城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): CV. Tunas Dua Serangkai
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Commercial
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspam | Automatic report - Banned IP Access |
2020-01-03 19:48:49 |
| attack | Dec 24 10:54:41 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: Invalid user schatz from 103.94.5.42 Dec 24 10:54:41 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 Dec 24 10:54:43 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: Failed password for invalid user schatz from 103.94.5.42 port 48688 ssh2 Dec 24 10:57:59 vibhu-HP-Z238-Microtower-Workstation sshd\[6519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 user=root Dec 24 10:58:02 vibhu-HP-Z238-Microtower-Workstation sshd\[6519\]: Failed password for root from 103.94.5.42 port 47844 ssh2 ... |
2019-12-24 13:33:51 |
| attack | Dec 17 18:05:04 loxhost sshd\[12817\]: Invalid user truche from 103.94.5.42 port 37134 Dec 17 18:05:04 loxhost sshd\[12817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 Dec 17 18:05:06 loxhost sshd\[12817\]: Failed password for invalid user truche from 103.94.5.42 port 37134 ssh2 Dec 17 18:11:19 loxhost sshd\[13070\]: Invalid user shynique from 103.94.5.42 port 45938 Dec 17 18:11:19 loxhost sshd\[13070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 ... |
2019-12-18 01:30:35 |
| attack | Dec 14 17:22:43 eventyay sshd[7307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 Dec 14 17:22:45 eventyay sshd[7307]: Failed password for invalid user lisa from 103.94.5.42 port 32808 ssh2 Dec 14 17:29:36 eventyay sshd[7571]: Failed password for backup from 103.94.5.42 port 43002 ssh2 ... |
2019-12-15 00:38:39 |
| attackspambots | Dec 7 00:49:26 ny01 sshd[26791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 Dec 7 00:49:28 ny01 sshd[26791]: Failed password for invalid user mosse from 103.94.5.42 port 51398 ssh2 Dec 7 00:56:16 ny01 sshd[27950]: Failed password for root from 103.94.5.42 port 60226 ssh2 |
2019-12-07 14:08:13 |
| attackbotsspam | $f2bV_matches |
2019-12-07 07:27:00 |
| attackspambots | Dec 6 17:24:33 OPSO sshd\[30818\]: Invalid user blough from 103.94.5.42 port 34434 Dec 6 17:24:33 OPSO sshd\[30818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 Dec 6 17:24:36 OPSO sshd\[30818\]: Failed password for invalid user blough from 103.94.5.42 port 34434 ssh2 Dec 6 17:31:22 OPSO sshd\[32153\]: Invalid user mpiuser from 103.94.5.42 port 44378 Dec 6 17:31:22 OPSO sshd\[32153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 |
2019-12-07 00:31:52 |
| attackspam | $f2bV_matches |
2019-12-02 17:17:18 |
| attackspambots | Nov 30 09:37:09 vps647732 sshd[27655]: Failed password for root from 103.94.5.42 port 44832 ssh2 ... |
2019-11-30 16:52:51 |
| attackbots | Nov 30 11:25:20 areeb-Workstation sshd[16322]: Failed password for root from 103.94.5.42 port 55286 ssh2 ... |
2019-11-30 14:12:09 |
| attackspambots | SSH invalid-user multiple login try |
2019-11-26 21:29:41 |
| attack | 2019-11-11T23:16:17.406222abusebot-6.cloudsearch.cf sshd\[19832\]: Invalid user guest from 103.94.5.42 port 51732 |
2019-11-12 07:46:15 |
| attackspam | $f2bV_matches |
2019-11-09 01:19:56 |
| attackbots | $f2bV_matches |
2019-11-07 21:56:38 |
| attackbotsspam | $f2bV_matches |
2019-11-05 02:09:41 |
| attackbots | Automatic report - Banned IP Access |
2019-11-02 07:50:33 |
| attackspambots | Oct 28 17:27:15 server sshd\[26955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 user=root Oct 28 17:27:17 server sshd\[26955\]: Failed password for root from 103.94.5.42 port 35570 ssh2 Oct 28 17:32:17 server sshd\[28096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 user=root Oct 28 17:32:19 server sshd\[28096\]: Failed password for root from 103.94.5.42 port 50272 ssh2 Oct 28 17:36:51 server sshd\[29162\]: Invalid user rosaleen from 103.94.5.42 Oct 28 17:36:51 server sshd\[29162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 ... |
