104.18.40.86 Threat Intelligence and Host Information

Oct 21, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 104.18.40.86 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

  • Mitre ATT&CK IDs: T1071.001 - Web Protocols, T1071.004 - DNS, T1071 - Application Layer Protocol, T1105 - Ingress Tool Transfer, T1553.002 - Code Signing, T1553 - Subvert Trust Controls, T1568.002 - Domain Generation Algorithms, T1568 - Dynamic Resolution, T1583.001 - Domains, T1583 - Acquire Infrastructure

  • Tags: aaaa, active, active related, address, a domains, alexa, alexa top, all scoreblue, amber tags, android10, artemis, as15133 verizon, as20940, as209453, as209453 gandi, as2527 sony, as58061 scalaxy, ascii text, asn as58061, azorult, backdoor, bank, binder, bitdefender, blacklist, body, body length, certificate, cisco umbrella, click, cname, coalition, cobalt strike, collection, connection, contact, control server, cookie, creation date, cyber threat, date, detection list, dns resolutions, domain, download, dropper, emails, emotet, encrypt, engineering, entries, et tor, exit, expiration, facebook, filehashsha1, filehashsha256, files, final url, format, formbook, france unknown, germany unknown, glaxosmithkline, gmt content, gmt contenttype, group, headers date, heur, historical ssl, hostname, hostnames, http response, hybrid, iocs, ip address, ipv4, ireland unknown, june, kb body, known tor, lazarus created, leader, local, location chiba, loki, malicious, malicious site, malware, melbourne it, meta, million, minutes ago, misc attack, moved, next, node traffic, no expiration, open ports, passive dns, pattern match, phishing, pragma, pulse pulses, pulses hostname, pulse submit, record value, referrer, relayrouter, report spam, reverse dns, role title, rsa sha256, scan endpoints, search, serving ip, sha1, sha256, showing, site, starfield, status, status code, strings, susp, team, team phishing, threat research, tip oriented, type indicator, united, unknown, url analysis, url http, url https, urls, vt graph, web redirection, win32

