104.18.5.64 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.50.120	attack	*** Phishing website that camouflaged Amazon.com. (redirect from) https://subscriber.jglboots.com/ domain: subscriber.jglboots.com IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278 IP v4 address: 104.18.50.120 / 104.18.51.120 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com (redirect to) https://counts-pontis-name-flare-and-safty.telemagico.com/ domain: counts-pontis-name-flare-and-safty.telemagico.com IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1 IP v4 address: 104.24.99.241 / 104.24.98.241 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com	2020-05-04 03:15:46
104.18.54.70	spam	Used undred times per day for SPAM, PHISHING, SCAM and SEXE on STOLLEN list we don't know where without our agreement, as usual with LIERS and ROBERS ! Especially by namecheap.com with creatensend.com ? https://www.mywot.com/scorecard/creatensend.com https://www.mywot.com/scorecard/namecheap.com Or uniregistry.com with casinovips.com ? https://www.mywot.com/scorecard/casinovips.com https://www.mywot.com/scorecard/uniregistry.com And the same few hours before... By GoDaddy.com, une autre SOUS MERDE adepte d'ESCROCS commebonusmasters.com... https://www.mywot.com/scorecard/bonusmasters.com https://www.mywot.com/scorecard/godaddy.com	2020-02-20 05:28:25
104.18.53.191	attack	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 20:34:01
104.18.52.191	attackspambots	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 18:36:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.5.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23135
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.5.64.			IN	A

