104.18.70.50 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.18.70.149	attack	"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz	2020-05-24 22:42:26
104.18.70.28	spam	AGAIN and AGAIN and ALWAYS the same REGISTRAR as 1api.net TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual... Dossier transmis aux autorités Européennes et Françaises pour CONDAMNATION à 750 € par POURRIEL émis les SOUS MERDES, OK ? From: Joka Date: Wed, 18 Mar 2020 16:46:18 +0000 Subject: LE CASINO JOKA. =?utf-8?b?T8OZ?= LES FORTUNES SE PROFILENT Message-Id: <4WMA.BA1D.F33KVOH670.20200318164618859@bestoffer-today.com> live@bestoffer-today.com which send to « https://bestoffer-today.com/4WMA-BA1D-F33KVOH670/uauto.aspx » to BURN / CLOSE / DELETTE / STOP IMMEDIATELY for SPAM, PHISHING and SCAM on STOLLEN List ! ! ! bestoffer-today.com => 1api.net bestoffer-today.com => 104.16.209.86 104.16.209.86 => cloudflare.com AS USUAL... 1api.net => 84.200.110.124 84.200.110.124 => accelerated.de live@bestoffer-today.com => 94.143.106.199 94.143.106.199 => dotmailer.com dotmailer.com => 104.18.70.28 104.18.70.28 => cloudflare.com AS USUAL... dotmailer.com send to dotdigital.com dotdigital.com => 104.19.144.113 104.19.144.113 => cloudflare.com https://www.mywot.com/scorecard/dotmailer.com https://www.mywot.com/scorecard/dotdigital.com https://www.mywot.com/scorecard/bestoffer-today.com https://www.mywot.com/scorecard/1api.net AS USUAL... https://en.asytech.cn/check-ip/104.16.209.86 https://en.asytech.cn/check-ip/84.200.110.124 https://en.asytech.cn/check-ip/94.143.106.199 https://en.asytech.cn/check-ip/104.18.70.28 https://en.asytech.cn/check-ip/104.19.144.113	2020-03-19 05:04:23
104.18.70.106	attack	siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:48 +0100\] "GET /robots.txt HTTP/1.1" 200 4578 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)" siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:49 +0100\] "GET /galerie/villa-bunterkund.html HTTP/1.1" 200 10713 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)" siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:55 +0100\] "GET / HTTP/1.1" 200 9534 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)" ...	2019-10-27 17:27:20

类型

评论内容

时间

104.18.70.149

attack

"MarketingPromoSystems, 8 The Green Suite #5828 Dover DE" 185.230.46.95 - phishing redirect www1.innovationaltech.xyz

2020-05-24 22:42:26

104.18.70.28

spam

AGAIN and AGAIN and ALWAYS the same REGISTRAR as 1api.net TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual...
Dossier transmis aux autorités Européennes et Françaises pour CONDAMNATION à 750 € par POURRIEL émis les SOUS MERDES, OK ?

From: Joka 
Date: Wed, 18 Mar 2020 16:46:18 +0000
Subject: LE CASINO JOKA. =?utf-8?b?T8OZ?= LES FORTUNES SE PROFILENT
Message-Id: <4WMA.BA1D.F33KVOH670.20200318164618859@bestoffer-today.com>

live@bestoffer-today.com which send to « https://bestoffer-today.com/4WMA-BA1D-F33KVOH670/uauto.aspx » to BURN / CLOSE / DELETTE / STOP IMMEDIATELY for SPAM, PHISHING and SCAM on STOLLEN List ! ! !

bestoffer-today.com => 1api.net

bestoffer-today.com => 104.16.209.86

104.16.209.86 => cloudflare.com AS USUAL...

1api.net => 84.200.110.124

84.200.110.124 => accelerated.de

live@bestoffer-today.com => 94.143.106.199

94.143.106.199 => dotmailer.com

dotmailer.com => 104.18.70.28

104.18.70.28 => cloudflare.com AS USUAL...

dotmailer.com send to dotdigital.com

dotdigital.com => 104.19.144.113

104.19.144.113 => cloudflare.com

https://www.mywot.com/scorecard/dotmailer.com

https://www.mywot.com/scorecard/dotdigital.com

https://www.mywot.com/scorecard/bestoffer-today.com

https://www.mywot.com/scorecard/1api.net AS USUAL...

