City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.125.94.163 | attackbotsspam | Unauthorized access detected from black listed ip! |
2020-08-03 18:25:53 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '202.125.94.0 - 202.125.95.255'
% Abuse contact for '202.125.94.0 - 202.125.95.255' is 'abuse@gunadarma.ac.id'
inetnum: 202.125.94.0 - 202.125.95.255
netname: GUNADARMA-ID
descr: Gunadarma University
descr: University / Direct Member IDNIC
descr: Jl. Margonda Raya 100
descr: Depok 16424- Jawa Barat
country: ID
admin-c: MM948-AP
tech-c: MM948-AP
remarks: Send Spam & Abuse Reports to abuse@gunadarma.ac.id
mnt-by: MNT-APJII-ID
mnt-routes: MAINT-ID-GUNADARMA
status: ASSIGNED PORTABLE
mnt-irt: IRT-GUNADARMA-ID
last-modified: 2011-10-25T06:04:58Z
source: APNIC
irt: IRT-GUNADARMA-ID
address: Gunadarma University
address: Jl. Margonda Raya 100
address: Depok 16424- Jawa Barat
e-mail: abuse@gunadarma.ac.id
abuse-mailbox: abuse@gunadarma.ac.id
admin-c: MM948-AP
tech-c: MM948-AP
auth: # Filtered
mnt-by: MAINT-ID-GUNADARMA
last-modified: 2026-03-09T15:38:34Z
source: APNIC
person: M Akbar Marwan
nic-hdl: MM948-AP
e-mail: akbar@staff.gunadarma.ac.id
address: NOC Gunadarma University
address: Jl. Margonda Raya 100
address: Depok 16424 - Jawa Barat
phone: +62-21-78881070
fax-no: +62-21-78881071
country: ID
mnt-by: MAINT-ID-GUNADARMA
last-modified: 2010-03-10T07:44:01Z
source: APNIC
% Information related to '202.125.94.0/23AS46042'
route: 202.125.94.0/23
descr: Route BACKBONE GUNADARMA UNIVERSITY
descr: Jl.Margonda Raya 100
descr: Pondok Cina
descr: Depok
country: ID
origin: AS46042
mnt-by: MAINT-ID-GUNADARMA
last-modified: 2011-12-06T01:46:02Z
source: APNIC
% Information related to '202.125.94.0 - 202.125.95.255'
inetnum: 202.125.94.0 - 202.125.95.255
netname: GUNADARMA-ID
descr: Gunadarma University
descr: University / Direct Member IDNIC
descr: Jl. Margonda Raya 100
descr: Depok 16424- Jawa Barat
country: ID
admin-c: MM948-AP
tech-c: MM948-AP
remarks: Send Spam & Abuse Reports to abuse@gunadarma.ac.id
mnt-by: MNT-APJII-ID
mnt-routes: MAINT-ID-GUNADARMA
status: ASSIGNED PORTABLE
mnt-irt: IRT-GUNADARMA-ID
last-modified: 2011-10-25T06:04:58Z
source: IDNIC
irt: IRT-GUNADARMA-ID
address: Gunadarma University
address: Jl. Margonda Raya 100
address: Depok 16424- Jawa Barat
e-mail: abuse@gunadarma.ac.id
abuse-mailbox: abuse@gunadarma.ac.id
admin-c: MM948-AP
tech-c: MM948-AP
auth: # Filtered
mnt-by: MAINT-ID-GUNADARMA
last-modified: 2011-10-25T06:01:23Z
source: IDNIC
person: M Akbar Marwan
nic-hdl: MM948-AP
e-mail: akbar@staff.gunadarma.ac.id
address: NOC Gunadarma University
address: Jl. Margonda Raya 100
address: Depok 16424 - Jawa Barat
phone: +62-21-78881070
fax-no: +62-21-78881071
country: ID
mnt-by: MAINT-ID-GUNADARMA
last-modified: 2010-03-10T07:44:01Z
source: IDNIC
% Information related to '202.125.94.0/23AS46042'
route: 202.125.94.0/23
descr: Route BACKBONE GUNADARMA UNIVERSITY
descr: Jl.Margonda Raya 100
descr: Pondok Cina
descr: Depok
country: ID
origin: AS46042
mnt-by: MAINT-ID-GUNADARMA
last-modified: 2011-12-06T01:46:02Z
source: IDNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.125.94.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58081
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;202.125.94.185. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026080901 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 10 02:00:02 CST 2026
;; MSG SIZE rcvd: 107
b'Host 185.94.125.202.in-addr.arpa not found: 2(SERVFAIL)
'
server can't find 202.125.94.185.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.112.19.168 | attack | 30.06.2019 02:15:39 SSH access blocked by firewall |