2019-10-29 00:23:37 |
| attackbots | (sshd) Failed SSH login from 103.94.5.42 (ID/Indonesia/West Java/Sukabumi/-/[AS9341 PT INDONESIA COMNETS PLUS]): 1 in the last 3600 secs |
2019-09-23 07:03:14 |
| attackspambots | Aug 25 15:10:17 web9 sshd\[8571\]: Invalid user db2fenc1 from 103.94.5.42 Aug 25 15:10:17 web9 sshd\[8571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 Aug 25 15:10:19 web9 sshd\[8571\]: Failed password for invalid user db2fenc1 from 103.94.5.42 port 54166 ssh2 Aug 25 15:15:40 web9 sshd\[10134\]: Invalid user sip from 103.94.5.42 Aug 25 15:15:40 web9 sshd\[10134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 |
2019-08-26 09:29:29 |
| attackbots | $f2bV_matches |
2019-08-22 19:31:17 |
| attack | Aug 15 15:45:04 web9 sshd\[3399\]: Invalid user teamspeak from 103.94.5.42 Aug 15 15:45:04 web9 sshd\[3399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 Aug 15 15:45:07 web9 sshd\[3399\]: Failed password for invalid user teamspeak from 103.94.5.42 port 42852 ssh2 Aug 15 15:51:41 web9 sshd\[4888\]: Invalid user serv_fun from 103.94.5.42 Aug 15 15:51:41 web9 sshd\[4888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42 |
2019-08-16 09:57:55 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.94.5.250 | attack | Unauthorized connection attempt from IP address 103.94.5.250 on Port 445(SMB) |
2020-01-14 05:12:19 |
| 103.94.56.152 | attack | Automatic report - Port Scan Attack |
2019-12-12 22:13:55 |
| 103.94.5.18 | attackspambots | "Account brute force using dictionary attack against Exchange Online" |
2019-08-06 06:56:42 |
| 103.94.5.210 | attackspambots | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08050931) |
2019-08-05 17:08:59 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.94.5.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65497
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.94.5.42. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019081503 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 16 09:57:50 CST 2019
;; MSG SIZE rcvd: 115Host 42.5.94.103.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 42.5.94.103.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 120.201.125.204 | attackbotsspam | 2020-05-04T08:12:34.409862vps751288.ovh.net sshd\[6890\]: Invalid user admin from 120.201.125.204 port 59376 2020-05-04T08:12:34.421619vps751288.ovh.net sshd\[6890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204 2020-05-04T08:12:36.564281vps751288.ovh.net sshd\[6890\]: Failed password for invalid user admin from 120.201.125.204 port 59376 ssh2 2020-05-04T08:17:25.386095vps751288.ovh.net sshd\[6899\]: Invalid user upload from 120.201.125.204 port 54681 2020-05-04T08:17:25.392921vps751288.ovh.net sshd\[6899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204 |
2020-05-04 16:42:06 |
| 222.186.175.150 | attackbotsspam | May 4 10:14:21 minden010 sshd[22183]: Failed password for root from 222.186.175.150 port 26082 ssh2 May 4 10:14:31 minden010 sshd[22183]: Failed password for root from 222.186.175.150 port 26082 ssh2 May 4 10:14:33 minden010 sshd[22183]: Failed password for root from 222.186.175.150 port 26082 ssh2 May 4 10:14:33 minden010 sshd[22183]: error: maximum authentication attempts exceeded for root from 222.186.175.150 port 26082 ssh2 [preauth] ... |
2020-05-04 17:02:14 |
