City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.152.192.145 | attackspambots | (From whitlow.retha@gmail.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com |
2020-07-24 23:07:28 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.152.192.215
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11688
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.152.192.215. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400
;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:49:46 CST 2022
;; MSG SIZE rcvd: 108
215.192.152.107.in-addr.arpa domain name pointer 8a15f1.westemberg.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
215.192.152.107.in-addr.arpa name = 8a15f1.westemberg.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 140.143.90.154 | attack | Unauthorized connection attempt detected from IP address 140.143.90.154 to port 2220 [J] |
2020-02-02 05:12:36 |
| 140.143.30.191 | attackbots | Unauthorized connection attempt detected from IP address 140.143.30.191 to port 2220 [J] |
2020-02-02 05:13:29 |
| 175.208.87.221 | attackspam | Unauthorized connection attempt detected from IP address 175.208.87.221 to port 4567 [J] |
2020-02-02 05:17:44 |
| 49.204.238.166 | attackspambots | Honeypot attack, port: 445, PTR: broadband.actcorp.in. |
2020-02-02 05:13:43 |
| 140.143.246.53 | attackspambots | Unauthorized connection attempt detected from IP address 140.143.246.53 to port 2220 [J] |
2020-02-02 05:34:05 |
| 140.143.59.171 | attack | Unauthorized connection attempt detected from IP address 140.143.59.171 to port 2220 [J] |
2020-02-02 05:23:21 |
| 111.254.40.136 | attackspam | Honeypot attack, port: 445, PTR: 111-254-40-136.dynamic-ip.hinet.net. |
2020-02-02 05:48:38 |
| 140.143.249.246 | attackbotsspam | Unauthorized connection attempt detected from IP address 140.143.249.246 to port 2220 [J] |
2020-02-02 05:31:30 |
| 140.143.206.137 | attackspam | SSH Brute-Force reported by Fail2Ban |
2020-02-02 05:47:05 |
| 140.143.45.22 | attackbots | ... |
2020-02-02 05:26:07 |
| 140.143.240.56 | attackbotsspam | Unauthorized connection attempt detected from IP address 140.143.240.56 to port 2220 [J] |
2020-02-02 05:36:02 |
| 189.12.81.143 | attackspambots | Feb 1 18:41:45 MK-Soft-Root2 sshd[957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.12.81.143 Feb 1 18:41:47 MK-Soft-Root2 sshd[957]: Failed password for invalid user steamcmd from 189.12.81.143 port 33269 ssh2 ... |
2020-02-02 05:37:35 |
| 209.95.51.11 | attackbots | Port scan (80/tcp) |
2020-02-02 05:16:07 |
| 140.143.2.228 | attackbots | Unauthorized connection attempt detected from IP address 140.143.2.228 to port 2220 [J] |
2020-02-02 05:48:20 |
| 81.4.211.181 | attackspam | 1580563988 - 02/01/2020 14:33:08 Host: 81.4.211.181/81.4.211.181 Port: 445 TCP Blocked |
2020-02-02 05:26:46 |