City: Buffalo
Region: New York
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.72.25.135 | attackspambots | (From jessika.bean@yahoo.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com |
2020-07-23 23:12:50 |
| 45.72.220.247 | attackbots | Honeypot attack, port: 5555, PTR: 45-72-220-247.cpe.teksavvy.com. |
2020-01-28 07:04:55 |
| 45.72.23.250 | attackbotsspam | NAME : NET-45-72-23-240-1 CIDR : 45.72.23.240/28 | STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack US - block certain countries :) IP: 45.72.23.250 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-08-29 00:47:38 |
| 45.72.217.22 | attackspambots | SSH/22 MH Probe, BF, Hack - |
2019-07-15 03:51:37 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.72.2.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.72.2.249. IN A
;; AUTHORITY SECTION:
. 383 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022061401 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 15 08:51:38 CST 2022
;; MSG SIZE rcvd: 104Host 249.2.72.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.2.72.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.253.42.59 | attackspambots | [2020-06-17 02:11:03] NOTICE[1273][C-00001af1] chan_sip.c: Call from '' (103.253.42.59:50378) to extension '00846213724649' rejected because extension not found in context 'public'. [2020-06-17 02:11:03] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T02:11:03.517-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00846213724649",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.253.42.59/50378",ACLName="no_extension_match" [2020-06-17 02:12:07] NOTICE[1273][C-00001af2] chan_sip.c: Call from '' (103.253.42.59:60118) to extension '00746213724649' rejected because extension not found in context 'public'. [2020-06-17 02:12:07] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T02:12:07.714-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00746213724649",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103. ... |
2020-06-17 14:27:04 |
| 134.175.110.104 | attackspambots | Jun 16 22:37:41 server1 sshd\[6727\]: Invalid user lzhang from 134.175.110.104 Jun 16 22:37:41 server1 sshd\[6727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.110.104 Jun 16 22:37:42 server1 sshd\[6727\]: Failed password for invalid user lzhang from 134.175.110.104 port 47932 ssh2 Jun 16 22:41:30 server1 sshd\[9350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.110.104 user=ubuntu Jun 16 22:41:33 server1 sshd\[9350\]: Failed password for ubuntu from 134.175.110.104 port 50276 ssh2 ... |
2020-06-17 13:51:19 |
| 157.230.132.100 | attackbots | Invalid user informix from 157.230.132.100 port 42180 |
2020-06-17 14:19:02 |
| 109.234.37.86 | attackspam | invalid user |
2020-06-17 14:04:10 |
| 81.29.214.123 | attack | (sshd) Failed SSH login from 81.29.214.123 (GB/United Kingdom/-): 5 in the last 3600 secs |
2020-06-17 14:00:51 |
| 131.196.179.139 | attack | PORT SCAN |
2020-06-17 14:25:06 |
| 128.199.92.187 | attack | Jun 17 05:01:37 localhost sshd[36349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.92.187 user=root Jun 17 05:01:39 localhost sshd[36349]: Failed password for root from 128.199.92.187 port 57650 ssh2 Jun 17 05:05:12 localhost sshd[36845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.92.187 user=root Jun 17 05:05:14 localhost sshd[36845]: Failed password for root from 128.199.92.187 port 57574 ssh2 Jun 17 05:08:45 localhost sshd[37316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.92.187 user=root Jun 17 05:08:47 localhost sshd[37316]: Failed password for root from 128.199.92.187 port 57500 ssh2 ... |
2020-06-17 13:53:28 |
| 139.162.122.110 | attack | SSH fail RA |
2020-06-17 13:58:20 |
| 122.224.217.42 | attack | prod6 ... |
2020-06-17 14:20:42 |
| 109.244.101.133 | attack | Invalid user jcf from 109.244.101.133 port 38288 |
2020-06-17 14:22:58 |
| 115.159.93.67 | attackspam | Jun 17 06:13:12 jumpserver sshd[110765]: Failed password for invalid user web1 from 115.159.93.67 port 35705 ssh2 Jun 17 06:17:12 jumpserver sshd[110799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.93.67 user=root Jun 17 06:17:14 jumpserver sshd[110799]: Failed password for root from 115.159.93.67 port 57700 ssh2 ... |
2020-06-17 14:26:00 |
| 168.197.226.235 | attack | Invalid user m from 168.197.226.235 port 48288 |
2020-06-17 14:25:35 |
| 218.92.0.248 | attackspam | Jun 17 07:54:37 server sshd[60370]: Failed none for root from 218.92.0.248 port 5714 ssh2 Jun 17 07:54:40 server sshd[60370]: Failed password for root from 218.92.0.248 port 5714 ssh2 Jun 17 07:54:43 server sshd[60370]: Failed password for root from 218.92.0.248 port 5714 ssh2 |
2020-06-17 13:57:28 |
| 218.90.138.98 | attack | Jun 17 11:40:56 dhoomketu sshd[815781]: Failed password for invalid user fedora from 218.90.138.98 port 10939 ssh2 Jun 17 11:44:51 dhoomketu sshd[815817]: Invalid user mario from 218.90.138.98 port 38148 Jun 17 11:44:51 dhoomketu sshd[815817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.90.138.98 Jun 17 11:44:51 dhoomketu sshd[815817]: Invalid user mario from 218.90.138.98 port 38148 Jun 17 11:44:54 dhoomketu sshd[815817]: Failed password for invalid user mario from 218.90.138.98 port 38148 ssh2 ... |
2020-06-17 14:16:36 |
| 88.198.22.199 | attackbotsspam | 24 attempts against mh-misbehave-ban on pluto |
2020-06-17 14:15:32 |