City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.18.7.4 | attackspam | [DoS Attack: SYN/ACK Scan] from source: 104.18.7.4, port 443, Friday, July 31, 2020 22:27:58 |
2020-08-01 06:05:57 |
| 104.18.70.149 | attack | "MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz |
2020-05-24 22:42:26 |
| 104.18.71.149 | attack | "MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz |
2020-05-24 22:11:41 |
| 104.18.72.149 | attackspam | "MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz |
2020-05-24 21:44:55 |
| 104.18.70.28 | spam | AGAIN and AGAIN and ALWAYS the same REGISTRAR as 1api.net TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual... Dossier transmis aux autorités Européennes et Françaises pour CONDAMNATION à 750 € par POURRIEL émis les SOUS MERDES, OK ? From: Joka |
2020-03-19 05:04:23 |
| 104.18.70.106 | attack | siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:48 +0100\] "GET /robots.txt HTTP/1.1" 200 4578 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)" siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:49 +0100\] "GET /galerie/villa-bunterkund.html HTTP/1.1" 200 10713 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)" siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:55 +0100\] "GET / HTTP/1.1" 200 9534 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)" ... |
2019-10-27 17:27:20 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.7.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60085
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.18.7.68. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021602 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 05:54:32 CST 2022
;; MSG SIZE rcvd: 104
Host 68.7.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 68.7.18.104.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 40.92.9.71 | attackspam | Dec 18 17:30:25 debian-2gb-vpn-nbg1-1 kernel: [1057789.286786] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.9.71 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=31389 DF PROTO=TCP SPT=28422 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2019-12-19 06:13:48 |
| 109.96.68.125 | attackbotsspam | Unauthorized connection attempt from IP address 109.96.68.125 on Port 445(SMB) |
2019-12-19 06:11:02 |
| 2.139.215.255 | attack | Invalid user support from 2.139.215.255 port 34631 |
2019-12-19 06:02:42 |
| 165.225.73.43 | attack | Unauthorized connection attempt from IP address 165.225.73.43 on Port 445(SMB) |
2019-12-19 06:06:52 |
| 190.36.241.64 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 14:30:17. |
2019-12-19 06:17:19 |
| 49.88.112.63 | attackbots | detected by Fail2Ban |
2019-12-19 06:09:18 |
| 36.239.122.219 | attackspam | Unauthorized connection attempt from IP address 36.239.122.219 on Port 445(SMB) |
2019-12-19 06:10:06 |
| 77.37.249.194 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 14:30:18. |
2019-12-19 06:16:35 |
| 37.49.227.202 | attackbotsspam | 27036/udp 7001/udp 41794/udp... [2019-10-19/12-18]309pkt,2pt.(tcp),27pt.(udp) |
2019-12-19 06:07:15 |
| 218.92.0.168 | attack | Dec 18 21:39:17 hcbbdb sshd\[18564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Dec 18 21:39:19 hcbbdb sshd\[18564\]: Failed password for root from 218.92.0.168 port 19252 ssh2 Dec 18 21:39:37 hcbbdb sshd\[18580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Dec 18 21:39:39 hcbbdb sshd\[18580\]: Failed password for root from 218.92.0.168 port 47233 ssh2 Dec 18 21:39:52 hcbbdb sshd\[18580\]: Failed password for root from 218.92.0.168 port 47233 ssh2 |
2019-12-19 05:47:02 |
| 40.92.42.36 | attack | Dec 18 17:30:45 debian-2gb-vpn-nbg1-1 kernel: [1057809.443441] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.42.36 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=12771 DF PROTO=TCP SPT=60128 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-19 05:53:49 |
| 112.64.34.165 | attackspam | Invalid user emo226 from 112.64.34.165 port 51315 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165 Failed password for invalid user emo226 from 112.64.34.165 port 51315 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165 user=root Failed password for root from 112.64.34.165 port 42733 ssh2 |
2019-12-19 05:57:12 |
| 158.58.130.151 | attackbotsspam | firewall-block, port(s): 1433/tcp |
2019-12-19 06:19:56 |
| 192.241.99.226 | attackbotsspam | firewall-block, port(s): 2224/tcp |
2019-12-19 06:12:08 |
| 37.195.50.41 | attack | Dec 18 06:32:45 kapalua sshd\[2014\]: Invalid user kursa from 37.195.50.41 Dec 18 06:32:45 kapalua sshd\[2014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=l37-195-50-41.novotelecom.ru Dec 18 06:32:46 kapalua sshd\[2014\]: Failed password for invalid user kursa from 37.195.50.41 port 52896 ssh2 Dec 18 06:40:53 kapalua sshd\[3043\]: Invalid user benwitt from 37.195.50.41 Dec 18 06:40:53 kapalua sshd\[3043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=l37-195-50-41.novotelecom.ru |
2019-12-19 06:09:43 |