCPT from unknown[217.112.142.226]: 450 4.7.1 : Helo comma	2020-06-19 04:28:32
192.64.118.89	attackbotsspam	May 3 02:56:14 mercury wordpress(lukegirvin.co.uk)[14806]: XML-RPC authentication failure for luke from 192.64.118.89 ...	2020-06-19 04:42:25
5.182.247.132	attackspam	Unauthorized connection attempt from IP address 5.182.247.132 on Port 445(SMB)	2020-06-19 04:55:00
191.53.199.10	attackbots	Jun 18 10:28:57 mail.srvfarm.net postfix/smtpd[1388261]: warning: unknown[191.53.199.10]: SASL PLAIN authentication failed: Jun 18 10:28:58 mail.srvfarm.net postfix/smtpd[1388261]: lost connection after AUTH from unknown[191.53.199.10] Jun 18 10:29:57 mail.srvfarm.net postfix/smtps/smtpd[1383077]: warning: unknown[191.53.199.10]: SASL PLAIN authentication failed: Jun 18 10:29:58 mail.srvfarm.net postfix/smtps/smtpd[1383077]: lost connection after AUTH from unknown[191.53.199.10] Jun 18 10:37:51 mail.srvfarm.net postfix/smtpd[1388357]: warning: unknown[191.53.199.10]: SASL PLAIN authentication failed:	2020-06-19 04:29:27
46.152.46.99	attack	[Fri May 15 08:09:49.769775 2020] [access_compat:error] [pid 19852] [client 46.152.46.99:65407] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php ...	2020-06-19 04:46:52
218.92.0.138	attack	Jun 18 20:46:24 localhost sshd[119778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Jun 18 20:46:26 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:30 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:24 localhost sshd[119778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Jun 18 20:46:26 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:30 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:24 localhost sshd[119778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Jun 18 20:46:26 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:30 localhost sshd[119778]: Failed pa ...	2020-06-19 04:55:20

Recently Reported IPs

104.18.5.53	104.18.5.68	104.18.6.13	104.18.6.159
104.18.6.164	104.18.66.60	104.18.67.60	104.18.69.235
104.18.7.13	111.190.150.154	104.18.7.159	104.18.7.164
180.49.45.156	102.127.167.250	104.18.70.235	104.18.74.78
104.18.75.117	104.18.8.11	104.18.8.188	219.120.255.105