https://en.asytech.cn/check-ip/104.16.209.86

https://en.asytech.cn/check-ip/84.200.110.124

https://en.asytech.cn/check-ip/94.143.106.199

https://en.asytech.cn/check-ip/104.18.70.28

https://en.asytech.cn/check-ip/104.19.144.113

2020-03-19 05:04:23

104.18.70.106

attack

siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:48 +0100\] "GET /robots.txt HTTP/1.1" 200 4578 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:49 +0100\] "GET /galerie/villa-bunterkund.html HTTP/1.1" 200 10713 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
siteaudit.crawler.semrush.com - - \[27/Oct/2019:04:48:55 +0100\] "GET / HTTP/1.1" 200 9534 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
...

2019-10-27 17:27:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.70.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43122
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.70.50.			IN	A

;; AUTHORITY SECTION:
.			162	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031801 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 19 09:27:39 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 50.70.18.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 50.70.18.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
122.117.46.48	attackbots	" "	2020-10-04 02:49:08
62.96.251.229	attackbots	Oct 3 17:41:49 ip-172-31-16-56 sshd\[27837\]: Failed password for root from 62.96.251.229 port 62453 ssh2\ Oct 3 17:45:49 ip-172-31-16-56 sshd\[27930\]: Invalid user oscommerce from 62.96.251.229\ Oct 3 17:45:51 ip-172-31-16-56 sshd\[27930\]: Failed password for invalid user oscommerce from 62.96.251.229 port 21405 ssh2\ Oct 3 17:50:01 ip-172-31-16-56 sshd\[27984\]: Invalid user maria from 62.96.251.229\ Oct 3 17:50:03 ip-172-31-16-56 sshd\[27984\]: Failed password for invalid user maria from 62.96.251.229 port 57293 ssh2\	2020-10-04 03:09:16
5.188.86.219	attack	SSH Bruteforce Attempt on Honeypot	2020-10-04 03:08:11
114.5.199.201	attackspam	Subject: OK....	2020-10-04 02:47:39
213.222.187.138	attack	Oct 3 20:41:46 abendstille sshd\[17308\]: Invalid user joyce from 213.222.187.138 Oct 3 20:41:46 abendstille sshd\[17308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.222.187.138 Oct 3 20:41:48 abendstille sshd\[17308\]: Failed password for invalid user joyce from 213.222.187.138 port 40758 ssh2 Oct 3 20:45:21 abendstille sshd\[20922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.222.187.138 user=root Oct 3 20:45:23 abendstille sshd\[20922\]: Failed password for root from 213.222.187.138 port 44888 ssh2 ...	2020-10-04 03:10:35
193.57.40.74	attackbotsspam	(Oct 3) LEN=40 PREC=0x20 TTL=248 ID=62068 TCP DPT=445 WINDOW=1024 SYN (Oct 3) LEN=40 PREC=0x20 TTL=248 ID=30649 TCP DPT=445 WINDOW=1024 SYN (Oct 3) LEN=40 PREC=0x20 TTL=248 ID=9204 TCP DPT=445 WINDOW=1024 SYN (Oct 3) LEN=40 PREC=0x20 TTL=248 ID=47412 TCP DPT=445 WINDOW=1024 SYN (Oct 3) LEN=40 PREC=0x20 TTL=248 ID=8032 TCP DPT=445 WINDOW=1024 SYN (Oct 2) LEN=40 PREC=0x20 TTL=248 ID=31315 TCP DPT=445 WINDOW=1024 SYN (Oct 2) LEN=40 PREC=0x20 TTL=248 ID=60072 TCP DPT=445 WINDOW=1024 SYN (Oct 2) LEN=40 PREC=0x20 TTL=248 ID=32461 TCP DPT=445 WINDOW=1024 SYN (Oct 2) LEN=40 PREC=0x20 TTL=248 ID=4761 TCP DPT=445 WINDOW=1024 SYN (Oct 2) LEN=40 PREC=0x20 TTL=248 ID=14361 TCP DPT=445 WINDOW=1024 SYN (Oct 2) LEN=40 PREC=0x20 TTL=248 ID=11751 TCP DPT=445 WINDOW=1024 SYN (Oct 1) LEN=40 PREC=0x20 TTL=248 ID=45968 TCP DPT=445 WINDOW=1024 SYN (Oct 1) LEN=40 PREC=0x20 TTL=248 ID=45644 TCP DPT=445 WINDOW=1024 SYN (Oct 1) LEN=40 PREC=0x20 TTL=248 ID=28...	2020-10-04 03:22:59
