104.18.7.19 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.18.7.4	attackspam	[DoS Attack: SYN/ACK Scan] from source: 104.18.7.4, port 443, Friday, July 31, 2020 22:27:58	2020-08-01 06:05:57
104.18.70.149	attack	"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz	2020-05-24 22:42:26
104.18.71.149	attack	"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz	2020-05-24 22:11:41
104.18.72.149	attackspam	"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz	2020-05-24 21:44:55
104.18.70.28	spam	AGAIN and AGAIN and ALWAYS the same REGISTRAR as 1api.net TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual... Dossier transmis aux autorités Européennes et Françaises pour CONDAMNATION à 750 € par POURRIEL émis les SOUS MERDES, OK ? From: Joka Date: Wed, 18 Mar 2020 16:46:18 +0000 Subject: LE CASINO JOKA. =?utf-8?b?T8OZ?= LES FORTUNES SE PROFILENT Message-Id: <4WMA.BA1D.F33KVOH670.20200318164618859@bestoffer-today.com> live@bestoffer-today.com which send to « https://bestoffer-today.com/4WMA-BA1D-F33KVOH670/uauto.aspx » to BURN / CLOSE / DELETTE / STOP IMMEDIATELY for SPAM, PHISHING and SCAM on STOLLEN List ! ! ! bestoffer-today.com => 1api.net bestoffer-today.com => 104.16.209.86 104.16.209.86 => cloudflare.com AS USUAL... 1api.net => 84.200.110.124 84.200.110.124 => accelerated.de live@bestoffer-today.com => 94.143.106.199 94.143.106.199 => dotmailer.com dotmailer.com => 104.18.70.28 104.18.70.28 => cloudflare.com AS USUAL... dotmailer.com send to dotdigital.com dotdigital.com => 104.19.144.113 104.19.144.113 => cloudflare.com https://www.mywot.com/scorecard/dotmailer.com https://www.mywot.com/scorecard/dotdigital.com https://www.mywot.com/scorecard/bestoffer-today.com https://www.mywot.com/scorecard/1api.net AS USUAL... https://en.asytech.cn/check-ip/104.16.209.86 https://en.asytech.cn/check-ip/84.200.110.124 https://en.asytech.cn/check-ip/94.143.106.199 https://en.asytech.cn/check-ip/104.18.70.28 https://en.asytech.cn/check-ip/104.19.144.113	2020-03-19 05:04:23
104.18.70.106	attack	siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:48 +0100\] "GET /robots.txt HTTP/1.1" 200 4578 "-" "Mozilla/5.0 $compatible\; Googlebot/2.1\; +http://www.google.com/bot.html$" siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:49 +0100\] "GET /galerie/villa-bunterkund.html HTTP/1.1" 200 10713 "-" "Mozilla/5.0 $compatible\; Googlebot/2.1\; +http://www.google.com/bot.html$" siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:55 +0100\] "GET / HTTP/1.1" 200 9534 "-" "Mozilla/5.0 $compatible\; Googlebot/2.1\; +http://www.google.com/bot.html$" ...	2019-10-27 17:27:20

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.7.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27307
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.7.19.			IN	A

