City: unknown
Region: unknown
Country: Australia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.92.97.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40187
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;137.92.97.52. IN A
;; AUTHORITY SECTION:
. 359 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:51:41 CST 2022
;; MSG SIZE rcvd: 10552.97.92.137.in-addr.arpa domain name pointer wtest.canberra.edu.au.
52.97.92.137.in-addr.arpa domain name pointer freshwater.canberra.edu.au.
52.97.92.137.in-addr.arpa domain name pointer teaching.canberra.edu.au.
52.97.92.137.in-addr.arpa domain name pointer www.chooseuc.edu.au.
52.97.92.137.in-addr.arpa domain name pointer chooseuc.edu.au.
52.97.92.137.in-addr.arpa domain name pointer canberra.edu.au.
52.97.92.137.in-addr.arpa domain name pointer www.canberra.edu.au.
52.97.92.137.in-addr.arpa domain name pointer ausrivas.canberra.edu.au.
52.97.92.137.in-addr.arpa domain name pointer isd.canberra.edu.au.
52.97.92.137.in-addr.arpa domain name pointer wdev.canberra.edu.au.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
52.97.92.137.in-addr.arpa name = canberra.edu.au.
52.97.92.137.in-addr.arpa name = www.canberra.edu.au.
52.97.92.137.in-addr.arpa name = ausrivas.canberra.edu.au.
52.97.92.137.in-addr.arpa name = isd.canberra.edu.au.
52.97.92.137.in-addr.arpa name = wdev.canberra.edu.au.
52.97.92.137.in-addr.arpa name = wtest.canberra.edu.au.
52.97.92.137.in-addr.arpa name = freshwater.canberra.edu.au.
52.97.92.137.in-addr.arpa name = teaching.canberra.edu.au.
52.97.92.137.in-addr.arpa name = www.chooseuc.edu.au.
52.97.92.137.in-addr.arpa name = chooseuc.edu.au.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 187.131.187.30 | attackbots | Unauthorized connection attempt detected from IP address 187.131.187.30 to port 81 |
2020-01-02 06:25:05 |
| 161.81.153.130 | attackspam | Fail2Ban Ban Triggered |
2020-01-02 06:47:20 |
| 176.36.255.12 | attackspambots | Honeypot attack, port: 81, PTR: host-176-36-255-12.la.net.ua. |
2020-01-02 06:51:31 |
| 105.112.114.111 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 01-01-2020 14:40:14. |
2020-01-02 06:49:32 |
| 67.229.206.84 | attackbotsspam | port scan and connect, tcp 8888 (sun-answerbook) |
2020-01-02 06:54:47 |
| 115.77.186.182 | attack | Honeypot attack, port: 81, PTR: adsl.viettel.vn. |
2020-01-02 06:54:11 |
| 186.103.223.10 | attackbotsspam | Jan 1 23:37:26 dev0-dcde-rnet sshd[19152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.103.223.10 Jan 1 23:37:27 dev0-dcde-rnet sshd[19152]: Failed password for invalid user 888888 from 186.103.223.10 port 51185 ssh2 Jan 1 23:54:40 dev0-dcde-rnet sshd[19556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.103.223.10 |
2020-01-02 06:58:12 |
| 150.136.155.136 | attackbots | Jan 1 15:02:59 zeus sshd[28149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.155.136 Jan 1 15:03:01 zeus sshd[28149]: Failed password for invalid user shunsuke from 150.136.155.136 port 16948 ssh2 Jan 1 15:05:03 zeus sshd[28215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.155.136 Jan 1 15:05:05 zeus sshd[28215]: Failed password for invalid user keyboard from 150.136.155.136 port 26142 ssh2 |
2020-01-02 06:29:41 |
| 123.247.24.46 | attack | Jan 1 15:40:14 debian-2gb-nbg1-2 kernel: \[148945.907212\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=123.247.24.46 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=45 ID=1450 PROTO=TCP SPT=10093 DPT=26 WINDOW=55653 RES=0x00 SYN URGP=0 |
2020-01-02 06:50:59 |
| 167.99.127.72 | attack | DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0 |
2020-01-02 06:43:26 |
| 188.166.44.186 | attackspambots | Jan 1 23:27:27 jane sshd[28671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.44.186 Jan 1 23:27:29 jane sshd[28671]: Failed password for invalid user kosaka from 188.166.44.186 port 60736 ssh2 ... |
2020-01-02 06:28:07 |
| 180.244.234.29 | attackspam | Unauthorised access (Jan 1) SRC=180.244.234.29 LEN=52 TTL=117 ID=1251 DF TCP DPT=445 WINDOW=8192 SYN |
2020-01-02 06:43:00 |
| 110.93.237.228 | attackspambots | Honeypot attack, port: 445, PTR: tw237-static228.tw1.com. |
2020-01-02 06:27:15 |
| 3.136.112.84 | attack | Forbidden directory scan :: 2020/01/01 14:40:54 [error] 9759#9759: *13373 access forbidden by rule, client: 3.136.112.84, server: [censored_2], request: "HEAD /~onixpw/cfg/AppleID.logln.myaccount.JAZ2834HQSD7Q7SD6Q6SD67QSD5Q7S6D6QSD76QSD67Q67D6QQSJDQLJF HTTP/1.1", host: "[censored_2]" |
2020-01-02 06:25:38 |
| 5.135.176.206 | attack | 5x Failed Password |
2020-01-02 06:59:51 |