城市(city): unknown
省份(region): unknown
国家(country): Netherlands (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
IP | 类型 | 评论内容 | 时间 |
---|---|---|---|
45.95.97.247 | attack | (From jessika.bean@yahoo.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/14MuVe_anmrcDQl4sZhDqzhQy0Pbhrx9A/edit. In case the document is taken down, here is a backup source https://fakecovidscam.com |
2020-07-23 23:26:58 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.95.97.186
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.95.97.186. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 21:17:34 CST 2025
;; MSG SIZE rcvd: 105
Host 186.97.95.45.in-addr.arpa not found: 2(SERVFAIL)
server can't find 45.95.97.186.in-addr.arpa: SERVFAIL
IP | 类型 | 评论内容 | 时间 |
---|---|---|---|
109.167.226.107 | attackspam | [Fri Aug 28 19:08:50.172505 2020] [:error] [pid 23509:tid 139692058076928] [client 109.167.226.107:51019] [client 109.167.226.107] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "X0jz0lHp-E@9Eo2JfVBitgAAAqU"], referer: https://karangploso.jatim.bmkg.go.id/ ... |
2020-08-28 21:31:26 |
122.202.32.70 | attack | Aug 28 15:20:58 buvik sshd[13172]: Failed password for invalid user mysql1 from 122.202.32.70 port 41210 ssh2 Aug 28 15:22:58 buvik sshd[13429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.202.32.70 user=root Aug 28 15:23:00 buvik sshd[13429]: Failed password for root from 122.202.32.70 port 33620 ssh2 ... |
2020-08-28 21:38:44 |
5.188.84.119 | attack | 0,31-01/03 [bc01/m12] PostRequest-Spammer scoring: essen |
2020-08-28 21:34:15 |
5.9.151.57 | attackspambots | 20 attempts against mh-misbehave-ban on pluto |
2020-08-28 21:36:05 |
51.83.132.101 | attackbots | Aug 28 14:04:37 OPSO sshd\[17747\]: Invalid user lz from 51.83.132.101 port 35458 Aug 28 14:04:37 OPSO sshd\[17747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.132.101 Aug 28 14:04:40 OPSO sshd\[17747\]: Failed password for invalid user lz from 51.83.132.101 port 35458 ssh2 Aug 28 14:08:23 OPSO sshd\[18405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.132.101 user=root Aug 28 14:08:25 OPSO sshd\[18405\]: Failed password for root from 51.83.132.101 port 42652 ssh2 |
2020-08-28 21:50:36 |
222.186.175.150 | attackspam | Aug 28 15:41:57 sshgateway sshd\[5155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Aug 28 15:41:59 sshgateway sshd\[5155\]: Failed password for root from 222.186.175.150 port 34324 ssh2 Aug 28 15:42:02 sshgateway sshd\[5155\]: Failed password for root from 222.186.175.150 port 34324 ssh2 |
2020-08-28 21:44:48 |
52.137.103.96 | attack | Hacked computer |
2020-08-28 21:31:40 |
171.244.139.236 | attackbots | Aug 28 14:08:22 mellenthin sshd[4865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.139.236 user=root Aug 28 14:08:24 mellenthin sshd[4865]: Failed password for invalid user root from 171.244.139.236 port 19148 ssh2 |
2020-08-28 21:54:02 |
116.196.72.196 | attackspam | Aug 28 13:08:31 l03 sshd[10595]: Invalid user monitor from 116.196.72.196 port 56778 ... |
2020-08-28 21:46:46 |
159.65.30.66 | attackbots | Aug 28 14:24:46 home sshd[2040662]: Invalid user niki from 159.65.30.66 port 60056 Aug 28 14:24:46 home sshd[2040662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.30.66 Aug 28 14:24:46 home sshd[2040662]: Invalid user niki from 159.65.30.66 port 60056 Aug 28 14:24:48 home sshd[2040662]: Failed password for invalid user niki from 159.65.30.66 port 60056 ssh2 Aug 28 14:28:56 home sshd[2042079]: Invalid user adrian from 159.65.30.66 port 38558 ... |
2020-08-28 21:49:27 |
78.11.39.43 | attackspambots | (smtpauth) Failed SMTP AUTH login from 78.11.39.43 (PL/Poland/host43.stimo.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-28 16:38:19 plain authenticator failed for ([78.11.39.43]) [78.11.39.43]: 535 Incorrect authentication data (set_id=info) |
2020-08-28 21:47:44 |
222.186.30.112 | attack | Aug 28 16:00:02 abendstille sshd\[9050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root Aug 28 16:00:04 abendstille sshd\[9050\]: Failed password for root from 222.186.30.112 port 28387 ssh2 Aug 28 16:00:10 abendstille sshd\[9366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root Aug 28 16:00:12 abendstille sshd\[9366\]: Failed password for root from 222.186.30.112 port 49766 ssh2 Aug 28 16:00:19 abendstille sshd\[9406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root ... |
2020-08-28 22:04:29 |
103.111.71.82 | attackbots | www.goldgier.de 103.111.71.82 [28/Aug/2020:14:08:37 +0200] "POST /wp-login.php HTTP/1.1" 200 8761 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.goldgier.de 103.111.71.82 [28/Aug/2020:14:08:38 +0200] "POST /wp-login.php HTTP/1.1" 200 8761 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-28 21:39:39 |
52.138.48.74 | attackbots | tcp 5903 |
2020-08-28 21:29:14 |
103.65.194.34 | attackbotsspam | Port Scan detected! ... |
2020-08-28 21:50:09 |