City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.83.25.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56014
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.83.25.25. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 13:35:52 CST 2022
;; MSG SIZE rcvd: 10525.25.83.158.in-addr.arpa domain name pointer cwis.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer desire2learn.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer eventphotos.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer cms.gcportal.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer dev.gcportal.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer www.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer scheduler.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer www.gcportal.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer parking.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer surveys.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer prodou.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer banner.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer cutv.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer m.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer wcal.calu.edu.
25.25.83.158.in-addr.arpa domain name pointer calucenter.cab';; Truncated, retrying in TCP mode.
25.25.83.158.in-addr.arpa name = calu.edu.
25.25.83.158.in-addr.arpa name = eventphotos.calu.edu.
25.25.83.158.in-addr.arpa name = www.gcportal.calu.edu.
25.25.83.158.in-addr.arpa name = desire2learn.calu.edu.
25.25.83.158.in-addr.arpa name = m.calu.edu.
25.25.83.158.in-addr.arpa name = www.calu.edu.
25.25.83.158.in-addr.arpa name = cms.gcportal.calu.edu.
25.25.83.158.in-addr.arpa name = scheduler.calu.edu.
25.25.83.158.in-addr.arpa name = prodou.calu.edu.
25.25.83.158.in-addr.arpa name = cwis.calu.edu.
25.25.83.158.in-addr.arpa name = calucenter.calu.edu.
25.25.83.158.in-addr.arpa name = parking.calu.edu.
25.25.83.158.in-addr.arpa name = gameregister.calu.edu.
25.25.83.158.in-addr.arpa name = wcal.calu.edu.
25.25.83.158.in-addr.arpa name = cutv.calu.edu.
25.25.83.158.in-addr.arpa name = banner.calu.edu.
25.25.83.158.in-addr.arpa name = devou.calu.edu.
25.25.83.158.in-addr.arpa name = dev.calu.edu.
25.25.83.158.in-addr.arpa name = sai.calu.edu.
25.25.83.158.in-addr.arpa name = bannertest.calu.edu.
25.25.83.158.in-addr.arpa name = surveys.calu.edu.
25.25.83.158.in-addr.arpa name = dev.gcportal.calu.edu.
25.25.83.158.in-addr.arpa name = archive.calu.edu.
25.25.83.158.in-addr.arpa name = institutes.calu.edu.
25.25.83.158.in-addr.arpa name = d2l.calu.edu.
Authoritative answers can be found from:
'| IP | Type | Details | Datetime |
|---|---|---|---|
| 91.121.67.107 | attack | 2019-11-05T08:57:47.029245host3.slimhost.com.ua sshd[2659601]: Failed password for invalid user neo from 91.121.67.107 port 56324 ssh2 2019-11-05T09:01:22.135634host3.slimhost.com.ua sshd[2664044]: Invalid user factorio from 91.121.67.107 port 37670 2019-11-05T09:01:22.141195host3.slimhost.com.ua sshd[2664044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns300976.ip-91-121-67.eu 2019-11-05T09:01:22.135634host3.slimhost.com.ua sshd[2664044]: Invalid user factorio from 91.121.67.107 port 37670 2019-11-05T09:01:23.846801host3.slimhost.com.ua sshd[2664044]: Failed password for invalid user factorio from 91.121.67.107 port 37670 ssh2 ... |
2019-11-05 16:02:08 |
| 106.53.72.119 | attackbotsspam | $f2bV_matches |
2019-11-05 15:56:38 |
| 182.72.178.114 | attack | 3x Failed Password |
2019-11-05 15:48:07 |
| 195.58.123.109 | attack | Nov 4 21:25:47 sachi sshd\[19186\]: Invalid user solrs from 195.58.123.109 Nov 4 21:25:47 sachi sshd\[19186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host.195.58.123.109.bitcom.se Nov 4 21:25:49 sachi sshd\[19186\]: Failed password for invalid user solrs from 195.58.123.109 port 35282 ssh2 Nov 4 21:29:38 sachi sshd\[19484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host.195.58.123.109.bitcom.se user=root Nov 4 21:29:39 sachi sshd\[19484\]: Failed password for root from 195.58.123.109 port 45814 ssh2 |
2019-11-05 15:46:41 |
| 46.38.144.146 | attackbotsspam | 2019-11-05T08:55:17.336937mail01 postfix/smtpd[8431]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-05T08:55:24.459110mail01 postfix/smtpd[10207]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-05T08:55:36.253707mail01 postfix/smtpd[20667]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-05 15:57:00 |
| 111.230.249.77 | attackbots | Nov 5 08:13:01 markkoudstaal sshd[15231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.249.77 Nov 5 08:13:03 markkoudstaal sshd[15231]: Failed password for invalid user ascend from 111.230.249.77 port 44020 ssh2 Nov 5 08:18:47 markkoudstaal sshd[15694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.249.77 |
2019-11-05 15:54:46 |
| 167.71.143.84 | attack | 2019-11-05 01:28:15,656 fail2ban.actions [1798]: NOTICE [sshd] Ban 167.71.143.84 |
2019-11-05 16:18:41 |
| 180.167.134.194 | attackbots | $f2bV_matches |
2019-11-05 16:05:26 |
| 197.237.27.81 | attackbotsspam | TCP Port Scanning |
2019-11-05 15:47:15 |
| 163.172.133.109 | attack | Nov 5 07:28:21 MK-Soft-Root1 sshd[17241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.133.109 Nov 5 07:28:23 MK-Soft-Root1 sshd[17241]: Failed password for invalid user mc from 163.172.133.109 port 35836 ssh2 ... |
2019-11-05 16:14:13 |
| 116.196.83.174 | attackspam | Nov 5 07:28:02 MK-Soft-Root1 sshd[17168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.83.174 Nov 5 07:28:05 MK-Soft-Root1 sshd[17168]: Failed password for invalid user applmgr from 116.196.83.174 port 59892 ssh2 ... |
2019-11-05 16:25:00 |
| 116.233.187.224 | attackbots | TCP Port Scanning |
2019-11-05 16:10:48 |
| 79.143.30.199 | attackbotsspam | Fail2Ban Ban Triggered SMTP Abuse Attempt |
2019-11-05 15:49:42 |
| 45.162.13.208 | attackspambots | Automatic report - Banned IP Access |
2019-11-05 16:01:05 |
| 213.180.193.89 | attackbotsspam | Web spam, spoofing, web form attack |
2019-11-05 16:22:21 |