City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.144.30.170 | attackbots | (From whitlow.retha@gmail.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com |
2020-07-24 23:10:58 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.144.3.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55559
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.144.3.125. IN A
;; AUTHORITY SECTION:
. 214 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 00:42:39 CST 2022
;; MSG SIZE rcvd: 106Host 125.3.144.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 125.3.144.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 195.54.201.12 | attackbots | Jun 11 15:41:41 ws26vmsma01 sshd[159322]: Failed password for root from 195.54.201.12 port 34842 ssh2 ... |
2020-06-12 02:36:14 |
| 46.38.145.253 | attack | Jun 11 20:47:23 srv01 postfix/smtpd\[24945\]: warning: unknown\[46.38.145.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 11 20:47:40 srv01 postfix/smtpd\[24945\]: warning: unknown\[46.38.145.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 11 20:47:49 srv01 postfix/smtpd\[25947\]: warning: unknown\[46.38.145.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 11 20:48:32 srv01 postfix/smtpd\[25715\]: warning: unknown\[46.38.145.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 11 20:49:07 srv01 postfix/smtpd\[25947\]: warning: unknown\[46.38.145.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-06-12 02:49:48 |
| 124.254.15.68 | attack | Fail2Ban Ban Triggered (2) |
2020-06-12 02:56:13 |
| 159.203.127.37 | attackspam | HTTP_USER_AGENT Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com) |
2020-06-12 02:40:58 |
| 45.77.39.4 | attack | HTTP_USER_AGENT Mozilla/5.0 zgrab/0.x |
2020-06-12 02:51:34 |
| 64.225.58.236 | attackspambots | Jun 11 20:27:31 vps sshd[1046098]: Failed password for invalid user jboss from 64.225.58.236 port 53656 ssh2 Jun 11 20:30:32 vps sshd[12054]: Invalid user florian from 64.225.58.236 port 54896 Jun 11 20:30:32 vps sshd[12054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.58.236 Jun 11 20:30:35 vps sshd[12054]: Failed password for invalid user florian from 64.225.58.236 port 54896 ssh2 Jun 11 20:33:38 vps sshd[22012]: Invalid user system from 64.225.58.236 port 56144 ... |
2020-06-12 02:47:22 |
| 35.202.177.121 | attack | Jun 11 20:18:00 vps647732 sshd[22584]: Failed password for root from 35.202.177.121 port 36438 ssh2 Jun 11 20:23:18 vps647732 sshd[22654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.202.177.121 ... |
2020-06-12 02:27:45 |
| 85.209.0.100 | attackbots | Bruteforce detected by fail2ban |
2020-06-12 02:30:52 |
| 202.125.137.70 | attackspambots | Honeypot attack, port: 445, PTR: khi77.pie.net.pk. |
2020-06-12 02:31:55 |
| 171.103.141.46 | attack | Honeypot attack, port: 445, PTR: 171-103-141-46.static.asianet.co.th. |
2020-06-12 02:44:31 |
| 132.232.29.210 | attackbotsspam | (sshd) Failed SSH login from 132.232.29.210 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 11 17:43:51 s1 sshd[19124]: Invalid user chenlihong from 132.232.29.210 port 57552 Jun 11 17:43:53 s1 sshd[19124]: Failed password for invalid user chenlihong from 132.232.29.210 port 57552 ssh2 Jun 11 18:00:18 s1 sshd[19445]: Invalid user gituser from 132.232.29.210 port 58608 Jun 11 18:00:20 s1 sshd[19445]: Failed password for invalid user gituser from 132.232.29.210 port 58608 ssh2 Jun 11 18:03:21 s1 sshd[19502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.29.210 user=root |
2020-06-12 02:22:43 |
| 118.24.114.22 | attack | Jun 11 16:09:33 legacy sshd[23265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.114.22 Jun 11 16:09:35 legacy sshd[23265]: Failed password for invalid user A@1234 from 118.24.114.22 port 45502 ssh2 Jun 11 16:13:27 legacy sshd[23326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.114.22 ... |
2020-06-12 02:46:52 |
| 106.12.86.56 | attack | 2020-06-10 23:00:12 server sshd[92557]: Failed password for invalid user root from 106.12.86.56 port 59958 ssh2 |
2020-06-12 02:20:16 |
| 195.54.160.211 | attackspambots |
|
2020-06-12 02:42:10 |
| 119.191.193.169 | attackspam | Port scan detected on ports: 40390[TCP], 40390[TCP], 40390[TCP] |
2020-06-12 02:57:18 |