  • View other sources: Spamhaus VirusTotal

  • Country:
  • Network:
  • Noticed: 10 times
  • Protocols Attacked: Anonymous Proxy
  • Passive DNS Results: photos.vidcon.com weave-gitops-eu-central-1.ecosia.systems api.reports.sit.inet.paynet.my wm.fpx.uat.inet.paynet.my issuer-portal.tsp.prod.inet.paynet.my holzzug.ecosia.systems metabase.ecosia.systems wt.perkinelmer-informatics.auth0app.com edge.tenants.perkinelmer-informatics.auth0app.com prometheus-eu-central-1.ecosia.systems apigw.dutchboy.crt6s.inet.paynet.my apigw.dutchboy.uat.inet.paynet.my api.nfp.uat.inet.paynet.my api.txn.nfp.uat.inet.paynet.my dashboard.paynet.my c-target.dev.v4.kc-femininecare.com c-target.tcceast.dev.v4.kc-femininecare.com api.adminhub.sit.inet.paynet.my api.adminhub.uat.inet.paynet.my sephora-canada.pbis-cf.instacart.com epki01.espick.prod.inet.paynet.my cs-prod.pods.ca wt.perkinelmer-informatics-dev.auth0app.com edge.tenants.perkinelmer-informatics-dev.auth0app.com cf-mtls-poc.paynet.my login.srp.revvitycloud.net sim.cnp.uat.inet.paynet.my api.sit.inet.paynet.my api.uat.inet.paynet.my sandbox.api.paynet.my api.developer.paynet.my api.tsp.sit.inet.paynet.my bankweb.fpx.sit.inet.paynet.my dynacast.azcontentstackapps.com checkout.dev-legalshield.ca primerica.dev-legalshield.ca testservice.api.development.developer.inet.paynet.my ts-api-acs.cnp.sit.inet.paynet.my p2ice.rpp.sit.inet.paynet.my api.nextswitch.uat.inet.paynet.my notif.awsapi.prod.inet.paynet.my wm.fpx.sit.inet.paynet.my consumer.src.uat.inet.paynet.my status.osp.sit.inet.paynet.my api.tsp.uat.inet.paynet.my simulator.fpx.uat.inet.paynet.my admin.sit.inet.paynet.my portal.rpp.crt.inet.paynet.my api.fna.nfp.uat.inet.paynet.my ts-api-acs.cnp.uat.inet.paynet.my srci-portal.src.prod.inet.paynet.my checkout-us.dev-legalshield.ca myrecipe.tefal.ro api.admin.sit.inet.paynet.my loki-ca-central-1.ecosia.systems traefik.prod.infra.paynet.my api.tsp.prod.inet.paynet.my dev-legalshield.ca www.dev-legalshield.ca newcheckout.dev-legalshield.ca api.nrtdashboard.prod.inet.paynet.my a-target.dev.v4.kc-femininecare.com sentry.infra.paynet.my prometheus-ca-central-1.ecosia.systems brs.jompay.sit.inet.paynet.my dashboard.sit.inet.paynet.my en-ca.dev.assurant.authxlab.com rpp-apigw.crt6s.inet.paynet.my gta.oemw.sit.inet.paynet.my test-tool.src.sit.inet.paynet.my pgsim.development.developer.inet.paynet.my simulator.uat.inet.paynet.my consumer.src.dev.inet.paynet.my portal.rpp.prod.inet.paynet.my wm.fpx.prod.inet.paynet.my www.azeleventysanitycs.net certification.api.developer.inet.paynet.my manual.vidcon.com api.devportal.development.inet.paynet.my api.devportal.testing.inet.paynet.my cn.mini.garmin.com preprod.ewheels.fi en-us.dev.assurant.authxlab.com www.dynacast.com certification.developer.paynet.my api.tsp.uat.test.paynet.my ntt-traefik-elb.uat.inet.paynet.my dev.v4.kc-femininecare.com c-target.tccwest.dev.v4.kc-femininecare.com airflow-prod.ecosia.systems c.vidcon.com www.ewheels.fi ntt-traefik-public.uat.inet.paynet.my qa-dk-50w-fixshrsvc-3605-fixpackagealrea.az.ssdgws.co.uk developer.paynet.my truck-mobiles.de gta.oemw.uat.inet.paynet.my vidcon.com ntt-traefik-public.prod.inet.paynet.my openapigw.nfp.sit.inet.paynet.my indeedinternational.com notif.awsapi.sit.inet.paynet.my api.account.sit.inet.paynet.my api.account.uat.inet.paynet.my gwc.espick.uat.inet.paynet.my ingress.perkinelmer-informatics.auth0app.com.cdn.cloudflare.net back-office.azcontentstackapps.com clicks.vidcon.com epki01.espick.uat.inet.paynet.my www.vidcon.com admin-console.src.dev.inet.paynet.my commcloud.prod-bgsm-hugoboss-eu.cc-ecdn.net loki-write-eu-central-1.ecosia.systems bankweb.fpx.prod.inet.paynet.my www.techmire.com bvm.jompay.uat.inet.paynet.my smartforms.intranet.prod.inet.paynet.my api.account.paynet.my exchange.fpx.prod.inet.paynet.my trace.prod.paynet.my fpxexchange.paynet.my web.espick.uat.inet.paynet.my login-uat.scl.revvitycloud.com billercentre.jompay.prod.inet.paynet.my dev2.kotex.co.il dev2.ubykotex.com.v4.kc-femininecare.com dev2.kotex.ua dev2.lakotex.cl server1.dev1.v4.kc-femininecare.com tls.api.osp.uat.inet.paynet.my web.tsp.uat.inet.paynet.my srci-portal.src.sit.inet.paynet.my