Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: CloudFlare Inc.

Hostname: unknown

Organization: unknown

Usage Type: Content Delivery Network

Comments:
Type Details Datetime
attackspam
"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz
2020-05-24 21:44:55
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.72.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64184
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.18.72.149.			IN	A

;; AUTHORITY SECTION:
.			559	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052400 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 24 21:44:52 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 149.72.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.72.18.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
123.195.99.9 attackspambots
2020-09-16T22:39:07.1312401495-001 sshd[41912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123-195-99-9.dynamic.kbronet.com.tw  user=root
2020-09-16T22:39:09.6974601495-001 sshd[41912]: Failed password for root from 123.195.99.9 port 60510 ssh2
2020-09-16T22:43:35.0858411495-001 sshd[42190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123-195-99-9.dynamic.kbronet.com.tw  user=root
2020-09-16T22:43:37.1102201495-001 sshd[42190]: Failed password for root from 123.195.99.9 port 44020 ssh2
2020-09-16T22:48:02.0562871495-001 sshd[42392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123-195-99-9.dynamic.kbronet.com.tw  user=root
2020-09-16T22:48:04.4017671495-001 sshd[42392]: Failed password for root from 123.195.99.9 port 55750 ssh2
...
2020-09-17 15:06:31
185.193.90.98 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 5659 proto: tcp cat: Misc Attackbytes: 60
2020-09-17 15:05:04
89.165.2.239 attackspam
SSH login attempts.
2020-09-17 14:38:31
116.75.192.249 attack
Auto Detect Rule!
proto TCP (SYN), 116.75.192.249:5470->gjan.info:23, len 40
2020-09-17 14:51:27
61.177.172.142 attackspam
Sep 17 10:03:00 ift sshd\[22152\]: Failed password for root from 61.177.172.142 port 32674 ssh2Sep 17 10:03:03 ift sshd\[22152\]: Failed password for root from 61.177.172.142 port 32674 ssh2Sep 17 10:03:06 ift sshd\[22152\]: Failed password for root from 61.177.172.142 port 32674 ssh2Sep 17 10:03:28 ift sshd\[22211\]: Failed password for root from 61.177.172.142 port 4045 ssh2Sep 17 10:03:32 ift sshd\[22211\]: Failed password for root from 61.177.172.142 port 4045 ssh2
...
2020-09-17 15:03:41
144.217.243.216 attackbots
144.217.243.216 (CA/Canada/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 17 00:04:08 server5 sshd[20292]: Failed password for root from 144.217.243.216 port 33708 ssh2
Sep 17 00:06:12 server5 sshd[21566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.240  user=root
Sep 17 00:06:14 server5 sshd[21566]: Failed password for root from 167.99.75.240 port 56970 ssh2
Sep 17 00:06:50 server5 sshd[21997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.207  user=root
Sep 17 00:05:35 server5 sshd[21387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.189.39  user=root
Sep 17 00:05:36 server5 sshd[21387]: Failed password for root from 211.159.189.39 port 38032 ssh2

IP Addresses Blocked:
2020-09-17 14:43:18
142.93.197.186 attackspam
php WP PHPmyadamin ABUSE blocked for 12h
2020-09-17 15:14:26
78.128.113.120 attackspam
Sep 17 09:12:36 cho postfix/smtpd[3102953]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 17 09:12:55 cho postfix/smtpd[3102789]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 17 09:14:37 cho postfix/smtpd[3102252]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 17 09:14:57 cho postfix/smtpd[3102252]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 17 09:15:22 cho postfix/smtpd[3102953]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-17 15:18:05
170.130.187.50 attackspambots
161/udp 23/tcp 5060/tcp...
[2020-07-16/09-16]28pkt,8pt.(tcp),2pt.(udp)
2020-09-17 15:09:57
113.252.218.83 attackbots
Honeypot attack, port: 5555, PTR: 83-218-252-113-on-nets.com.
2020-09-17 14:59:23
89.125.106.47 attack
1600275627 - 09/16/2020 19:00:27 Host: 89.125.106.47/89.125.106.47 Port: 445 TCP Blocked
...
2020-09-17 14:53:44
59.126.232.96 attackbotsspam
Port probing on unauthorized port 81
2020-09-17 15:01:29
88.84.57.3 attackspam
Automatic report - Banned IP Access
2020-09-17 14:54:11
217.170.198.19 attack
GET /wp-login.php HTTP/1.1
2020-09-17 15:09:09
112.85.42.173 attackbots
Sep 17 08:36:04 server sshd[32920]: Failed none for root from 112.85.42.173 port 42613 ssh2
Sep 17 08:36:06 server sshd[32920]: Failed password for root from 112.85.42.173 port 42613 ssh2
Sep 17 08:36:10 server sshd[32920]: Failed password for root from 112.85.42.173 port 42613 ssh2
2020-09-17 14:44:57

Recently Reported IPs

99.82.180.240 202.51.88.176 181.135.144.136 103.58.65.248
114.119.163.192 227.7.201.121 49.233.201.17 177.190.88.108
159.203.35.141 77.132.83.160 37.226.73.234 45.54.95.111
106.54.208.21 200.214.95.184 61.126.113.111 119.108.163.70
10.12.90.70 175.245.74.71 40.90.38.232 50.68.95.254