;; AUTHORITY SECTION:
.			221	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:55:05 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 19.7.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.7.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
111.198.152.82	attack	Dec 16 22:41:21 cumulus sshd[14961]: Invalid user godor from 111.198.152.82 port 49958 Dec 16 22:41:21 cumulus sshd[14961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.198.152.82 Dec 16 22:41:23 cumulus sshd[14961]: Failed password for invalid user godor from 111.198.152.82 port 49958 ssh2 Dec 16 22:41:23 cumulus sshd[14961]: Received disconnect from 111.198.152.82 port 49958:11: Bye Bye [preauth] Dec 16 22:41:23 cumulus sshd[14961]: Disconnected from 111.198.152.82 port 49958 [preauth] Dec 16 22:55:02 cumulus sshd[15791]: Invalid user apache from 111.198.152.82 port 44012 Dec 16 22:55:02 cumulus sshd[15791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.198.152.82 Dec 16 22:55:04 cumulus sshd[15791]: Failed password for invalid user apache from 111.198.152.82 port 44012 ssh2 Dec 16 22:55:04 cumulus sshd[15791]: Received disconnect from 111.198.152.82 port 44012:11: Bye Bye [pr........ -------------------------------	2019-12-18 06:58:24
222.186.175.169	attackbots	Dec 17 22:46:32 sshgateway sshd\[10067\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Dec 17 22:46:35 sshgateway sshd\[10067\]: Failed password for root from 222.186.175.169 port 18490 ssh2 Dec 17 22:46:48 sshgateway sshd\[10067\]: error: maximum authentication attempts exceeded for root from 222.186.175.169 port 18490 ssh2 \[preauth\]	2019-12-18 06:51:03
122.51.68.196	attackspambots	Dec 17 23:55:41 vpn01 sshd[24708]: Failed password for root from 122.51.68.196 port 60096 ssh2 ...	2019-12-18 07:02:29
122.51.49.91	attack	Invalid user test from 122.51.49.91 port 39920	2019-12-18 06:49:16
163.172.152.52	attack	villaromeo.de 163.172.152.52 [17/Dec/2019:23:26:49 +0100] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" villaromeo.de 163.172.152.52 [17/Dec/2019:23:26:53 +0100] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2019-12-18 06:47:18
182.73.123.118	attackbots	Dec 17 23:37:31 localhost sshd\[9318\]: Invalid user liew from 182.73.123.118 port 35814 Dec 17 23:37:31 localhost sshd\[9318\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.73.123.118 Dec 17 23:37:33 localhost sshd\[9318\]: Failed password for invalid user liew from 182.73.123.118 port 35814 ssh2	2019-12-18 06:58:46
185.53.88.3	attackspambots	\[2019-12-17 17:27:03\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-17T17:27:03.183-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442037694876",SessionID="0x7f0fb467eb08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.3/59625",ACLName="no_extension_match" \[2019-12-17 17:27:03\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-17T17:27:03.190-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441613940821",SessionID="0x7f0fb4d8f1e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.3/59610",ACLName="no_extension_match" \[2019-12-17 17:27:05\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-17T17:27:05.199-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470639",SessionID="0x7f0fb4121288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.3/52329",ACLName="no_extensi	2019-12-18 06:36:42
122.51.204.222	attack	Dec 16 13:30:56 h2022099 sshd[11162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.204.222 user=mysql Dec 16 13:30:58 h2022099 sshd[11162]: Failed password for mysql from 122.51.204.222 port 44764 ssh2 Dec 16 13:30:58 h2022099 sshd[11162]: Received disconnect from 122.51.204.222: 11: Bye Bye [preauth] Dec 16 13:47:04 h2022099 sshd[14390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.204.222 user=games Dec 16 13:47:07 h2022099 sshd[14390]: Failed password for games from 122.51.204.222 port 45252 ssh2 Dec 16 13:47:07 h2022099 sshd[14390]: Received disconnect from 122.51.204.222: 11: Bye Bye [preauth] Dec 16 13:54:31 h2022099 sshd[17282]: Invalid user test from 122.51.204.222 Dec 16 13:54:31 h2022099 sshd[17282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.204.222 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?i	2019-12-18 06:45:41
187.39.111.80	attackspam	Dec 17 12:58:30 php1 sshd\[372\]: Invalid user rands from 187.39.111.80 Dec 17 12:58:30 php1 sshd\[372\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.39.111.80 Dec 17 12:58:32 php1 sshd\[372\]: Failed password for invalid user rands from 187.39.111.80 port 53274 ssh2 Dec 17 13:05:03 php1 sshd\[1100\]: Invalid user pantelis from 187.39.111.80 Dec 17 13:05:03 php1 sshd\[1100\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.39.111.80	2019-12-18 07:15:34
134.175.100.149	attackspam	Dec 17 23:41:07 ns37 sshd[21833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.100.149 Dec 17 23:41:07 ns37 sshd[21833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.100.149	2019-12-18 06:51:46
80.211.137.127	attackbots	$f2bV_matches	2019-12-18 07:07:22
198.108.67.89	attackbots	Dec 17 23:26:31 debian-2gb-nbg1-2 kernel: \[274367.977578\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.89 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=60202 PROTO=TCP SPT=30857 DPT=8045 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-18 07:06:33
49.232.16.241	attackspambots	Dec 17 23:37:59 localhost sshd\[4342\]: Invalid user squid from 49.232.16.241 Dec 17 23:37:59 localhost sshd\[4342\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.16.241 Dec 17 23:38:00 localhost sshd\[4342\]: Failed password for invalid user squid from 49.232.16.241 port 46566 ssh2 Dec 17 23:43:36 localhost sshd\[4591\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.16.241 user=root Dec 17 23:43:39 localhost sshd\[4591\]: Failed password for root from 49.232.16.241 port 41516 ssh2 ...	2019-12-18 06:50:28
98.4.160.39	attackspambots	SSH brutforce	2019-12-18 07:15:02
198.23.189.18	attack	Dec 17 18:00:25 plusreed sshd[21190]: Invalid user koda from 198.23.189.18 ...	2019-12-18 07:08:21

Recently Reported IPs

210.92.59.208	104.18.7.194	104.18.7.223	104.18.7.195
104.21.65.7	104.18.7.221	104.18.7.227	104.18.7.20
104.18.7.205	104.18.7.207	104.18.7.206	104.18.7.22
104.18.7.239	104.18.7.234	104.18.7.242	104.18.7.197
104.21.65.70	104.18.7.26	104.18.7.39	104.18.7.51