invoice.osp.sit.inet.paynet.my eprocurement.paynet.my api.txn.nfp.prod.inet.paynet.my admin-console.src.uat.inet.paynet.my merchantweb.fpx.prod.inet.paynet.my consumer.src.sit.inet.paynet.my api.ivs.sit.inet.paynet.my www.paynet.my portal.osp.uat.inet.paynet.my accounts.uat.inet.paynet.my ts-cms.cnp.uat.inet.paynet.my uat.paynet.my login-scl3.scl.revvitycloud.net www.mybryantworkshops.com account.paynet.my airbyte.ecosia.systems invoices.prod.inet.paynet.my alertmanager-ca-central-1.ecosia.systems kubecost-eu-central-1.ecosia.systems kubecost-ca-central-1.ecosia.systems www.azcommerce.com.cdn.cloudflare.net login2.srp.revvitycloud.net oemw.core.dev.inet.paynet.my www.kiehls.ae ags.wiley.com www.wbdprivacy.com spowaweb.intranet.prod.inet.paynet.my www.demetrin.de bvm.jompay.prod.inet.paynet.my brs.jompay.prod.inet.paynet.my api.src.sit.inet.paynet.my test.tsp.dev.inet.paynet.my test.tsp.sit.inet.paynet.my devs.devportal.uat.inet.paynet.my nfp.prod.inet.paynet.my fna.nfp.uat.inet.paynet.my admin.devportal.uat.inet.paynet.my nonprodfpxexchange.publicweb.inet.paynet.my epki02.espick.uat.inet.paynet.my certification.development.developer.paynet.my mock.developer.paynet.my status.osp.uat.inet.paynet.my nfp.sit.inet.paynet.my docs.developer.paynet.my brs.jompay.uat.inet.paynet.my kiehls.ae www.az.saharabets.com login-f10.srp.revvitycloud.net mybryantworkshops.com www.sundbyholm.com login-us.scl.revvitycloud.com lb-bgr.infra.paynet.my lb-cbj.infra.paynet.my recm.sst.prod.inet.paynet.my www.ultrawin.co www.betfine24.com congress.gov.ph openapi.nfp.uat.inet.paynet.my app.eprocurement.prod.inet.paynet.my api.wallet.tsp.sit.inet.paynet.my int-sitecorebf-cd.cloud-effem.com api.testservice.devportal.sit.inet.paynet.my api.nfp.sit.inet.paynet.my simulator.sit.inet.paynet.my dsapi.tsp.prod.inet.paynet.my test-tool.tsp.uat.inet.paynet.my ts-api.cnp.dev.inet.paynet.my ts-cms.cnp.prod.inet.paynet.my api.src.dev.inet.paynet.my tdserver.src.sit.inet.paynet.my token-requestor-portal.tsp.prod.inet.paynet.my api.src.uat.inet.paynet.my circulars.portal.paynet.my account.sit.inet.paynet.my adminweb.fpx.sit.inet.paynet.my assets.src.dev.inet.paynet.my web.devportal.sit.inet.paynet.my issuer-portal.tsp.uat.inet.paynet.my assets.src.uat.inet.paynet.my boards.prod.inet.paynet.my account.uat.inet.paynet.my tls.api.osp.sit.inet.paynet.my bvm.jompay.sit.inet.paynet.my api.luckydraw.prod.inet.paynet.my acs.src.sit.inet.paynet.my web.dda.uat.inet.paynet.my p2ice.rpp.uat.inet.paynet.my simulator.fpx.prod.inet.paynet.my billercentre.jompay.uat.inet.paynet.my token-requestor-portal.tsp.uat.inet.paynet.my sso.paynet.my web.devportal.prod.inet.paynet.my smartforms.intranet.uat.inet.paynet.my api.cnp.uat.inet.paynet.my merchantweb.fpx.sit.inet.paynet.my issuer-portal.tsp.sit.inet.paynet.my notif.awsapi.uat.inet.paynet.my accounts.sit.inet.paynet.my devportal.development.paynet.my devportal.testing.paynet.my test.tsp.uat.inet.paynet.my bankweb.fpx.uat.inet.paynet.my traefik-ntt.infra.paynet.my wv.fpx.prod.inet.paynet.my circulars.portal.osp.uat.inet.paynet.my paynet.my epki02.espick.prod.inet.paynet.my portal.vokera.co.uk apps-dup.allianz.be flora.ecosia.systems airflow.ecosia.systems linkerd-eu-central-1.ecosia.systems appcms.ecosia.systems warranty.vokera.co.uk qa-nl-qxp-apd-3750-zerotrustpreview.az.ssdgws.co.uk www.universaldairy.dk login.revvitysignals.com www.congress.gov.ph prod.fallstreak.rydapt.com elementary.ecosia.systems login3.srp.revvitycloud.net chopper-bff-chopper-apac-preprod.decathlon.sg login-poc.snb.perkinelmercloud.net www.wbdprivacy.com.cdn.cloudflare.net www.convaid.com betfine24.com logindev.revvitysignals.com az.saharabets.com sqe.pims.congress.gov.ph life-insure-now.com abcclassic.ag cpbrd.congress.gov.ph pki-inf-ops-prod-cd-73o0qtvijgkpwmcv.edge.tenants.perkinelmer-informatics.auth0app.com firstbankhampton.net k1042x.com tooling-retail7.com dev-www.azcommerce.com inte.fallstreak.rydapt.com prep.fallstreak.rydapt.com inte.fallstreak.rydapt.com.cdn.cloudflare.net prep.fallstreak.rydapt.com.cdn.cloudflare.net prolinknet.allianz.be pki-inf-ops-prod-cd-afanutisdkpaquz2.edge.tenants.perkinelmer-informatics.auth0app.com emailings.allianz.be