城市(city): Yogyakarta
省份(region): Yogyakarta
国家(country): Indonesia
运营商(isp): Kantor Sistem Informasi Universitas Atma Jaya Yogyakarta
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): University/College/School
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackbots | suspicious action Wed, 04 Mar 2020 10:37:26 -0300 |
2020-03-04 22:04:33 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.14.92.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37234
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.14.92.90. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019082401 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 25 10:35:20 CST 2019
;; MSG SIZE rcvd: 11690.92.14.202.in-addr.arpa domain name pointer ip-90-92-net.uajy.ac.id.
90.92.14.202.in-addr.arpa domain name pointer alfonsus.uajy.ac.id.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
90.92.14.202.in-addr.arpa name = ip-90-92-net.uajy.ac.id.
90.92.14.202.in-addr.arpa name = alfonsus.uajy.ac.id.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 178.128.14.26 | attack | Aug 17 17:39:28 sachi sshd\[23268\]: Invalid user git from 178.128.14.26 Aug 17 17:39:28 sachi sshd\[23268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.14.26 Aug 17 17:39:31 sachi sshd\[23268\]: Failed password for invalid user git from 178.128.14.26 port 55068 ssh2 Aug 17 17:44:05 sachi sshd\[23720\]: Invalid user storm from 178.128.14.26 Aug 17 17:44:05 sachi sshd\[23720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.14.26 |
2019-08-18 12:55:35 |
| 45.160.222.1 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-08-18 13:08:23 |
| 164.68.112.133 | attack | Aug 18 06:24:44 lnxmail61 sshd[15026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.112.133 |
2019-08-18 12:33:28 |
| 182.61.13.142 | attackbots | Aug 17 18:21:52 tdfoods sshd\[5581\]: Invalid user frontdesk from 182.61.13.142 Aug 17 18:21:52 tdfoods sshd\[5581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.13.142 Aug 17 18:21:54 tdfoods sshd\[5581\]: Failed password for invalid user frontdesk from 182.61.13.142 port 56824 ssh2 Aug 17 18:27:09 tdfoods sshd\[6044\]: Invalid user sony from 182.61.13.142 Aug 17 18:27:09 tdfoods sshd\[6044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.13.142 |
2019-08-18 12:28:28 |
| 185.137.233.226 | attack | Port scan |
2019-08-18 12:43:13 |
| 41.41.14.210 | attackspambots | Honeypot attack, port: 445, PTR: host-41.41.14.210.tedata.net. |
2019-08-18 12:22:49 |
| 222.186.52.89 | attackspambots | Aug 18 06:21:50 ns341937 sshd[30781]: Failed password for root from 222.186.52.89 port 40954 ssh2 Aug 18 06:21:53 ns341937 sshd[30781]: Failed password for root from 222.186.52.89 port 40954 ssh2 Aug 18 06:21:55 ns341937 sshd[30781]: Failed password for root from 222.186.52.89 port 40954 ssh2 ... |
2019-08-18 12:27:27 |
| 81.168.20.68 | attackspambots | Honeypot attack, port: 23, PTR: fansystems-co-uk.mail.protection.outlook.com. |
2019-08-18 13:04:18 |
| 52.23.235.188 | attack | Port scan on 1 port(s): 53 |
2019-08-18 12:59:14 |
| 52.202.1.177 | attackspambots | Aug 18 06:12:32 legacy sshd[18414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.202.1.177 Aug 18 06:12:34 legacy sshd[18414]: Failed password for invalid user 0987654321 from 52.202.1.177 port 15086 ssh2 Aug 18 06:16:48 legacy sshd[18558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.202.1.177 ... |
2019-08-18 12:47:22 |
| 78.188.44.78 | attack | 23/tcp [2019-08-18]1pkt |
2019-08-18 12:30:36 |
| 187.10.126.181 | attackspambots | 23/tcp [2019-08-18]1pkt |
2019-08-18 12:27:10 |
| 131.108.244.9 | attackbotsspam | $f2bV_matches |
2019-08-18 12:57:49 |
| 104.236.72.182 | attackbots | Splunk® : port scan detected: Aug 18 00:32:40 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=104.236.72.182 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=252 ID=18454 PROTO=TCP SPT=56468 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-08-18 12:38:03 |
| 94.23.198.73 | attack | 2019-08-18T05:00:24.952089abusebot-7.cloudsearch.cf sshd\[7015\]: Invalid user admin from 94.23.198.73 port 50298 |
2019-08-18 13:10:01 |