;; AUTHORITY SECTION:
.			271	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 18:11:55 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 64.5.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.5.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.77.145.154	attack	Sep 10 07:29:53 server sshd\[10000\]: Invalid user p@ssw0rd from 51.77.145.154 port 49842 Sep 10 07:29:53 server sshd\[10000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.145.154 Sep 10 07:29:55 server sshd\[10000\]: Failed password for invalid user p@ssw0rd from 51.77.145.154 port 49842 ssh2 Sep 10 07:35:40 server sshd\[22861\]: Invalid user tomcat from 51.77.145.154 port 33498 Sep 10 07:35:40 server sshd\[22861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.145.154	2019-09-10 12:37:50
60.191.218.138	attackspam	" "	2019-09-10 13:09:39
192.163.224.116	attack	Sep 9 18:04:36 lcprod sshd\[10835\]: Invalid user redmine from 192.163.224.116 Sep 9 18:04:36 lcprod sshd\[10835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.biocuckoo.org Sep 9 18:04:38 lcprod sshd\[10835\]: Failed password for invalid user redmine from 192.163.224.116 port 37490 ssh2 Sep 9 18:10:37 lcprod sshd\[11428\]: Invalid user ftpuser2 from 192.163.224.116 Sep 9 18:10:37 lcprod sshd\[11428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.biocuckoo.org	2019-09-10 12:28:27
54.37.68.191	attackspambots	Sep 10 04:21:54 MK-Soft-VM4 sshd\[29038\]: Invalid user demo from 54.37.68.191 port 37076 Sep 10 04:21:54 MK-Soft-VM4 sshd\[29038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.68.191 Sep 10 04:21:56 MK-Soft-VM4 sshd\[29038\]: Failed password for invalid user demo from 54.37.68.191 port 37076 ssh2 ...	2019-09-10 12:53:07
80.63.107.91	attack	Sep 10 03:20:48 smtp postfix/smtpd[6126]: NOQUEUE: reject: RCPT from unknown[80.63.107.91]: 554 5.7.1 Service unavailable; Client host [80.63.107.91] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/80.63.107.91; from= to= proto=ESMTP helo= ...	2019-09-10 12:23:45
218.98.40.138	attack	SSH Brute Force, server-1 sshd[3626]: Failed password for root from 218.98.40.138 port 29599 ssh2	2019-09-10 12:21:42
51.255.35.58	attackbotsspam	Sep 10 06:28:15 SilenceServices sshd[14650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.35.58 Sep 10 06:28:17 SilenceServices sshd[14650]: Failed password for invalid user student3 from 51.255.35.58 port 57766 ssh2 Sep 10 06:34:17 SilenceServices sshd[16964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.35.58	2019-09-10 12:41:44
206.189.108.59	attackspambots	Sep 9 18:29:49 wbs sshd\[9791\]: Invalid user teste1 from 206.189.108.59 Sep 9 18:29:49 wbs sshd\[9791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59 Sep 9 18:29:51 wbs sshd\[9791\]: Failed password for invalid user teste1 from 206.189.108.59 port 43374 ssh2 Sep 9 18:35:42 wbs sshd\[10342\]: Invalid user gmod from 206.189.108.59 Sep 9 18:35:42 wbs sshd\[10342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59	2019-09-10 12:40:26
121.202.22.25	attack	Sep 9 22:20:42 ws19vmsma01 sshd[137113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.202.22.25 Sep 9 22:20:44 ws19vmsma01 sshd[137113]: Failed password for invalid user admin from 121.202.22.25 port 55457 ssh2 ...	2019-09-10 12:24:29
213.74.203.106	attackbots	Sep 9 18:09:49 friendsofhawaii sshd\[25708\]: Invalid user 2oo7 from 213.74.203.106 Sep 9 18:09:49 friendsofhawaii sshd\[25708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.74.203.106 Sep 9 18:09:51 friendsofhawaii sshd\[25708\]: Failed password for invalid user 2oo7 from 213.74.203.106 port 42181 ssh2 Sep 9 18:17:13 friendsofhawaii sshd\[26276\]: Invalid user 123456 from 213.74.203.106 Sep 9 18:17:13 friendsofhawaii sshd\[26276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.74.203.106	2019-09-10 12:30:14
45.71.208.253	attackbotsspam	Sep 9 22:53:40 TORMINT sshd\[11895\]: Invalid user teste from 45.71.208.253 Sep 9 22:53:40 TORMINT sshd\[11895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.71.208.253 Sep 9 22:53:42 TORMINT sshd\[11895\]: Failed password for invalid user teste from 45.71.208.253 port 54056 ssh2 ...	2019-09-10 13:10:34
138.68.110.115	attack	Sep 10 02:41:46 localhost sshd\[26589\]: Invalid user azureuser from 138.68.110.115 port 41600 Sep 10 02:41:46 localhost sshd\[26589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.110.115 Sep 10 02:41:48 localhost sshd\[26589\]: Failed password for invalid user azureuser from 138.68.110.115 port 41600 ssh2 Sep 10 02:47:16 localhost sshd\[26836\]: Invalid user 12345 from 138.68.110.115 port 46936 Sep 10 02:47:16 localhost sshd\[26836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.110.115 ...	2019-09-10 12:42:43
198.50.175.247	attackspam	Sep 10 06:55:31 vps01 sshd[26052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.175.247 Sep 10 06:55:34 vps01 sshd[26052]: Failed password for invalid user admin from 198.50.175.247 port 59517 ssh2	2019-09-10 12:59:08
146.115.62.55	attackspam	Sep 10 06:49:11 server sshd\[15909\]: Invalid user teste from 146.115.62.55 port 57692 Sep 10 06:49:11 server sshd\[15909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.115.62.55 Sep 10 06:49:13 server sshd\[15909\]: Failed password for invalid user teste from 146.115.62.55 port 57692 ssh2 Sep 10 06:54:56 server sshd\[8596\]: Invalid user sgeadmin from 146.115.62.55 port 34742 Sep 10 06:54:56 server sshd\[8596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.115.62.55	2019-09-10 13:17:33
51.77.145.97	attackspambots	Sep 10 06:59:44 SilenceServices sshd[26751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.145.97 Sep 10 06:59:46 SilenceServices sshd[26751]: Failed password for invalid user ftptest from 51.77.145.97 port 36428 ssh2 Sep 10 07:04:59 SilenceServices sshd[28798]: Failed password for root from 51.77.145.97 port 39254 ssh2	2019-09-10 13:15:03

Recently Reported IPs

104.18.5.63	104.18.5.88	104.18.5.95	104.18.5.97
104.18.59.63	104.18.6.101	104.18.6.128	104.18.6.137
104.18.6.14	104.18.6.140	104.18.6.148	104.18.6.168
104.18.6.169	104.18.6.172	104.18.6.177	104.18.6.178
104.18.6.18	104.18.6.187	104.18.6.198	104.18.6.199