City: unknown
Region: unknown
Country: Australia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.197.12.210
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;113.197.12.210. IN A
;; AUTHORITY SECTION:
. 123 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 10:37:31 CST 2022
;; MSG SIZE rcvd: 107210.12.197.113.in-addr.arpa domain name pointer directory.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer ssp.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer helpdesk.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer webmail.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer tialinks.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer data.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer autodiscover.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer jobwatch.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer passwordreset.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer mobile.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer outlook.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer bms182.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer archives.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa domain name pointer portal.knox.nsw.edub';; Truncated, retrying in TCP mode.
210.12.197.113.in-addr.arpa name = webmail.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = archives.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = tialinks.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = directory.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = passwordreset.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = outlook.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = ssp.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = knoxnet.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = adfs.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = portal.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = autodiscover.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = jobwatch.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = data.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = bms182.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = remote.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = casper.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = adfs3.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = fmxpert.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = helpdesk.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = bms44.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = start.knox.nsw.edu.au.
210.12.197.113.in-addr.arpa name = mobile.knox.nsw.edu.au.
Authoritative answers can be found from:
'| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.118.38.55 | attackspam | Dec 6 16:52:39 andromeda postfix/smtpd\[30872\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure Dec 6 16:52:41 andromeda postfix/smtpd\[29161\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure Dec 6 16:52:53 andromeda postfix/smtpd\[30875\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure Dec 6 16:53:06 andromeda postfix/smtpd\[34345\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure Dec 6 16:53:08 andromeda postfix/smtpd\[30872\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure |
2019-12-06 23:54:10 |
| 115.110.207.116 | attack | $f2bV_matches |
2019-12-07 00:02:10 |
| 129.226.122.195 | attackbotsspam | SSH bruteforce |
2019-12-06 23:53:24 |
| 138.219.192.98 | attack | Dec 6 15:50:23 srv206 sshd[17622]: Invalid user guest from 138.219.192.98 ... |
2019-12-07 00:17:52 |
| 14.215.165.133 | attackbots | Dec 6 17:58:29 sauna sshd[158486]: Failed password for root from 14.215.165.133 port 54370 ssh2 ... |
2019-12-07 00:25:56 |
| 60.49.106.230 | attackbotsspam | Lines containing failures of 60.49.106.230 Dec 3 16:00:36 shared03 sshd[16282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.49.106.230 user=r.r Dec 3 16:00:37 shared03 sshd[16282]: Failed password for r.r from 60.49.106.230 port 36000 ssh2 Dec 3 16:00:37 shared03 sshd[16282]: Received disconnect from 60.49.106.230 port 36000:11: Bye Bye [preauth] Dec 3 16:00:37 shared03 sshd[16282]: Disconnected from authenticating user r.r 60.49.106.230 port 36000 [preauth] Dec 3 16:14:41 shared03 sshd[21296]: Invalid user guest from 60.49.106.230 port 43535 Dec 3 16:14:41 shared03 sshd[21296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.49.106.230 Dec 3 16:14:43 shared03 sshd[21296]: Failed password for invalid user guest from 60.49.106.230 port 43535 ssh2 Dec 3 16:14:43 shared03 sshd[21296]: Received disconnect from 60.49.106.230 port 43535:11: Bye Bye [preauth] Dec 3 16:14:43 share........ ------------------------------ |
2019-12-07 00:32:15 |
| 104.155.200.198 | attackbots | Dec 6 15:55:23 hcbbdb sshd\[15286\]: Invalid user heiz from 104.155.200.198 Dec 6 15:55:23 hcbbdb sshd\[15286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.200.155.104.bc.googleusercontent.com Dec 6 15:55:26 hcbbdb sshd\[15286\]: Failed password for invalid user heiz from 104.155.200.198 port 58186 ssh2 Dec 6 16:02:07 hcbbdb sshd\[16089\]: Invalid user liss from 104.155.200.198 Dec 6 16:02:07 hcbbdb sshd\[16089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.200.155.104.bc.googleusercontent.com |
2019-12-07 00:16:11 |
| 62.60.135.48 | attackspambots | Dec 6 16:43:10 OPSO sshd\[22110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.60.135.48 user=root Dec 6 16:43:11 OPSO sshd\[22110\]: Failed password for root from 62.60.135.48 port 40468 ssh2 Dec 6 16:49:27 OPSO sshd\[23437\]: Invalid user pascal from 62.60.135.48 port 45189 Dec 6 16:49:27 OPSO sshd\[23437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.60.135.48 Dec 6 16:49:29 OPSO sshd\[23437\]: Failed password for invalid user pascal from 62.60.135.48 port 45189 ssh2 |
2019-12-07 00:04:35 |
| 128.14.133.58 | attack | firewall-block, port(s): 8088/tcp |
2019-12-07 00:31:18 |
| 124.156.121.233 | attackbots | $f2bV_matches |
2019-12-06 23:53:43 |
| 150.161.5.10 | attackbots | Dec 6 10:43:13 TORMINT sshd\[8321\]: Invalid user dia from 150.161.5.10 Dec 6 10:43:13 TORMINT sshd\[8321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.161.5.10 Dec 6 10:43:16 TORMINT sshd\[8321\]: Failed password for invalid user dia from 150.161.5.10 port 56188 ssh2 ... |
2019-12-07 00:01:36 |
| 106.13.72.83 | attack | Dec 6 16:59:33 eventyay sshd[19374]: Failed password for backup from 106.13.72.83 port 37258 ssh2 Dec 6 17:07:56 eventyay sshd[19651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.72.83 Dec 6 17:07:58 eventyay sshd[19651]: Failed password for invalid user bokukks from 106.13.72.83 port 36400 ssh2 ... |
2019-12-07 00:12:59 |
| 159.89.177.46 | attackbotsspam | Dec 6 17:14:46 eventyay sshd[19927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.177.46 Dec 6 17:14:48 eventyay sshd[19927]: Failed password for invalid user amerigo from 159.89.177.46 port 45992 ssh2 Dec 6 17:22:04 eventyay sshd[20151]: Failed password for root from 159.89.177.46 port 55742 ssh2 ... |
2019-12-07 00:33:44 |
| 200.13.195.70 | attackbotsspam | Dec 6 11:50:36 firewall sshd[8966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70 Dec 6 11:50:36 firewall sshd[8966]: Invalid user lindamood from 200.13.195.70 Dec 6 11:50:37 firewall sshd[8966]: Failed password for invalid user lindamood from 200.13.195.70 port 33250 ssh2 ... |
2019-12-07 00:05:32 |
| 51.91.101.222 | attackbotsspam | $f2bV_matches |
2019-12-07 00:10:55 |