104.18.85.72 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.85.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8556
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.85.72.			IN	A

;; AUTHORITY SECTION:
.			357	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 178 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 03:35:32 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 72.85.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 72.85.18.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
167.172.162.118	attackspambots	xmlrpc attack	2020-07-20 03:24:13
188.213.49.210	attack	188.213.49.210 - - [19/Jul/2020:17:48:12 +0100] "POST /wp-login.php HTTP/1.1" 200 6514 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.90 Safari/537.36 2345Explorer/9.3.2.17331" 188.213.49.210 - - [19/Jul/2020:17:48:12 +0100] "POST /wp-login.php HTTP/1.1" 200 6514 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.90 Safari/537.36 2345Explorer/9.3.2.17331" 188.213.49.210 - - [19/Jul/2020:17:48:13 +0100] "POST /wp-login.php HTTP/1.1" 200 6662 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.90 Safari/537.36 2345Explorer/9.3.2.17331" ...	2020-07-20 02:59:08
94.102.49.65	attackspam	Jul 19 20:02:01 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.49.65, lip=185.118.197.126, session= Jul 19 20:02:13 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.49.65, lip=185.118.197.126, session= Jul 19 20:02:22 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=94.102.49.65, lip=185.118.197.126, session= Jul 19 20:02:28 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=94.102.49.65, lip=185.118.197.126, session= Jul 19 20:02:37 mail.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 17 secs): user=, method=PLAIN,	2020-07-20 03:13:02
44.225.84.206	attackspam	400 BAD REQUEST	2020-07-20 03:27:39
96.64.7.59	attackbotsspam	Jul 19 19:58:12 server sshd[16144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.64.7.59 Jul 19 19:58:14 server sshd[16144]: Failed password for invalid user stb from 96.64.7.59 port 55138 ssh2 Jul 19 20:02:20 server sshd[17355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.64.7.59 ...	2020-07-20 03:03:32
222.186.15.158	attackspambots	Unauthorized connection attempt detected from IP address 222.186.15.158 to port 22	2020-07-20 03:23:07
178.62.0.215	attack	Jul 19 20:41:39 meumeu sshd[1046855]: Invalid user ronaldo from 178.62.0.215 port 41482 Jul 19 20:41:39 meumeu sshd[1046855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.0.215 Jul 19 20:41:39 meumeu sshd[1046855]: Invalid user ronaldo from 178.62.0.215 port 41482 Jul 19 20:41:41 meumeu sshd[1046855]: Failed password for invalid user ronaldo from 178.62.0.215 port 41482 ssh2 Jul 19 20:45:16 meumeu sshd[1046917]: Invalid user elizabeth from 178.62.0.215 port 55138 Jul 19 20:45:16 meumeu sshd[1046917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.0.215 Jul 19 20:45:16 meumeu sshd[1046917]: Invalid user elizabeth from 178.62.0.215 port 55138 Jul 19 20:45:18 meumeu sshd[1046917]: Failed password for invalid user elizabeth from 178.62.0.215 port 55138 ssh2 Jul 19 20:48:51 meumeu sshd[1047003]: Invalid user le from 178.62.0.215 port 40556 ...	2020-07-20 02:56:04
46.38.145.254	attackspambots	Jul 19 21:03:58 srv01 postfix/smtpd\[15523\]: warning: unknown\[46.38.145.254\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 21:04:45 srv01 postfix/smtpd\[16115\]: warning: unknown\[46.38.145.254\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 21:05:23 srv01 postfix/smtpd\[16115\]: warning: unknown\[46.38.145.254\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 21:06:04 srv01 postfix/smtpd\[15523\]: warning: unknown\[46.38.145.254\]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Jul 19 21:06:47 srv01 postfix/smtpd\[16115\]: warning: unknown\[46.38.145.254\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-20 03:14:23
125.215.207.40	attack	Jul 19 21:10:34 OPSO sshd\[13599\]: Invalid user sale from 125.215.207.40 port 58477 Jul 19 21:10:34 OPSO sshd\[13599\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.40 Jul 19 21:10:36 OPSO sshd\[13599\]: Failed password for invalid user sale from 125.215.207.40 port 58477 ssh2 Jul 19 21:15:48 OPSO sshd\[15135\]: Invalid user vasily from 125.215.207.40 port 54434 Jul 19 21:15:48 OPSO sshd\[15135\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.40	2020-07-20 03:16:59
106.52.152.168	attackspam	$f2bV_matches	2020-07-20 03:08:48
185.129.103.130	attack	Lines containing failures of 185.129.103.130 Jul 19 16:26:55 * sshd[6759]: Invalid user server from 185.129.103.130 port 58412 Jul 19 16:26:55 * sshd[6759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.129.103.130 Jul 19 16:26:57 * sshd[6759]: Failed password for invalid user server from 185.129.103.130 port 58412 ssh2 Jul 19 16:26:57 * sshd[6759]: Received disconnect from 185.129.103.130 port 58412:11: Bye Bye [preauth] Jul 19 16:26:57 * sshd[6759]: Disconnected from invalid user server 185.129.103.130 port 58412 [preauth] Jul 19 16:40:33 * sshd[7569]: Invalid user eng from 185.129.103.130 port 56274 Jul 19 16:40:33 * sshd[7569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.129.103.130 Jul 19 16:40:35 * sshd[7569]: Failed password for invalid user eng from 185.129.103.130 port 56274 ssh2 Jul 19 16:40:35 *** sshd[7569]: Received disconnect from 185.129.103.130 po........ ------------------------------	2020-07-20 02:55:11
111.72.197.110	attack	Jul 19 20:30:43 srv01 postfix/smtpd\[2852\]: warning: unknown\[111.72.197.110\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 20:30:55 srv01 postfix/smtpd\[2852\]: warning: unknown\[111.72.197.110\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 20:31:11 srv01 postfix/smtpd\[2852\]: warning: unknown\[111.72.197.110\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 20:31:30 srv01 postfix/smtpd\[2852\]: warning: unknown\[111.72.197.110\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 20:31:43 srv01 postfix/smtpd\[2852\]: warning: unknown\[111.72.197.110\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-20 03:02:40
46.38.150.153	attackbotsspam	Jul 19 20:48:42 relay postfix/smtpd\[12276\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 20:49:22 relay postfix/smtpd\[12271\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 20:49:58 relay postfix/smtpd\[10014\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 20:50:34 relay postfix/smtpd\[12271\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 20:51:10 relay postfix/smtpd\[8710\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-20 03:03:00
222.186.175.23	attack	Banned for a week because repeated abuses, for example SSH, but not only	2020-07-20 03:10:57
103.219.112.47	attack	Unauthorized connection attempt detected from IP address 103.219.112.47 to port 6125 [T]	2020-07-20 03:28:55

Recently Reported IPs

104.18.82.88	104.18.85.98	104.18.86.42	205.12.193.129
104.18.87.42	104.18.9.100	245.160.253.139	104.18.9.106
104.18.9.124	127.65.149.207	104.18.9.133	37.199.30.251
104.18.9.186	71.227.211.82	104.18.9.191	128.120.234.172
104.18.9.206	158.18.50.230	104.18.9.213	104.18.9.225