City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: Buyproxies.org
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.140.80.113 | spamattack | PHISHING AND SPAM ATTACK FROM "Project Build Itself - MasterWoodworker@livemdpro.us> -" : SUBJECT "Make 16,000 Projects With Step By Step Plans" : RECEIVED "from [104.140.80.113] (port=49900 helo=tommy.livemdpro.us)" : DATE/TIMESENT "Tue, 30 Mar 2021 00:09:31" IP ADDRESS "inetnum: 104.140.0.0 - 104.140.255.255 Organization: Eonix Corporation (EONIX)" |
2021-03-30 04:18:40 |
| 104.140.80.4 | attackbotsspam | Email rejected due to spam filtering |
2020-10-07 07:13:31 |
| 104.140.80.4 | attackspambots | Email rejected due to spam filtering |
2020-10-06 23:35:05 |
| 104.140.80.4 | attack | Email rejected due to spam filtering |
2020-10-06 15:24:05 |
| 104.140.80.221 | attackspambots | (From eric@talkwithwebvisitor.com) Hey, this is Eric and I ran across guarinochiropractic.com a few minutes ago. Looks great… but now what? By that I mean, when someone like me finds your website – either through Search or just bouncing around – what happens next? Do you get a lot of leads from your site, or at least enough to make you happy? Honestly, most business websites fall a bit short when it comes to generating paying customers. Studies show that 70% of a site’s visitors disappear and are gone forever after just a moment. Here’s an idea… How about making it really EASY for every visitor who shows up to get a personal phone call you as soon as they hit your site… You can – Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number. It signals you the moment they let you know they’re interested – so that you can talk to that lead while they’re literally looking over your site. CLICK HERE http://w |
2020-08-30 06:54:55 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.140.80.76
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27569
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.140.80.76. IN A
;; AUTHORITY SECTION:
. 191 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020033101 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 01 04:28:02 CST 2020
;; MSG SIZE rcvd: 11776.80.140.104.in-addr.arpa domain name pointer hyperdesking.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
76.80.140.104.in-addr.arpa name = hyperdesking.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 88.21.68.178 | attackspambots | Unauthorised access (Apr 25) SRC=88.21.68.178 LEN=52 TTL=114 ID=28905 DF TCP DPT=445 WINDOW=8192 SYN |
2020-04-25 17:35:14 |
| 104.168.198.26 | attackspambots | SSH login attempts. |
2020-04-25 17:26:34 |
| 49.176.147.156 | attackbotsspam | Automatic report - Port Scan Attack |
2020-04-25 17:23:53 |
| 207.46.13.21 | attackspambots | Automatic report - Banned IP Access |
2020-04-25 17:24:15 |
| 117.121.214.50 | attackbotsspam | 2020-04-25T09:00:59.779859shield sshd\[8689\]: Invalid user test from 117.121.214.50 port 43910 2020-04-25T09:00:59.783347shield sshd\[8689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50 2020-04-25T09:01:02.230565shield sshd\[8689\]: Failed password for invalid user test from 117.121.214.50 port 43910 ssh2 2020-04-25T09:10:09.812722shield sshd\[10540\]: Invalid user tom from 117.121.214.50 port 50656 2020-04-25T09:10:09.816442shield sshd\[10540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50 |
2020-04-25 17:27:54 |
| 205.205.150.19 | attackspam | 205.205.150.19 was recorded 207 times by 2 hosts attempting to connect to the following ports: 2404,13579,1099,14147,16010,17000,5003,8010,5432,3306,1200,8001,5001,1234,2480,3310,5900,7000,6666,2628,1311,5901,18245,5560,5007,6667,5060,8069,3000,1400,8080,7071,3388,5577,5938,7218,19150,8081,3460,3001,7474,5672,20000,5985,8086,5986,3542,7548,3260,8087,5269,6000,7657,8089,3689,7777,6001,8098,6060,3749,5357,8099,3780,6379,3784,8000,8101,4000,8126,9051,4022,9080,8129,4040,1521,2087,1433,502,2082,8181,9100,1599,465,135,4063,81,9151,2083,25565,503,8333,4064,1471,70,2086,1604,8334,21379,79,9160,2181,83,8443,9200,523,84,143,2222,4369,9390,23424,2323,27017,4443,8649,1883,175,2332,102,4444,2375,9443,179,8834,1911,9595,4567,1962,195,104,1991,323,8888,631,2021,389,636,9943,4848,113,8889,9944,2081,666,9981,8899,4949,9000,123,9999,129,789,10000,444,9001,9002,10001,992,9042,993,10243,11211,1010,12345,1023,1025. Incident counter (4h, 24h, all-time): 207, 222, 1963 |
2020-04-25 17:21:24 |
| 149.255.10.46 | attackspambots | nft/Honeypot/1180/38cdf |
2020-04-25 17:35:55 |
| 173.208.236.218 | attackbotsspam | WebFormToEmail Comment SPAM |
2020-04-25 17:39:21 |
| 122.155.204.153 | attack | Apr 24 23:47:43 NPSTNNYC01T sshd[15609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.204.153 Apr 24 23:47:44 NPSTNNYC01T sshd[15609]: Failed password for invalid user tweety from 122.155.204.153 port 59644 ssh2 Apr 24 23:50:42 NPSTNNYC01T sshd[16040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.204.153 ... |
2020-04-25 17:57:31 |
| 89.248.168.221 | attackbots | Apr 25 09:55:02 debian-2gb-nbg1-2 kernel: \[10060242.976470\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.168.221 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=46696 PROTO=TCP SPT=59822 DPT=8012 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-25 17:27:01 |
| 139.213.72.242 | attack | [portscan] Port scan |
2020-04-25 17:33:38 |
| 148.70.242.55 | attack | Apr 25 06:52:12 sso sshd[4106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.242.55 Apr 25 06:52:13 sso sshd[4106]: Failed password for invalid user sylwester from 148.70.242.55 port 53140 ssh2 ... |
2020-04-25 17:36:28 |
| 14.160.39.138 | attack | Dovecot Invalid User Login Attempt. |
2020-04-25 17:17:29 |
| 54.38.212.160 | attackbotsspam | CMS Bruteforce / WebApp Attack attempt |
2020-04-25 17:44:51 |
| 185.50.149.13 | attack | Apr 25 11:20:23 mail.srvfarm.net postfix/smtpd[964445]: warning: unknown[185.50.149.13]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 11:20:23 mail.srvfarm.net postfix/smtpd[964445]: lost connection after AUTH from unknown[185.50.149.13] Apr 25 11:20:24 mail.srvfarm.net postfix/smtpd[956687]: warning: unknown[185.50.149.13]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 11:20:24 mail.srvfarm.net postfix/smtpd[964661]: warning: unknown[185.50.149.13]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 11:20:24 mail.srvfarm.net postfix/smtpd[956687]: lost connection after AUTH from unknown[185.50.149.13] |
2020-04-25 17:29:22 |