104.26.13.245 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.26.13.141	attackbotsspam	From: "Amazon.com" Amazon account phishing/fraud - MALICIOUS REDIRECT UBE aimanbauk ([40.87.105.33]) Microsoft Spam link parg.co = 178.238.224.248 Contabo GmbH – BLACKLISTED MALICIOUS REDIRECT: - sum.vn = 104.26.12.141, 104.26.13.141, 172.67.73.189 Cloudflare – blacklisted see https://www.phishtank.com/phish_detail.php?phish_id=6360304 - amazon.verification.kozow.com = 94.249.167.244 GHOSTnet GmbH – blacklisted see https://transparencyreport.google.com/safe-browsing/search?url=http%3A%2F%2Famazon.verification.kozow.com%2F%3F16shop SPF fxamplwo395845.com = aspmx.l.google.com 108.177.15.26, 108.177.15.27 Google	2020-07-30 02:47:10

Type

Details

Datetime

104.26.13.141

attackbotsspam

From: "Amazon.com" 
Amazon account phishing/fraud - MALICIOUS REDIRECT

UBE aimanbauk ([40.87.105.33]) Microsoft

Spam link parg.co = 178.238.224.248 Contabo GmbH – BLACKLISTED MALICIOUS REDIRECT:
-	sum.vn = 104.26.12.141, 104.26.13.141, 172.67.73.189 Cloudflare – blacklisted see https://www.phishtank.com/phish_detail.php?phish_id=6360304
-	amazon.verification.kozow.com = 94.249.167.244 GHOSTnet GmbH – blacklisted see https://transparencyreport.google.com/safe-browsing/search?url=http%3A%2F%2Famazon.verification.kozow.com%2F%3F16shop

SPF fxamplwo395845.com = aspmx.l.google.com 108.177.15.26, 108.177.15.27 Google

2020-07-30 02:47:10

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.26.13.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17313
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.26.13.245.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 04:04:45 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 245.13.26.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 245.13.26.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
187.60.95.193	attack	2020-09-15T19:01:01.735781Z d79f2ab476e9 New connection: 187.60.95.193:53276 (172.17.0.2:2222) [session: d79f2ab476e9] 2020-09-15T19:01:24.076568Z 6a7a3a5740d5 New connection: 187.60.95.193:53536 (172.17.0.2:2222) [session: 6a7a3a5740d5]	2020-09-16 13:21:36
107.77.172.46	attack	Brute forcing email accounts	2020-09-16 13:41:11
122.165.194.191	attackbotsspam	$f2bV_matches	2020-09-16 13:20:23
119.237.53.14	attackbotsspam	Sep 15 04:00:10 scw-focused-cartwright sshd[28871]: Failed password for root from 119.237.53.14 port 41758 ssh2	2020-09-16 13:44:05
42.112.170.111	attackspambots	Unauthorized connection attempt from IP address 42.112.170.111 on Port 445(SMB)	2020-09-16 13:36:06
89.188.125.250	attackbotsspam	Port scan denied	2020-09-16 13:48:39
139.155.86.214	attackbots	ssh brute force	2020-09-16 13:27:25
46.101.151.97	attackspambots	ssh brute force	2020-09-16 13:45:22
200.54.242.46	attackspam	k+ssh-bruteforce	2020-09-16 13:36:31
119.123.56.12	attackbotsspam	Brute force attempt	2020-09-16 13:47:54
116.72.27.215	attackbotsspam	GPON Home Routers Remote Code Execution Vulnerability	2020-09-16 13:50:33
201.231.175.63	attackbotsspam	Sep 16 00:55:39 ip-172-31-16-56 sshd\[28024\]: Invalid user lkihara from 201.231.175.63\ Sep 16 00:55:41 ip-172-31-16-56 sshd\[28024\]: Failed password for invalid user lkihara from 201.231.175.63 port 54689 ssh2\ Sep 16 00:58:08 ip-172-31-16-56 sshd\[28067\]: Failed password for root from 201.231.175.63 port 55137 ssh2\ Sep 16 01:00:58 ip-172-31-16-56 sshd\[28126\]: Failed password for root from 201.231.175.63 port 55905 ssh2\ Sep 16 01:03:44 ip-172-31-16-56 sshd\[28159\]: Failed password for root from 201.231.175.63 port 56609 ssh2\	2020-09-16 13:58:17
189.240.227.73	attackspam	Unauthorized connection attempt from IP address 189.240.227.73 on Port 445(SMB)	2020-09-16 13:32:16
45.148.121.3	attack	SIPVicious Scanner Detection	2020-09-16 13:53:25
131.255.102.102	attackbots	Unauthorized connection attempt from IP address 131.255.102.102 on Port 445(SMB)	2020-09-16 13:43:33

Recently Reported IPs

104.26.13.242	104.26.13.241	104.26.13.247	104.26.13.246
104.26.13.244	104.26.13.249	104.26.13.248	104.26.13.250
104.26.13.25	104.26.13.251	104.26.13.3	104.26.13.27
104.26.13.26	104.26.13.29	104.26.13.30	104.26.13.31
104.26.13.33	104.26.13.28	104.26.13.32	104.26.13.34