apps.allianz.be forms.allianz.be sso.allianz.be bittrade.co.jp allianz.be yourtotalcomfortva.com alcentra.co.uk www.azcommerce.com azcommerce.com wwwt.kitekonnect.ch www.machinerytrader.es grlaunchpad.com www.grlaunchpad.com www.seatstandards.org stage.dairymaid.co.za vuln-16070.yakkul.net www.dairymaid.co.za machinerytrader.es qa.lpi.wiley.host prod.lpi.wiley.host nonprod.lpi.wiley.host firesecurityproduct.no b1314.com gameday888.com www.coralbeach-tz.com sage-200.ch undereyeprotocol.com dairymaid.co.za www.somdet.go.th yakkul.net www.yakkul.net www.meritum.waw.pl www.dhmqg.com dhmqg.com reiliwamandtari.tk rwcinc.com disembowelled.space mrgameapp.com moiprobcormaca.tk baspertforcopu.cf urullen.tk riurijackmasbu.tk flagechtizusva.cf nerrarebinra.ml faisalabadcallgirl.com wifi48.ru www.lizziehill.com gnosicupdworeak.cf mee2bett.online symaderbra.tk raicirnonpsmas.tk ilsombudhser.tk perpoymanni.cf xkeysymdbm.cf www.scamsreporter.com wallsrecords.com canbarbmeminlopho.gq www.tsell.net cpcontacts.tsell.net cpcalendars.tsell.net tsell.net rydefdi.tk stitinedmous.tk scamsreporter.com boiesoduj.tk smalerbuidi.tk alonovad.tk guibefo.tk www.toiletspesialist.com lingsibdiaghos.ml ciringconf.tk ilatov.tk raismarlug.tk orderbaroproducts.com shipin-zhizuo.com milnito.ml awratteern.net www.kpg-construction.com kpg-construction.com ltagcinrema.tk siocergeo.tk www.aweshomes.com aweshomes.com rigerdegel.tk eustepnl.com gedingtron.ga sbx-19.ixcc-sandbox.avayacloud.com cracarimdanficy.tk listtara.tk hasblareseters.tk rihyporgarig.tk dc4fr7.xyz rosorumi.tk cehkotri.club www.praythrillingguarantor.online amp.sirinevlerescort.biz gsmaze.net www.gsmaze.net.cdn.cloudflare.net praythrillingguarantor.online lsoduhsbba.pw www.squeezefunnels.com sb456.co tromupin.tk leadpakistan.com.pk tilolimi.ml v9pokeronline.com link.weckmann.me c22be30110d6d117.xyz lykeluvo.tk pyouzareterdie.tk asunfierabihot.gq taimaschintsimo.cf tradecsn.tk coba.ariisan.com www.coba.ariisan.com ariisan.com www.ariisan.com www.woschitz.dev vitas76.net paragongivinggem.cloud tupourdingbusrui.tk jet-jvspin98.ru lykojyu3oy.xyz tipobet7033.com margpefinacsu.gq 9to5host.com unirrorismorr.tk kosrimarkbacklinco.tk hushburger.ie cresfonosenmo.tk rasvatvaluusyliin.tk watchbrilliantlieutenant.fun qgxs.net magliedecalcio2021.it atagthernuvaso.gq tabtiofesbiola.tk caytidiquanetpill.tk www.ichigololi.com ichigololi.com ladonna-dormagen.de unformed.xyz imika2.ga plugins-wp.online kiwipapelaria.com.br www.digimaxima.com digimaxima.com nietaitirhili.ga caichordaymanmuveg.cf tatepersmondparmell.gq inamsartido.tk dconecalchosys.tk toiletspesialist.com cofastfulltateatil.tk cqdqwx.com padui.org www.padui.org online-vulkanvegas636.pl courseforfree.cf.cdn.cloudflare.net www.courseforfree.cf.cdn.cloudflare.net sirinevlerescort.biz mbox.handsgardencenter.com bruehl-fuehrungen.de glamnonchildcenpe.tk olifrigae.my.id cod868.com sleamcommunlity.com snoboduperov.tk erseast.asia sembstewunsennie.tk www.m.peppipizza.com.br m.peppipizza.com.br www.brandingschool.com.br www.motivatededucation.com roughcutmen.com kitztempwebslergo.tk uwthealowsrenade.ga obturacion.ml zamortmoreti.tk edmontonatvpros.dev www.edmontonatvpros.dev new.gerran.online medipidea.com www.medipidea.com peppipizza.com.br www.peppipizza.com.br dtlaws.com dbtx2.fun neutranenofmale.gq www.ankurvaghasiya.info srvs-validcheck33.digital paiclocgantuloten.tk getinstahrd.com www.flairproductiongroup.co.uk.cdn.cloudflare.net comparteconguate.org momo.buffviewer.com evergreendispensary.org bassrilasremillwor.tk insfollowers.co www.insfollowers.co gramo.in rashedul360.com finestlabs.com shop.onlinecoursefunnels.com www.shop.onlinecoursefunnels.com grahecehtenme.tk xavierrefoucault.tk picaobbs.com tupper-posuda.ru www.jamiewelch.uk jamiewelch.uk taigarmecompcleaner.ml cytatyinfo.pl www.pekastoreonline.cl pekastoreonline.cl tuabellezza.it bluerayhd.xyz lbookjourcasilus.tk dhatoy.top 3dviewmaps.com saeedbinaser.net www.saeedbinaser.net rcadextreatov.ml themalegheldpor.gq cinemark.movie

Open Ports Detected

2082 2083 2086 2087 2095 2096 443 80 8080 8443 8880

Map

Whois Information

Links to attack logs

anonymous-proxy-ip-list-2025-10-20

Share on: