Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.18.50.120 attack
*** Phishing website that camouflaged Amazon.com.
(redirect from)
https://subscriber.jglboots.com/
domain: subscriber.jglboots.com
IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278
IP v4 address: 104.18.50.120 / 104.18.51.120
location: USA
hosting: Cloudflare, Inc
web: https://www.cloudflare.com/abuse
abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com
(redirect to)
https://counts-pontis-name-flare-and-safty.telemagico.com/
domain: counts-pontis-name-flare-and-safty.telemagico.com
IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1
IP v4 address: 104.24.99.241 / 104.24.98.241
location: USA
hosting: Cloudflare, Inc
web: https://www.cloudflare.com/abuse
abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com
2020-05-04 03:15:46
104.18.54.70 spam
Used undred times per day for SPAM, PHISHING, SCAM and SEXE on STOLLEN list we don't know where without our agreement, as usual with LIERS and ROBERS !
Especially by namecheap.com with creatensend.com ?
https://www.mywot.com/scorecard/creatensend.com
https://www.mywot.com/scorecard/namecheap.com
Or uniregistry.com with casinovips.com ?
https://www.mywot.com/scorecard/casinovips.com
https://www.mywot.com/scorecard/uniregistry.com
And the same few hours before...
By GoDaddy.com, une autre SOUS MERDE adepte d'ESCROCS commebonusmasters.com...
https://www.mywot.com/scorecard/bonusmasters.com
https://www.mywot.com/scorecard/godaddy.com
2020-02-20 05:28:25
104.18.53.191 attack
*** Phishing website that camouflaged Google.
https://google-chrome.doysstv.com/?index
2020-01-04 20:34:01
104.18.52.191 attackspambots
*** Phishing website that camouflaged Google.
https://google-chrome.doysstv.com/?index
2020-01-04 18:36:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.5.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17725
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.5.89.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 15:22:48 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 89.5.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 89.5.18.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.81.80.82 attackspam
ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 447
2020-08-11 07:20:14
80.82.77.212 attackspam
firewall-block, port(s): 1900/udp, 3283/udp, 3702/udp
2020-08-11 07:29:12
92.63.196.23 attackbots
firewall-block, port(s): 51059/tcp, 51118/tcp
2020-08-11 07:13:18
58.228.159.253 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 44 - port: 3389 proto: tcp cat: Misc Attackbytes: 60
2020-08-11 07:32:08
80.82.77.245 attackbotsspam
Fail2Ban Ban Triggered
2020-08-11 07:28:40
85.209.0.251 attackspam
Aug 11 02:06:28 server2 sshd\[13395\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers
Aug 11 02:06:28 server2 sshd\[13399\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers
Aug 11 02:06:29 server2 sshd\[13402\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers
Aug 11 02:06:29 server2 sshd\[13401\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers
Aug 11 02:06:29 server2 sshd\[13406\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers
Aug 11 02:06:29 server2 sshd\[13405\]: User root from 85.209.0.251 not allowed because not listed in AllowUsers
2020-08-11 07:27:38
45.129.33.142 attack
ET DROP Dshield Block Listed Source group 1 - port: 64837 proto: tcp cat: Misc Attackbytes: 60
2020-08-11 07:20:29
194.26.29.148 attack
SmallBizIT.US 8 packets to tcp(37053,37165,37358,37566,37758,37764,37803,37928)
2020-08-11 07:21:56
218.92.0.145 attackbots
[MK-VM2] SSH login failed
2020-08-11 07:05:16
119.29.134.163 attackbotsspam
2020-08-11T00:33[Censored Hostname] sshd[19334]: Invalid user welcome@1234 from 119.29.134.163 port 45394
2020-08-11T00:33[Censored Hostname] sshd[19334]: Failed password for invalid user welcome@1234 from 119.29.134.163 port 45394 ssh2
2020-08-11T00:35[Censored Hostname] sshd[20625]: Invalid user @dm!n0123 from 119.29.134.163 port 35174[...]
2020-08-11 07:00:55
80.82.78.85 attack
Unauthorized connection attempt detected from IP address 80.82.78.85 to port 4567 [T]
2020-08-11 07:27:56
67.205.128.74 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 67 - port: 2322 proto: tcp cat: Misc Attackbytes: 60
2020-08-11 07:17:01
112.85.42.229 attack
Aug 10 22:43:58 plex-server sshd[2851022]: Failed password for root from 112.85.42.229 port 41947 ssh2
Aug 10 22:45:16 plex-server sshd[2851556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229  user=root
Aug 10 22:45:19 plex-server sshd[2851556]: Failed password for root from 112.85.42.229 port 53908 ssh2
Aug 10 22:46:31 plex-server sshd[2852081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229  user=root
Aug 10 22:46:33 plex-server sshd[2852081]: Failed password for root from 112.85.42.229 port 61330 ssh2
...
2020-08-11 07:03:39
68.168.211.249 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 68 - port: 3392 proto: tcp cat: Misc Attackbytes: 60
2020-08-11 07:30:56
84.38.187.134 attack
Unauthorized connection attempt detected from IP address 84.38.187.134 to port 3391 [T]
2020-08-11 07:15:02

Recently Reported IPs

104.18.5.72 56.245.237.141 104.18.5.96 104.18.5.99
104.18.6.103 104.18.6.105 104.18.6.108 104.18.6.110
104.18.6.118 104.18.6.129 104.18.6.143 104.18.6.144
104.18.6.146 104.18.6.160 104.18.6.174 134.209.96.157
104.18.6.175 104.18.6.188 104.18.6.191 96.74.244.62