Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: B2 Net Solutions Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
(From jessika.bean@yahoo.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com
2020-07-23 23:12:50
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.72.25.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63968
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.72.25.135.			IN	A

;; AUTHORITY SECTION:
.			158	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072300 1800 900 604800 86400

;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 23 23:12:46 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 135.25.72.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 135.25.72.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.12.217.204 attackbots
Sep 12 09:59:49 root sshd[19838]: Failed password for root from 106.12.217.204 port 40692 ssh2
Sep 12 10:01:15 root sshd[21097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.217.204 
...
2020-09-12 17:00:22
42.236.10.70 attackspambots
Automatic report - Banned IP Access
2020-09-12 17:01:52
106.54.109.98 attack
Sep 11 18:52:15 sshgateway sshd\[27106\]: Invalid user sybase from 106.54.109.98
Sep 11 18:52:15 sshgateway sshd\[27106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.109.98
Sep 11 18:52:17 sshgateway sshd\[27106\]: Failed password for invalid user sybase from 106.54.109.98 port 52422 ssh2
2020-09-12 16:59:34
91.134.240.130 attackspambots
5x Failed Password
2020-09-12 17:10:33
183.136.222.142 attackbotsspam
detected by Fail2Ban
2020-09-12 17:03:18
193.112.108.11 attackspam
Sep 12 08:55:31 root sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.108.11 
Sep 12 08:55:33 root sshd[28931]: Failed password for invalid user es from 193.112.108.11 port 34118 ssh2
...
2020-09-12 17:12:57
5.36.17.179 attackspambots
Unauthorised access (Sep 11) SRC=5.36.17.179 LEN=52 TTL=116 ID=31342 DF TCP DPT=445 WINDOW=8192 SYN
2020-09-12 17:15:49
122.116.56.81 attack
 TCP (SYN) 122.116.56.81:25591 -> port 23, len 40
2020-09-12 17:25:41
116.75.160.137 attackbotsspam
Tried our host z.
2020-09-12 17:24:03
60.243.231.74 attackspambots
" "
2020-09-12 17:17:27
176.123.7.208 attackspambots
Sep 12 09:40:51 root sshd[3618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.123.7.208 
Sep 12 09:46:35 root sshd[8510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.123.7.208 
...
2020-09-12 17:23:24
127.0.0.1 attackbots
Test Connectivity
2020-09-12 17:20:58
222.186.173.201 attack
Sep 12 10:27:01 ajax sshd[18286]: Failed password for root from 222.186.173.201 port 48172 ssh2
Sep 12 10:27:04 ajax sshd[18286]: Failed password for root from 222.186.173.201 port 48172 ssh2
2020-09-12 17:30:00
149.56.44.47 attack
Automatic report - Banned IP Access
2020-09-12 17:07:41
170.246.206.193 attack
Sep 11 18:20:24 mail.srvfarm.net postfix/smtpd[3890715]: warning: unknown[170.246.206.193]: SASL PLAIN authentication failed: 
Sep 11 18:20:25 mail.srvfarm.net postfix/smtpd[3890715]: lost connection after AUTH from unknown[170.246.206.193]
Sep 11 18:24:15 mail.srvfarm.net postfix/smtps/smtpd[3892331]: warning: unknown[170.246.206.193]: SASL PLAIN authentication failed: 
Sep 11 18:24:15 mail.srvfarm.net postfix/smtps/smtpd[3892331]: lost connection after AUTH from unknown[170.246.206.193]
Sep 11 18:26:16 mail.srvfarm.net postfix/smtpd[3893261]: warning: unknown[170.246.206.193]: SASL PLAIN authentication failed:
2020-09-12 17:34:49

Recently Reported IPs

123.177.179.110 109.222.225.70 42.116.183.234 123.231.138.152
200.171.181.100 72.138.161.41 191.229.252.149 19.82.166.245
93.62.114.182 8.10.212.8 0.34.116.122 205.39.230.90
219.247.95.16 26.240.251.0 56.43.232.117 7.150.212.114
35.233.149.132 223.102.13.18 114.179.197.7 179.34.165.186