City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.83.25.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56014
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.83.25.25. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 13:35:52 CST 2022
;; MSG SIZE rcvd: 10525.25.83.158.in-addr.arpa domain name pointer cwis.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer desire2learn.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer eventphotos.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer cms.gcportal.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer dev.gcportal.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer www.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer scheduler.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer www.gcportal.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer parking.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer surveys.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer prodou.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer banner.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer cutv.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer m.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer wcal.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer calucenter.cab';; Truncated, retrying in TCP mode.
25.25.83.158.in-addr.arpa name = calu.edu.
25.25.83.158.in-addr.arpa name = eventphotos.calu.edu.
25.25.83.158.in-addr.arpa name = www.gcportal.calu.edu.
25.25.83.158.in-addr.arpa name = desire2learn.calu.edu.
25.25.83.158.in-addr.arpa name = m.calu.edu.
25.25.83.158.in-addr.arpa name = www.calu.edu.
25.25.83.158.in-addr.arpa name = cms.gcportal.calu.edu.
25.25.83.158.in-addr.arpa name = scheduler.calu.edu.
25.25.83.158.in-addr.arpa name = prodou.calu.edu.
25.25.83.158.in-addr.arpa name = cwis.calu.edu.
25.25.83.158.in-addr.arpa name = calucenter.calu.edu.
25.25.83.158.in-addr.arpa name = parking.calu.edu.
25.25.83.158.in-addr.arpa name = gameregister.calu.edu.
25.25.83.158.in-addr.arpa name = wcal.calu.edu.
25.25.83.158.in-addr.arpa name = cutv.calu.edu.
25.25.83.158.in-addr.arpa name = banner.calu.edu.
25.25.83.158.in-addr.arpa name = devou.calu.edu.
25.25.83.158.in-addr.arpa name = dev.calu.edu.
25.25.83.158.in-addr.arpa name = sai.calu.edu.
25.25.83.158.in-addr.arpa name = bannertest.calu.edu.
25.25.83.158.in-addr.arpa name = surveys.calu.edu.
25.25.83.158.in-addr.arpa name = dev.gcportal.calu.edu.
25.25.83.158.in-addr.arpa name = archive.calu.edu.
25.25.83.158.in-addr.arpa name = institutes.calu.edu.
25.25.83.158.in-addr.arpa name = d2l.calu.edu.
Authoritative answers can be found from:
'| IP | Type | Details | Datetime |
|---|---|---|---|
| 186.185.73.250 | attack | Unauthorized connection attempt from IP address 186.185.73.250 on Port 445(SMB) |
2019-07-11 10:27:52 |
| 92.118.37.91 | attackbotsspam | [portscan] Port scan |
2019-07-11 10:20:06 |
| 42.99.180.135 | attackspambots | Jul 10 21:18:25 minden010 sshd[14829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.99.180.135 Jul 10 21:18:27 minden010 sshd[14829]: Failed password for invalid user admin from 42.99.180.135 port 33302 ssh2 Jul 10 21:21:56 minden010 sshd[16090]: Failed password for root from 42.99.180.135 port 38624 ssh2 ... |
2019-07-11 10:53:04 |
| 185.244.25.73 | attackbots | SSH Bruteforce attack |
2019-07-11 10:47:08 |
| 187.188.231.90 | attackspambots | Unauthorized connection attempt from IP address 187.188.231.90 on Port 445(SMB) |
2019-07-11 11:02:47 |
| 200.107.241.50 | attackspambots | Unauthorized connection attempt from IP address 200.107.241.50 on Port 445(SMB) |
2019-07-11 10:48:05 |
| 206.189.108.59 | attack | Jul 10 21:00:38 icinga sshd[2299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59 Jul 10 21:00:40 icinga sshd[2299]: Failed password for invalid user admin from 206.189.108.59 port 42804 ssh2 ... |
2019-07-11 10:41:06 |
| 106.12.83.210 | attack | Automatic report - Web App Attack |
2019-07-11 10:23:46 |
| 179.33.137.117 | attackbots | 2019-07-10T20:55:29.677997cavecanem sshd[25494]: Invalid user support from 179.33.137.117 port 34658 2019-07-10T20:55:29.680829cavecanem sshd[25494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.137.117 2019-07-10T20:55:29.677997cavecanem sshd[25494]: Invalid user support from 179.33.137.117 port 34658 2019-07-10T20:55:31.255332cavecanem sshd[25494]: Failed password for invalid user support from 179.33.137.117 port 34658 ssh2 2019-07-10T20:59:11.008096cavecanem sshd[26472]: Invalid user janek from 179.33.137.117 port 43212 2019-07-10T20:59:11.010576cavecanem sshd[26472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.137.117 2019-07-10T20:59:11.008096cavecanem sshd[26472]: Invalid user janek from 179.33.137.117 port 43212 2019-07-10T20:59:13.061309cavecanem sshd[26472]: Failed password for invalid user janek from 179.33.137.117 port 43212 ssh2 2019-07-10T21:00:56.433795cavecanem sshd[27018 ... |
2019-07-11 10:18:50 |
| 186.15.64.107 | attack | Unauthorized connection attempt from IP address 186.15.64.107 on Port 445(SMB) |
2019-07-11 10:20:27 |
| 162.255.87.22 | attack | Jul 10 20:55:33 web sshd\[30770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.255.87.22 user=root Jul 10 20:55:34 web sshd\[30770\]: Failed password for root from 162.255.87.22 port 34534 ssh2 Jul 10 21:00:33 web sshd\[30869\]: Invalid user hang from 162.255.87.22 Jul 10 21:00:33 web sshd\[30869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.255.87.22 Jul 10 21:00:35 web sshd\[30869\]: Failed password for invalid user hang from 162.255.87.22 port 53968 ssh2 ... |
2019-07-11 10:16:39 |
| 88.151.249.234 | attackspambots | Jul 11 04:17:37 ns341937 sshd[24978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.151.249.234 Jul 11 04:17:39 ns341937 sshd[24978]: Failed password for invalid user webuser from 88.151.249.234 port 34696 ssh2 Jul 11 04:21:28 ns341937 sshd[25911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.151.249.234 ... |
2019-07-11 10:43:15 |
| 58.137.216.3 | attackspambots | Unauthorized connection attempt from IP address 58.137.216.3 on Port 445(SMB) |
2019-07-11 10:45:24 |
| 107.0.80.238 | attackbotsspam | Scanning random ports - tries to find possible vulnerable services |
2019-07-11 10:33:55 |
| 79.143.187.223 | attackspam | Invalid user ubuntu from 79.143.187.223 port 55800 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.143.187.223 Failed password for invalid user ubuntu from 79.143.187.223 port 55800 ssh2 Invalid user cmsadmin from 79.143.187.223 port 50450 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.143.187.223 |
2019-07-11 10:36:38 |