| 222.186.175.148 | attackbotsspam | May 4 09:59:30 minden010 sshd[16540]: Failed password for root from 222.186.175.148 port 59856 ssh2 May 4 09:59:33 minden010 sshd[16540]: Failed password for root from 222.186.175.148 port 59856 ssh2 May 4 09:59:36 minden010 sshd[16540]: Failed password for root from 222.186.175.148 port 59856 ssh2 May 4 09:59:39 minden010 sshd[16540]: Failed password for root from 222.186.175.148 port 59856 ssh2 ... |
2020-05-04 17:11:48 |
| 182.61.41.203 | attackbotsspam | May 4 10:29:34 inter-technics sshd[9325]: Invalid user webdev from 182.61.41.203 port 60618 May 4 10:29:34 inter-technics sshd[9325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.41.203 May 4 10:29:34 inter-technics sshd[9325]: Invalid user webdev from 182.61.41.203 port 60618 May 4 10:29:36 inter-technics sshd[9325]: Failed password for invalid user webdev from 182.61.41.203 port 60618 ssh2 May 4 10:33:01 inter-technics sshd[10229]: Invalid user msi from 182.61.41.203 port 45106 ... |
2020-05-04 16:37:44 |
| 111.93.4.174 | attackbotsspam | 2020-05-04T03:24:16.5436451495-001 sshd[8991]: Invalid user krx from 111.93.4.174 port 39912 2020-05-04T03:24:19.2825581495-001 sshd[8991]: Failed password for invalid user krx from 111.93.4.174 port 39912 ssh2 2020-05-04T03:28:37.0225301495-001 sshd[9123]: Invalid user ftpadmin from 111.93.4.174 port 49376 2020-05-04T03:28:37.0256401495-001 sshd[9123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.4.174 2020-05-04T03:28:37.0225301495-001 sshd[9123]: Invalid user ftpadmin from 111.93.4.174 port 49376 2020-05-04T03:28:39.2576691495-001 sshd[9123]: Failed password for invalid user ftpadmin from 111.93.4.174 port 49376 ssh2 ... |
2020-05-04 16:31:10 |
| 196.46.192.73 | attack | 2020-05-04T03:52:23.436381shield sshd\[7181\]: Invalid user madison from 196.46.192.73 port 40016 2020-05-04T03:52:23.440742shield sshd\[7181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.46.192.73 2020-05-04T03:52:25.233020shield sshd\[7181\]: Failed password for invalid user madison from 196.46.192.73 port 40016 ssh2 2020-05-04T03:53:34.765940shield sshd\[7387\]: Invalid user test4 from 196.46.192.73 port 45888 2020-05-04T03:53:34.770196shield sshd\[7387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.46.192.73 |
2020-05-04 16:39:43 |
| 180.250.135.11 | attack | May 4 08:00:25 ip-172-31-61-156 sshd[7899]: Failed password for invalid user dev from 180.250.135.11 port 58444 ssh2 May 4 08:00:23 ip-172-31-61-156 sshd[7899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.135.11 May 4 08:00:23 ip-172-31-61-156 sshd[7899]: Invalid user dev from 180.250.135.11 May 4 08:00:25 ip-172-31-61-156 sshd[7899]: Failed password for invalid user dev from 180.250.135.11 port 58444 ssh2 May 4 08:04:52 ip-172-31-61-156 sshd[8101]: Invalid user penis from 180.250.135.11 ... |
2020-05-04 16:30:40 |
| 122.51.100.64 | attackbots | " " |
2020-05-04 16:34:00 |
| 182.123.206.221 | attackspam | Port probing on unauthorized port 23 |
2020-05-04 16:59:51 |
| 79.124.62.86 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 63 - port: 60 proto: TCP cat: Misc Attack |
2020-05-04 16:53:37 |
| 210.97.40.34 | attack | May 4 10:37:37 gw1 sshd[21815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.97.40.34 May 4 10:37:39 gw1 sshd[21815]: Failed password for invalid user memo from 210.97.40.34 port 43882 ssh2 ... |
2020-05-04 16:42:38 |
| 130.162.64.72 | attackbots | May 4 04:43:52 pi sshd[5001]: Failed password for root from 130.162.64.72 port 51609 ssh2 |
2020-05-04 16:55:07 |
| 122.51.188.20 | attackspambots | prod3 ... |
2020-05-04 17:10:26 |
| 113.21.114.172 | attackbots | 24 packets to ports 465 587 |
2020-05-04 16:56:16 |
| 106.12.47.131 | attackbots | 05/03/2020-23:52:48.470882 106.12.47.131 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-05-04 17:14:50 |