Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.18.7.4 attackspam
[DoS Attack: SYN/ACK Scan] from source: 104.18.7.4, port 443, Friday, July 31, 2020 22:27:58
2020-08-01 06:05:57
104.18.70.149 attack
"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz
2020-05-24 22:42:26
104.18.71.149 attack
"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz
2020-05-24 22:11:41
104.18.72.149 attackspam
"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz
2020-05-24 21:44:55
104.18.70.28 spam
AGAIN and AGAIN and ALWAYS the same REGISTRAR as 1api.net TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual...
Dossier transmis aux autorités Européennes et Françaises pour CONDAMNATION à 750 € par POURRIEL émis les SOUS MERDES, OK ?

From: Joka 
Date: Wed, 18 Mar 2020 16:46:18 +0000
Subject: LE CASINO JOKA. =?utf-8?b?T8OZ?= LES FORTUNES SE PROFILENT
Message-Id: <4WMA.BA1D.F33KVOH670.20200318164618859@bestoffer-today.com>

live@bestoffer-today.com which send to « https://bestoffer-today.com/4WMA-BA1D-F33KVOH670/uauto.aspx » to BURN / CLOSE / DELETTE / STOP IMMEDIATELY for SPAM, PHISHING and SCAM on STOLLEN List ! ! !

bestoffer-today.com => 1api.net

bestoffer-today.com => 104.16.209.86

104.16.209.86 => cloudflare.com AS USUAL...

1api.net => 84.200.110.124

84.200.110.124 => accelerated.de

live@bestoffer-today.com => 94.143.106.199

94.143.106.199 => dotmailer.com

dotmailer.com => 104.18.70.28

104.18.70.28 => cloudflare.com AS USUAL...

dotmailer.com send to dotdigital.com

dotdigital.com => 104.19.144.113

104.19.144.113 => cloudflare.com

https://www.mywot.com/scorecard/dotmailer.com

https://www.mywot.com/scorecard/dotdigital.com

https://www.mywot.com/scorecard/bestoffer-today.com

https://www.mywot.com/scorecard/1api.net AS USUAL...

https://en.asytech.cn/check-ip/104.16.209.86

https://en.asytech.cn/check-ip/84.200.110.124

https://en.asytech.cn/check-ip/94.143.106.199

https://en.asytech.cn/check-ip/104.18.70.28

https://en.asytech.cn/check-ip/104.19.144.113
2020-03-19 05:04:23
104.18.70.106 attack
siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:48 +0100\] "GET /robots.txt HTTP/1.1" 200 4578 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:49 +0100\] "GET /galerie/villa-bunterkund.html HTTP/1.1" 200 10713 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:55 +0100\] "GET / HTTP/1.1" 200 9534 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
...
2019-10-27 17:27:20
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.7.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26155
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.7.20.			IN	A

;; AUTHORITY SECTION:
.			220	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:55:06 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 20.7.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.7.18.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
49.235.202.65 attack
2020-03-04T20:35:08.639146shield sshd\[29892\]: Invalid user test from 49.235.202.65 port 45556
2020-03-04T20:35:08.644130shield sshd\[29892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.202.65
2020-03-04T20:35:10.914662shield sshd\[29892\]: Failed password for invalid user test from 49.235.202.65 port 45556 ssh2
2020-03-04T20:43:05.580500shield sshd\[30558\]: Invalid user kuaisuweb from 49.235.202.65 port 54476
2020-03-04T20:43:05.586331shield sshd\[30558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.202.65
2020-03-05 05:00:40
62.128.217.111 attackspam
(From media.1@monemail.com) Hi,

Just a quick moment to let you know we are having a one day sale.

Would you like people interested in coming to your website from major online publications in your niche?
We are the only company that we know of that does this.

Today get 6,000 interested visitors to your site in 7 days for $54.99.
(not segmented by city or state)
Larger packages are available.

For more info or to get started please visit us at https://traffic-stampede.com

We hope to see you on our site.

Best,
Mindy G.
TS
2020-03-05 05:01:34
85.132.44.123 attack
Unauthorized connection attempt from IP address 85.132.44.123 on Port 445(SMB)
2020-03-05 04:54:20
139.155.21.46 attackspam
3x Failed Password
2020-03-05 05:15:41
201.69.29.62 attackbotsspam
Mar  4 13:10:11 server sshd\[20594\]: Failed password for invalid user robert from 201.69.29.62 port 59078 ssh2
Mar  4 19:16:49 server sshd\[26378\]: Invalid user yyy from 201.69.29.62
Mar  4 19:16:49 server sshd\[26378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-69-29-62.dial-up.telesp.net.br 
Mar  4 19:16:50 server sshd\[26378\]: Failed password for invalid user yyy from 201.69.29.62 port 47738 ssh2
Mar  4 19:24:21 server sshd\[27544\]: Invalid user admin from 201.69.29.62
Mar  4 19:24:21 server sshd\[27544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-69-29-62.dial-up.telesp.net.br 
...
2020-03-05 05:16:41
171.8.68.61 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-05 05:23:32
94.28.217.200 attackbots
Email rejected due to spam filtering
2020-03-05 04:47:05
218.89.241.68 attackbotsspam
Mar  4 21:55:58 nextcloud sshd\[29099\]: Invalid user jboss from 218.89.241.68
Mar  4 21:55:58 nextcloud sshd\[29099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.89.241.68
Mar  4 21:56:01 nextcloud sshd\[29099\]: Failed password for invalid user jboss from 218.89.241.68 port 37553 ssh2
2020-03-05 05:20:15
146.168.2.84 attackspambots
Brute-force attempt banned
2020-03-05 04:52:47
218.90.138.98 attack
$f2bV_matches
2020-03-05 05:19:32
189.170.30.59 attackbotsspam
1583328728 - 03/04/2020 14:32:08 Host: 189.170.30.59/189.170.30.59 Port: 445 TCP Blocked
2020-03-05 04:59:56
218.78.46.81 attackbots
[ssh] SSH attack
2020-03-05 05:24:54
218.82.69.103 attackspambots
$f2bV_matches
2020-03-05 05:20:52
184.105.247.194 attack
5900/tcp 4786/tcp 8080/tcp...
[2020-01-05/03-04]31pkt,15pt.(tcp),1pt.(udp)
2020-03-05 05:10:12
141.226.232.13 attackbots
Forbidden directory scan :: 2020/03/04 13:32:15 [error] 36085#36085: *1115734 access forbidden by rule, client: 141.226.232.13, server: [censored_1], request: "HEAD /https://gmpg.org/xfn/11 HTTP/1.1", host: "www.[censored_1]"
2020-03-05 04:56:01

Recently Reported IPs

104.18.7.227 104.18.7.205 104.18.7.207 104.18.7.206
104.18.7.22 104.18.7.239 104.18.7.234 104.18.7.242
104.18.7.197 104.21.65.70 104.18.7.26 104.18.7.39
104.18.7.51 104.18.7.53 104.18.7.70 104.18.7.66
104.18.7.63 104.21.65.73 104.18.7.61 104.18.7.75