104.18.5.92 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.50.120	attack	*** Phishing website that camouflaged Amazon.com. (redirect from) https://subscriber.jglboots.com/ domain: subscriber.jglboots.com IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278 IP v4 address: 104.18.50.120 / 104.18.51.120 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com (redirect to) https://counts-pontis-name-flare-and-safty.telemagico.com/ domain: counts-pontis-name-flare-and-safty.telemagico.com IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1 IP v4 address: 104.24.99.241 / 104.24.98.241 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com	2020-05-04 03:15:46
104.18.54.70	spam	Used undred times per day for SPAM, PHISHING, SCAM and SEXE on STOLLEN list we don't know where without our agreement, as usual with LIERS and ROBERS ! Especially by namecheap.com with creatensend.com ? https://www.mywot.com/scorecard/creatensend.com https://www.mywot.com/scorecard/namecheap.com Or uniregistry.com with casinovips.com ? https://www.mywot.com/scorecard/casinovips.com https://www.mywot.com/scorecard/uniregistry.com And the same few hours before... By GoDaddy.com, une autre SOUS MERDE adepte d'ESCROCS commebonusmasters.com... https://www.mywot.com/scorecard/bonusmasters.com https://www.mywot.com/scorecard/godaddy.com	2020-02-20 05:28:25
104.18.53.191	attack	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 20:34:01
104.18.52.191	attackspambots	*** Phishing website that camouflaged Google. https://google-chrome.doysstv.com/?index	2020-01-04 18:36:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.5.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8040
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.5.92.			IN	A

;; AUTHORITY SECTION:
.			393	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:54:34 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 92.5.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 92.5.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
5.62.41.134	attackbotsspam	\[2019-08-06 01:49:02\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:1000' - Wrong password \[2019-08-06 01:49:02\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-06T01:49:02.199-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="69890",SessionID="0x7ff4d058ea08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/56511",Challenge="2786beb7",ReceivedChallenge="2786beb7",ReceivedHash="fa5459d7049a1f2aff7ebcc46ed44b2a" \[2019-08-06 01:49:44\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:1148' - Wrong password \[2019-08-06 01:49:44\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-06T01:49:44.687-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="25426",SessionID="0x7ff4d058ea08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/5	2019-08-06 14:03:22
36.90.183.237	attack	Unauthorized connection attempt from IP address 36.90.183.237 on Port 445(SMB)	2019-08-06 13:44:59
36.82.143.31	attack	Unauthorized connection attempt from IP address 36.82.143.31 on Port 445(SMB)	2019-08-06 13:17:27
49.83.32.165	attackbotsspam	Automatic report - Port Scan Attack	2019-08-06 13:16:50
138.68.148.177	attackbotsspam	Aug 6 01:07:37 vps200512 sshd\[10092\]: Invalid user sysadmin from 138.68.148.177 Aug 6 01:07:38 vps200512 sshd\[10092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 Aug 6 01:07:39 vps200512 sshd\[10092\]: Failed password for invalid user sysadmin from 138.68.148.177 port 38826 ssh2 Aug 6 01:17:18 vps200512 sshd\[10265\]: Invalid user mweb from 138.68.148.177 Aug 6 01:17:18 vps200512 sshd\[10265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177	2019-08-06 13:22:51
128.199.158.139	attackspambots	Aug 6 07:08:28 SilenceServices sshd[21691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.158.139 Aug 6 07:08:29 SilenceServices sshd[21691]: Failed password for invalid user unknown from 128.199.158.139 port 57716 ssh2 Aug 6 07:13:17 SilenceServices sshd[25080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.158.139	2019-08-06 13:28:21
162.144.119.35	attackbotsspam	Aug 6 04:37:17 ubuntu-2gb-nbg1-dc3-1 sshd[7136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.144.119.35 Aug 6 04:37:19 ubuntu-2gb-nbg1-dc3-1 sshd[7136]: Failed password for invalid user djtony from 162.144.119.35 port 50130 ssh2 ...	2019-08-06 13:16:19
117.4.0.245	attackbotsspam	Unauthorized connection attempt from IP address 117.4.0.245 on Port 445(SMB)	2019-08-06 13:50:56
101.89.90.49	attackbotsspam	Unauthorized connection attempt from IP address 101.89.90.49 on Port 445(SMB)	2019-08-06 13:49:11
51.83.78.56	attack	SSH Brute Force, server-1 sshd[14307]: Failed password for invalid user soporte from 51.83.78.56 port 60644 ssh2	2019-08-06 13:12:48
142.93.96.59	attackbotsspam	SSH Brute Force, server-1 sshd[9297]: Failed password for invalid user cooperation from 142.93.96.59 port 49086 ssh2	2019-08-06 13:07:46
178.128.251.106	attackspambots	Automatic report - Banned IP Access	2019-08-06 13:15:58
113.23.217.2	attackbotsspam	Unauthorized connection attempt from IP address 113.23.217.2 on Port 445(SMB)	2019-08-06 13:27:24
103.99.113.62	attackbots	SSH Brute-Force attacks	2019-08-06 13:52:16
218.69.91.84	attackbotsspam	Aug 6 01:38:22 xtremcommunity sshd\[19669\]: Invalid user opc from 218.69.91.84 port 55953 Aug 6 01:38:22 xtremcommunity sshd\[19669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.69.91.84 Aug 6 01:38:24 xtremcommunity sshd\[19669\]: Failed password for invalid user opc from 218.69.91.84 port 55953 ssh2 Aug 6 01:44:10 xtremcommunity sshd\[19895\]: Invalid user com from 218.69.91.84 port 52947 Aug 6 01:44:10 xtremcommunity sshd\[19895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.69.91.84 ...	2019-08-06 13:58:29

Recently Reported IPs

104.18.6.112	104.18.6.106	104.18.6.119	104.18.6.116
104.21.65.58	104.18.6.12	104.18.6.150	6.189.167.230
104.18.6.167	104.18.6.170	104.18.6.156	104.18.6.19
104.18.6.184	104.18.6.179	104.18.6.194	104.18.6.195
104.18.6.205	104.18.6.197	104.18.6.20	104.21.65.60