City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.152.192.145 | attackspambots | (From whitlow.retha@gmail.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com |
2020-07-24 23:07:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.152.192.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5073
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.152.192.202. IN A
;; AUTHORITY SECTION:
. 471 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 11:57:09 CST 2022
;; MSG SIZE rcvd: 108202.192.152.107.in-addr.arpa domain name pointer 6e841c.westemberg.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
202.192.152.107.in-addr.arpa name = 6e841c.westemberg.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.83.17.223 | attackspam | Oct 19 02:31:04 TORMINT sshd\[7077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.17.223 user=root Oct 19 02:31:06 TORMINT sshd\[7077\]: Failed password for root from 202.83.17.223 port 42916 ssh2 Oct 19 02:35:37 TORMINT sshd\[7314\]: Invalid user par0t from 202.83.17.223 Oct 19 02:35:37 TORMINT sshd\[7314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.17.223 ... |
2019-10-19 15:03:50 |
| 66.249.66.218 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-19 15:36:43 |
| 222.186.180.8 | attackspambots | 10/19/2019-03:13:28.017855 222.186.180.8 Protocol: 6 ET SCAN Potential SSH Scan |
2019-10-19 15:14:17 |
| 213.248.39.163 | attackspam | Brute force attempt |
2019-10-19 15:10:10 |
| 222.76.212.13 | attack | Oct 19 08:21:32 vpn01 sshd[28119]: Failed password for root from 222.76.212.13 port 47732 ssh2 ... |
2019-10-19 15:07:08 |
| 81.22.45.65 | attackspam | Oct 19 09:17:24 mc1 kernel: \[2755806.223565\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.65 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=21584 PROTO=TCP SPT=42765 DPT=15877 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 09:17:31 mc1 kernel: \[2755812.309202\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.65 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=6781 PROTO=TCP SPT=42765 DPT=16203 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 09:23:00 mc1 kernel: \[2756141.881901\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.65 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=57681 PROTO=TCP SPT=42765 DPT=16224 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-19 15:30:11 |
| 128.199.178.188 | attack | 2019-10-19T03:48:23.683299hub.schaetter.us sshd\[21148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.178.188 user=root 2019-10-19T03:48:24.918142hub.schaetter.us sshd\[21148\]: Failed password for root from 128.199.178.188 port 40834 ssh2 2019-10-19T03:53:01.561408hub.schaetter.us sshd\[21196\]: Invalid user osneider from 128.199.178.188 port 50966 2019-10-19T03:53:01.570286hub.schaetter.us sshd\[21196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.178.188 2019-10-19T03:53:03.637703hub.schaetter.us sshd\[21196\]: Failed password for invalid user osneider from 128.199.178.188 port 50966 ssh2 ... |
2019-10-19 15:26:56 |
| 14.253.224.187 | attackbotsspam | Oct 19 05:35:51 *** sshd[1862450]: refused connect from 14.253.224.187 = (14.253.224.187) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.253.224.187 |
2019-10-19 15:27:30 |
| 107.170.63.221 | attackspambots | $f2bV_matches |
2019-10-19 14:58:00 |
| 213.32.92.57 | attack | Oct 19 07:13:08 bouncer sshd\[15264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.92.57 user=root Oct 19 07:13:10 bouncer sshd\[15264\]: Failed password for root from 213.32.92.57 port 34792 ssh2 Oct 19 07:19:38 bouncer sshd\[15326\]: Invalid user vt from 213.32.92.57 port 52866 ... |
2019-10-19 15:34:37 |
| 128.199.162.108 | attackbotsspam | Oct 19 05:52:43 XXX sshd[7210]: Invalid user celery from 128.199.162.108 port 44486 |
2019-10-19 15:24:30 |
| 138.68.93.14 | attack | 2019-10-19T07:03:46.284881abusebot.cloudsearch.cf sshd\[4724\]: Invalid user fhh3141 from 138.68.93.14 port 35282 |
2019-10-19 15:11:52 |
| 213.194.129.208 | attack | $f2bV_matches |
2019-10-19 15:32:39 |
| 175.169.187.246 | attackbotsspam | Oct1905:14:40server4pure-ftpd:\(\?@182.86.226.253\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:19:18server4pure-ftpd:\(\?@175.169.187.246\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:53:38server4pure-ftpd:\(\?@117.44.121.178\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:53:44server4pure-ftpd:\(\?@117.44.121.178\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:14:34server4pure-ftpd:\(\?@182.86.226.253\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:07:43server4pure-ftpd:\(\?@114.238.140.161\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:19:11server4pure-ftpd:\(\?@175.169.187.246\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:53:20server4pure-ftpd:\(\?@117.67.217.145\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:53:25server4pure-ftpd:\(\?@117.67.217.145\)[WARNING]Authenticationfailedforuser[forum-wbp]Oct1905:07:39server4pure-ftpd:\(\?@114.238.140.161\)[WARNING]Authenticationfailedforuser[forum-wbp]IPAddressesBlocked:182.86.226.253\(CN/Ch |
2019-10-19 15:01:39 |
| 60.246.158.93 | attack | Telnet Server BruteForce Attack |
2019-10-19 15:37:10 |