City: San Antonio
Region: Texas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.144.30.170 | attackbots | (From whitlow.retha@gmail.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com |
2020-07-24 23:10:58 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.144.3.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22281
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.144.3.100. IN A
;; AUTHORITY SECTION:
. 208 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040600 1800 900 604800 86400
;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 06 23:27:12 CST 2022
;; MSG SIZE rcvd: 106Host 100.3.144.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 100.3.144.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.118.37.83 | attack | Apr 28 01:11:37 debian-2gb-nbg1-2 kernel: \[10288026.287289\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.83 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=45894 PROTO=TCP SPT=58261 DPT=5050 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-28 07:55:57 |
| 200.70.56.204 | attack | Apr 28 01:53:54 OPSO sshd\[2146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.70.56.204 user=root Apr 28 01:53:56 OPSO sshd\[2146\]: Failed password for root from 200.70.56.204 port 46726 ssh2 Apr 28 01:58:02 OPSO sshd\[3229\]: Invalid user ttest from 200.70.56.204 port 44106 Apr 28 01:58:02 OPSO sshd\[3229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.70.56.204 Apr 28 01:58:04 OPSO sshd\[3229\]: Failed password for invalid user ttest from 200.70.56.204 port 44106 ssh2 |
2020-04-28 08:06:01 |
| 95.65.1.93 | attackbotsspam | failed_logins |
2020-04-28 07:57:07 |
| 130.18.237.35 | attack | X-Gm-Message-State: AGi0PuZpqK6do53/fWNDf4rKJjk1DNh38sqFWwKfEOsWtzQvxcXR6+OZ
s2QBc/5sT7OoR/IyVstzPzHe8Ur0fiG1bcAd1XKqHbjikT7frQ==
X-Google-Smtp-Source: APiQypINK0TjStzrTbJCjeaxXMuSBPZ8ZpJndmVW5FxKPT5P5RfZocbeJh45YCsozmHD8rar9VUaINdtHMmj
X-Received: by 2002:aa7:8429:: with SMTP id q9mr19647190pfn.205.1587923190437;
Sun, 26 Apr 2020 10:46:30 -0700 (PDT)
Return-Path: |
2020-04-28 07:58:52 |
| 202.168.71.146 | attackbotsspam | 2020-04-28T03:58:15.576849shield sshd\[30614\]: Invalid user safia from 202.168.71.146 port 54734 2020-04-28T03:58:15.580347shield sshd\[30614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.168.71.146 2020-04-28T03:58:17.737332shield sshd\[30614\]: Failed password for invalid user safia from 202.168.71.146 port 54734 ssh2 2020-04-28T04:00:40.445117shield sshd\[31013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.168.71.146 user=root 2020-04-28T04:00:42.175481shield sshd\[31013\]: Failed password for root from 202.168.71.146 port 56936 ssh2 |
2020-04-28 12:02:48 |
| 61.97.218.31 | attackspambots | 20/4/27@16:09:33: FAIL: Alarm-Telnet address from=61.97.218.31 ... |
2020-04-28 07:53:04 |
| 222.186.175.23 | attack | Apr 28 03:59:50 scw-6657dc sshd[12019]: Failed password for root from 222.186.175.23 port 53199 ssh2 Apr 28 03:59:50 scw-6657dc sshd[12019]: Failed password for root from 222.186.175.23 port 53199 ssh2 Apr 28 03:59:52 scw-6657dc sshd[12019]: Failed password for root from 222.186.175.23 port 53199 ssh2 ... |
2020-04-28 12:03:39 |
| 104.218.48.196 | attack | " " |
2020-04-28 08:07:08 |
| 222.186.175.154 | attackbots | DATE:2020-04-28 01:47:55, IP:222.186.175.154, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) |
2020-04-28 07:55:23 |
| 198.211.115.85 | attackspambots | [Wed Apr 22 08:16:50 2020] - DDoS Attack From IP: 198.211.115.85 Port: 50416 |
2020-04-28 07:58:36 |
| 100.0.197.18 | attack | $f2bV_matches |
2020-04-28 12:11:05 |
| 2.153.212.195 | attackspambots | Apr 28 05:51:11 legacy sshd[9360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.153.212.195 Apr 28 05:51:13 legacy sshd[9360]: Failed password for invalid user financeiro from 2.153.212.195 port 56176 ssh2 Apr 28 05:55:16 legacy sshd[9499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.153.212.195 ... |
2020-04-28 12:01:50 |
| 31.217.196.201 | attackspam | Port probing on unauthorized port 2757 |
2020-04-28 12:10:21 |
| 180.66.207.67 | attackspambots | Apr 28 05:43:43 mout sshd[17028]: Failed password for invalid user zeus from 180.66.207.67 port 57168 ssh2 Apr 28 05:55:10 mout sshd[18128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.66.207.67 user=root Apr 28 05:55:12 mout sshd[18128]: Failed password for root from 180.66.207.67 port 51589 ssh2 |
2020-04-28 12:06:02 |
| 94.45.115.216 | spamattackproxy | hacking my email and social acc's etc |
2020-04-28 09:51:55 |