City: Skudai
Region: Johor
Country: Malaysia
Internet Service Provider: Universiti Teknologi Malaysia
Hostname: unknown
Organization: unknown
Usage Type: University/College/School
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | 1582648525 - 02/25/2020 17:35:25 Host: 161.139.102.62/161.139.102.62 Port: 445 TCP Blocked |
2020-02-26 05:10:20 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 161.139.102.162 | attack | Unauthorized connection attempt from IP address 161.139.102.162 on Port 445(SMB) |
2020-07-15 19:59:42 |
| 161.139.102.132 | attackbotsspam | Unauthorized connection attempt detected from IP address 161.139.102.132 to port 445 |
2019-12-18 14:08:23 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 161.139.102.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33239
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;161.139.102.62. IN A
;; AUTHORITY SECTION:
. 595 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020022501 1800 900 604800 86400
;; Query time: 245 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 26 05:10:17 CST 2020
;; MSG SIZE rcvd: 118Host 62.102.139.161.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 62.102.139.161.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 108.211.226.221 | attackbotsspam | Mar 24 02:58:01 markkoudstaal sshd[28340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.211.226.221 Mar 24 02:58:03 markkoudstaal sshd[28340]: Failed password for invalid user wusifan from 108.211.226.221 port 19044 ssh2 Mar 24 03:03:48 markkoudstaal sshd[29034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.211.226.221 |
2020-03-24 10:06:31 |
| 83.14.199.49 | attackspam | Mar 24 00:57:13 firewall sshd[9246]: Invalid user tz from 83.14.199.49 Mar 24 00:57:15 firewall sshd[9246]: Failed password for invalid user tz from 83.14.199.49 port 53388 ssh2 Mar 24 00:59:57 firewall sshd[9383]: Invalid user dhcp from 83.14.199.49 ... |
2020-03-24 12:14:53 |
| 51.91.108.15 | attack | bruteforce detected |
2020-03-24 10:03:21 |
| 106.13.130.208 | attackbotsspam | Mar 24 01:03:22 silence02 sshd[16057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208 Mar 24 01:03:24 silence02 sshd[16057]: Failed password for invalid user cassy from 106.13.130.208 port 46516 ssh2 Mar 24 01:06:43 silence02 sshd[16198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208 |
2020-03-24 10:07:25 |
| 80.211.177.243 | attackspam | sshd jail - ssh hack attempt |
2020-03-24 10:17:48 |
| 63.82.49.175 | attackbots | Mar 24 00:22:23 web01 postfix/smtpd[7559]: connect from tempt.kaagaan.com[63.82.49.175] Mar 24 00:22:23 web01 policyd-spf[8166]: None; identhostnamey=helo; client-ip=63.82.49.175; helo=tempt.teedasa.com; envelope-from=x@x Mar 24 00:22:23 web01 policyd-spf[8166]: Pass; identhostnamey=mailfrom; client-ip=63.82.49.175; helo=tempt.teedasa.com; envelope-from=x@x Mar x@x Mar 24 00:22:23 web01 postfix/smtpd[7559]: disconnect from tempt.kaagaan.com[63.82.49.175] Mar 24 00:22:33 web01 postfix/smtpd[7559]: connect from tempt.kaagaan.com[63.82.49.175] Mar 24 00:22:34 web01 policyd-spf[8166]: None; identhostnamey=helo; client-ip=63.82.49.175; helo=tempt.teedasa.com; envelope-from=x@x Mar 24 00:22:34 web01 policyd-spf[8166]: Pass; identhostnamey=mailfrom; client-ip=63.82.49.175; helo=tempt.teedasa.com; envelope-from=x@x Mar x@x Mar 24 00:22:34 web01 postfix/smtpd[7559]: disconnect from tempt.kaagaan.com[63.82.49.175] Mar 24 00:23:04 web01 postfix/smtpd[7559]: connect from tempt.kaag........ ------------------------------- |
2020-03-24 10:12:19 |
| 61.78.152.99 | attackspam | $f2bV_matches |
2020-03-24 12:12:35 |
| 140.143.155.172 | attackspam | Mar 23 13:31:41 cumulus sshd[27362]: Invalid user px from 140.143.155.172 port 33370 Mar 23 13:31:41 cumulus sshd[27362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.155.172 Mar 23 13:31:43 cumulus sshd[27362]: Failed password for invalid user px from 140.143.155.172 port 33370 ssh2 Mar 23 13:31:43 cumulus sshd[27362]: Received disconnect from 140.143.155.172 port 33370:11: Bye Bye [preauth] Mar 23 13:31:43 cumulus sshd[27362]: Disconnected from 140.143.155.172 port 33370 [preauth] Mar 23 13:43:31 cumulus sshd[28124]: Connection closed by 140.143.155.172 port 53366 [preauth] Mar 23 13:47:27 cumulus sshd[28322]: Invalid user jessie from 140.143.155.172 port 43602 Mar 23 13:47:27 cumulus sshd[28322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.155.172 Mar 23 13:47:28 cumulus sshd[28322]: Failed password for invalid user jessie from 140.143.155.172 port 43602 ssh2 Mar 23........ ------------------------------- |
2020-03-24 10:14:09 |
| 58.57.8.198 | attackbots | Brute-force attempt banned |
2020-03-24 09:57:04 |
| 49.88.112.111 | attackbotsspam | Mar 24 06:55:21 gw1 sshd[26475]: Failed password for root from 49.88.112.111 port 18122 ssh2 ... |
2020-03-24 10:01:37 |
| 111.229.25.191 | attackspam | SSH Login Bruteforce |
2020-03-24 10:16:25 |
| 183.88.17.5 | attackspambots | Mar 24 04:31:21 XXX sshd[41206]: Invalid user pg_admin from 183.88.17.5 port 42752 |
2020-03-24 12:09:14 |
| 52.185.174.213 | attackbotsspam | 5x Failed Password |
2020-03-24 10:10:35 |
| 182.61.184.155 | attack | Mar 24 04:51:22 h1745522 sshd[17051]: Invalid user www from 182.61.184.155 port 43554 Mar 24 04:51:22 h1745522 sshd[17051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.184.155 Mar 24 04:51:22 h1745522 sshd[17051]: Invalid user www from 182.61.184.155 port 43554 Mar 24 04:51:24 h1745522 sshd[17051]: Failed password for invalid user www from 182.61.184.155 port 43554 ssh2 Mar 24 04:55:37 h1745522 sshd[17503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.184.155 user=proxy Mar 24 04:55:38 h1745522 sshd[17503]: Failed password for proxy from 182.61.184.155 port 57674 ssh2 Mar 24 04:59:53 h1745522 sshd[17835]: Invalid user sd from 182.61.184.155 port 43550 Mar 24 04:59:53 h1745522 sshd[17835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.184.155 Mar 24 04:59:53 h1745522 sshd[17835]: Invalid user sd from 182.61.184.155 port 43550 Mar 24 04:59 ... |
2020-03-24 12:16:46 |
| 220.121.58.55 | attack | Mar 24 03:07:30 XXX sshd[41289]: Invalid user mussolini from 220.121.58.55 port 32448 |
2020-03-24 12:08:21 |