2019-06-30 11:42:19 |
| 81.22.45.251 | attackspambots | Port scan on 9 port(s): 5900 5901 5916 5919 5920 5921 5922 5924 5925 |
2019-06-30 11:23:13 |
| 46.209.45.58 | attackspam | 2019-06-29T18:48:12.879067abusebot-8.cloudsearch.cf sshd\[31867\]: Invalid user gerald from 46.209.45.58 port 44324 |
2019-06-30 11:13:09 |
| 188.166.246.46 | attackspam | leo_www |
2019-06-30 11:19:13 |
| 45.81.148.171 | attackspambots | SpamReport |
2019-06-30 11:43:21 |
| 35.243.80.22 | attackbots | Jun 30 05:20:09 itv-usvr-02 sshd[14623]: Invalid user nagios from 35.243.80.22 port 57318 Jun 30 05:20:09 itv-usvr-02 sshd[14623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.243.80.22 Jun 30 05:20:09 itv-usvr-02 sshd[14623]: Invalid user nagios from 35.243.80.22 port 57318 Jun 30 05:20:12 itv-usvr-02 sshd[14623]: Failed password for invalid user nagios from 35.243.80.22 port 57318 ssh2 Jun 30 05:23:00 itv-usvr-02 sshd[14629]: Invalid user ie from 35.243.80.22 port 59880 |
2019-06-30 11:26:35 |
| 23.129.64.161 | attack | ssh failed login |
2019-06-30 11:29:10 |
| 14.18.191.206 | attackbots | port scan and connect, tcp 1433 (ms-sql-s) |
2019-06-30 11:31:55 |
| 128.199.47.148 | attack | Invalid user croix from 128.199.47.148 port 49978 |
2019-06-30 11:20:11 |
| 119.29.89.200 | attackbotsspam | Jun 30 03:35:52 apollo sshd\[716\]: Invalid user platnosci from 119.29.89.200Jun 30 03:35:54 apollo sshd\[716\]: Failed password for invalid user platnosci from 119.29.89.200 port 51832 ssh2Jun 30 03:45:30 apollo sshd\[756\]: Invalid user earthdrilling from 119.29.89.200 ... |
2019-06-30 11:36:10 |
| 95.48.54.106 | attack | Jun 30 06:06:47 itv-usvr-01 sshd[24565]: Invalid user jquery from 95.48.54.106 Jun 30 06:06:47 itv-usvr-01 sshd[24565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.48.54.106 Jun 30 06:06:47 itv-usvr-01 sshd[24565]: Invalid user jquery from 95.48.54.106 Jun 30 06:06:49 itv-usvr-01 sshd[24565]: Failed password for invalid user jquery from 95.48.54.106 port 51136 ssh2 Jun 30 06:09:50 itv-usvr-01 sshd[24838]: Invalid user jiong from 95.48.54.106 |
2019-06-30 11:46:02 |
| 159.89.172.215 | attackspambots | Jun 30 04:27:16 vps691689 sshd[14807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.172.215 Jun 30 04:27:18 vps691689 sshd[14807]: Failed password for invalid user vbox from 159.89.172.215 port 52230 ssh2 ... |
2019-06-30 11:29:50 |
| 68.48.240.245 | attackspam | 2019-06-29T20:47:26.607463scmdmz1 sshd\[24024\]: Invalid user usuario2 from 68.48.240.245 port 37220 2019-06-29T20:47:26.611056scmdmz1 sshd\[24024\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-68-48-240-245.hsd1.mi.comcast.net 2019-06-29T20:47:28.177255scmdmz1 sshd\[24024\]: Failed password for invalid user usuario2 from 68.48.240.245 port 37220 ssh2 ... |
2019-06-30 11:34:52 |
| 129.204.83.104 | attack | 29.06.2019 18:47:39 Admin application scan (phpmyadmin|webadmin|dbadmin|dbmanager|sqlitemanager|mysqldumper) |
2019-06-30 11:31:32 |
| 51.75.169.169 | attackspam | [SatJun2920:48:28.0520392019][:error][pid29926:tid47129061897984][client51.75.169.169:52558][client51.75.169.169]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"206"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"archivioamarca.ch"][uri"/administrator/index.php"][unique_id"XReyfJfcWKlFwIVqgC7m5wAAAI0"][SatJun2920:48:28.3314512019][:error][pid29922:tid47129072404224][client51.75.169.169:52712][client51.75.169.169]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"206"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICA |
2019-06-30 11:08:49 |