City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.144.30.170 | attackbots | (From whitlow.retha@gmail.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com |
2020-07-24 23:10:58 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.144.3.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58093
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.144.3.46. IN A
;; AUTHORITY SECTION:
. 271 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 00:42:56 CST 2022
;; MSG SIZE rcvd: 105Host 46.3.144.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 46.3.144.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 209.17.96.130 | attack | Automatic report - Banned IP Access |
2019-11-29 19:55:30 |
| 1.23.185.98 | attackbotsspam | Nov 29 01:17:28 aragorn sshd[1939]: Invalid user anna from 1.23.185.98 Nov 29 01:20:57 aragorn sshd[3012]: Invalid user zhang from 1.23.185.98 Nov 29 01:20:57 aragorn sshd[3010]: Invalid user zhang from 1.23.185.98 Nov 29 01:20:57 aragorn sshd[3011]: Invalid user zhang from 1.23.185.98 ... |
2019-11-29 20:02:36 |
| 210.2.171.75 | attackbotsspam | Honeypot attack, port: 23, PTR: static-host210-2-171-75.link.net.pk. |
2019-11-29 20:13:11 |
| 88.89.44.167 | attackbots | 2019-11-29T08:28:25.187308abusebot-8.cloudsearch.cf sshd\[14925\]: Invalid user barbera from 88.89.44.167 port 41632 |
2019-11-29 19:53:07 |
| 193.158.48.45 | attackbotsspam | 2019-11-29T07:18:09.751410shield sshd\[28395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.158.48.45 user=root 2019-11-29T07:18:11.980593shield sshd\[28395\]: Failed password for root from 193.158.48.45 port 51736 ssh2 2019-11-29T07:21:44.696132shield sshd\[29007\]: Invalid user rasidi from 193.158.48.45 port 59642 2019-11-29T07:21:44.701334shield sshd\[29007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.158.48.45 2019-11-29T07:21:46.112429shield sshd\[29007\]: Failed password for invalid user rasidi from 193.158.48.45 port 59642 ssh2 |
2019-11-29 20:12:41 |
| 181.41.216.140 | attack | Nov 29 13:01:28 mailserver postfix/smtpd[60511]: NOQUEUE: reject: RCPT from unknown[181.41.216.140]: 450 4.7.1 Client host rejected: cannot find your hostname, [181.41.216.140]; from=<9lyfrrn4eyw07b@nosaldesign.cz> to=<[hidden]> proto=ESMTP helo=<[181.41.216.131]> Nov 29 13:01:28 mailserver postfix/smtpd[60511]: NOQUEUE: reject: RCPT from unknown[181.41.216.140]: 450 4.7.1 Client host rejected: cannot find your hostname, [181.41.216.140]; from=<9lyfrrn4eyw07b@nosaldesign.cz> to=<[hidden]> proto=ESMTP helo=<[181.41.216.131]> Nov 29 13:01:28 mailserver postfix/smtpd[60511]: NOQUEUE: reject: RCPT from unknown[181.41.216.140]: 450 4.7.1 Client host rejected: cannot find your hostname, [181.41.216.140]; from=<9lyfrrn4eyw07b@nosaldesign.cz> to=<[hidden]> proto=ESMTP helo=<[181.41.216.131]> Nov 29 13:01:28 mailserver postfix/smtpd[60511]: NOQUEUE: reject: RCPT from unknown[181.41.216.140]: 450 4.7.1 Client host rejected: cannot find your hostname, [181.41.216.140]; from=<9lyfrrn4eyw07b@nosaldesign.cz> to=<[hidden]> |
2019-11-29 20:04:06 |
| 92.119.160.143 | attackspambots | IPS SENSOR HIT - Export of IP address from IPS sensor - Port scan detected |
2019-11-29 20:27:01 |
| 178.20.137.178 | attackspambots | SPF Fail sender not permitted to send mail for @avonet.cz / Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-11-29 20:20:33 |
| 223.99.207.250 | attack | Automatic report - Port Scan |
2019-11-29 20:11:21 |
| 182.61.32.8 | attackbots | Nov 29 07:43:20 ws19vmsma01 sshd[14788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.32.8 Nov 29 07:43:22 ws19vmsma01 sshd[14788]: Failed password for invalid user emmanuelle123456. from 182.61.32.8 port 38268 ssh2 ... |
2019-11-29 20:06:52 |
| 104.131.82.112 | attackspambots | Automatic report - SSH Brute-Force Attack |
2019-11-29 20:00:34 |
| 37.59.224.39 | attackspam | Nov 29 06:13:57 XXXXXX sshd[60430]: Invalid user pcap from 37.59.224.39 port 40363 |
2019-11-29 20:20:02 |
| 114.101.253.119 | attackspambots | SASL broute force |
2019-11-29 19:51:43 |
| 78.138.107.150 | attackbotsspam | Web App Attack |
2019-11-29 20:30:49 |
| 209.17.96.194 | attackspambots | 209.17.96.194 was recorded 13 times by 8 hosts attempting to connect to the following ports: 5061,83,6002,5902,44818,5909,2161,443,68,389,50070,2483. Incident counter (4h, 24h, all-time): 13, 53, 1167 |
2019-11-29 19:57:06 |