199.195.253.117	attack	script kiddie	2020-10-04 02:57:07
142.44.170.9	attackbots	SpamScore above: 10.0	2020-10-04 03:09:59
83.221.107.60	attackbotsspam	Oct 3 16:14:38 rush sshd[11045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.221.107.60 Oct 3 16:14:40 rush sshd[11045]: Failed password for invalid user user from 83.221.107.60 port 60596 ssh2 Oct 3 16:18:55 rush sshd[11080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.221.107.60 ...	2020-10-04 02:48:25
42.194.135.233	attackspambots	(sshd) Failed SSH login from 42.194.135.233 (CN/China/Guangdong/Shenzhen/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 12:14:32 atlas sshd[24972]: Invalid user tiago from 42.194.135.233 port 53532 Oct 3 12:14:34 atlas sshd[24972]: Failed password for invalid user tiago from 42.194.135.233 port 53532 ssh2 Oct 3 12:20:26 atlas sshd[26370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.194.135.233 user=root Oct 3 12:20:27 atlas sshd[26370]: Failed password for root from 42.194.135.233 port 42982 ssh2 Oct 3 12:21:40 atlas sshd[26685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.194.135.233 user=root	2020-10-04 02:54:38
167.99.88.37	attackspambots	Oct 3 18:47:54 ns382633 sshd\[10572\]: Invalid user adrian from 167.99.88.37 port 60348 Oct 3 18:47:54 ns382633 sshd\[10572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.88.37 Oct 3 18:47:56 ns382633 sshd\[10572\]: Failed password for invalid user adrian from 167.99.88.37 port 60348 ssh2 Oct 3 18:50:28 ns382633 sshd\[10982\]: Invalid user adrian from 167.99.88.37 port 40158 Oct 3 18:50:28 ns382633 sshd\[10982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.88.37	2020-10-04 03:10:52
178.128.210.230	attack	Oct 3 19:56:35 srv-ubuntu-dev3 sshd[111899]: Invalid user jo from 178.128.210.230 Oct 3 19:56:35 srv-ubuntu-dev3 sshd[111899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.210.230 Oct 3 19:56:35 srv-ubuntu-dev3 sshd[111899]: Invalid user jo from 178.128.210.230 Oct 3 19:56:37 srv-ubuntu-dev3 sshd[111899]: Failed password for invalid user jo from 178.128.210.230 port 50272 ssh2 Oct 3 20:00:36 srv-ubuntu-dev3 sshd[112500]: Invalid user ubuntu from 178.128.210.230 Oct 3 20:00:36 srv-ubuntu-dev3 sshd[112500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.210.230 Oct 3 20:00:36 srv-ubuntu-dev3 sshd[112500]: Invalid user ubuntu from 178.128.210.230 Oct 3 20:00:38 srv-ubuntu-dev3 sshd[112500]: Failed password for invalid user ubuntu from 178.128.210.230 port 57498 ssh2 Oct 3 20:04:34 srv-ubuntu-dev3 sshd[113014]: Invalid user starbound from 178.128.210.230 ...	2020-10-04 03:03:22
134.175.219.148	attack	Oct 3 20:27:05 marvibiene sshd[16158]: Failed password for root from 134.175.219.148 port 56684 ssh2 Oct 3 20:28:06 marvibiene sshd[16231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.219.148 Oct 3 20:28:07 marvibiene sshd[16231]: Failed password for invalid user www from 134.175.219.148 port 34152 ssh2	2020-10-04 03:23:34
58.61.145.26	attackbotsspam	Attempted Brute Force (dovecot)	2020-10-04 03:08:24
209.17.96.10	attack	From CCTV User Interface Log ...::ffff:209.17.96.10 - - [03/Oct/2020:01:50:36 +0000] "GET / HTTP/1.1" 200 960 ...	2020-10-04 02:49:32

最近上报的IP列表

104.18.31.16	104.18.88.20	104.18.91.54	104.18.92.54
104.18.96.216	104.19.103.3	104.19.110.183	104.19.15.191
104.19.150.53	104.19.151.53	104.19.152.41	104.19.153.41
104.19.16.196	104.19.160.11	104.19.17.26	0.219.209.139
104.19.172.255	104.19.201.138	104.199.17.164	104.199.214.16