City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.54.152.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21019
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.54.152.30. IN A
;; AUTHORITY SECTION:
. 60 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050300 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 03 17:54:34 CST 2023
;; MSG SIZE rcvd: 10530.152.54.64.in-addr.arpa domain name pointer thoracicsurgeryresidency.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer surgerybiostat.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer kornblithlab.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer mackenzielab.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer vascularsurgeryresidency.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer lobularbreastcancer.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer surgery.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer sammannlab.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer makerlab.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer thebetterlab.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer eastbayresidentportal.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer wanglabsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer topsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa domain name pointer residentresearchsurgery.ucsf.edu.
30.152.54.64.in-Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
30.152.54.64.in-addr.arpa name = topsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = residentresearchsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = weaverlabsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = staging10surgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = staging11surgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = staging12surgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = itlsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = hospitalistsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = endocrinelabsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = clinicaltrialssurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = cblsurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = modelhomesurgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = staging43surgery.ucsf.edu.
30.152.54.64.in-addr.arpa name = staging41surgery.ucsf.edu.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.233.183.155 | attackbotsspam | 2020-09-06T19:15:29.956053mail.broermann.family sshd[9502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.183.155 user=root 2020-09-06T19:15:31.412674mail.broermann.family sshd[9502]: Failed password for root from 49.233.183.155 port 53580 ssh2 2020-09-06T19:20:52.892381mail.broermann.family sshd[9668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.183.155 user=root 2020-09-06T19:20:54.358931mail.broermann.family sshd[9668]: Failed password for root from 49.233.183.155 port 51814 ssh2 2020-09-06T19:26:11.766281mail.broermann.family sshd[9862]: Invalid user admin from 49.233.183.155 port 50056 ... |
2020-09-07 06:19:32 |
| 185.13.64.84 | attackbotsspam | Detected by ModSecurity. Request URI: /wp-login.php |
2020-09-07 06:34:08 |
| 116.231.72.26 | attack | Lines containing failures of 116.231.72.26 (max 1000) Sep 1 00:51:03 efa3 sshd[15657]: Invalid user test1 from 116.231.72.26 port 37884 Sep 1 00:51:03 efa3 sshd[15657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.231.72.26 Sep 1 00:51:05 efa3 sshd[15657]: Failed password for invalid user test1 from 116.231.72.26 port 37884 ssh2 Sep 1 00:51:05 efa3 sshd[15657]: Received disconnect from 116.231.72.26 port 37884:11: Bye Bye [preauth] Sep 1 00:51:05 efa3 sshd[15657]: Disconnected from 116.231.72.26 port 37884 [preauth] Sep 1 00:55:11 efa3 sshd[16590]: Invalid user al from 116.231.72.26 port 49808 Sep 1 00:55:11 efa3 sshd[16590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.231.72.26 Sep 1 00:55:13 efa3 sshd[16590]: Failed password for invalid user al from 116.231.72.26 port 49808 ssh2 Sep 1 00:55:13 efa3 sshd[16590]: Received disconnect from 116.231.72.26 port 49808:11: By........ ------------------------------ |
2020-09-07 06:34:26 |
| 124.156.55.20 | attackbots | port scan and connect, tcp 143 (imap) |
2020-09-07 06:40:50 |
| 122.152.217.9 | attack | Sep 6 22:36:24 rancher-0 sshd[1467580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.217.9 user=root Sep 6 22:36:27 rancher-0 sshd[1467580]: Failed password for root from 122.152.217.9 port 39198 ssh2 ... |
2020-09-07 06:27:47 |
| 218.2.197.240 | attackspam | Sep 6 17:34:48 onepixel sshd[2193105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.2.197.240 user=root Sep 6 17:34:50 onepixel sshd[2193105]: Failed password for root from 218.2.197.240 port 38538 ssh2 Sep 6 17:36:17 onepixel sshd[2193312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.2.197.240 user=root Sep 6 17:36:19 onepixel sshd[2193312]: Failed password for root from 218.2.197.240 port 57500 ssh2 Sep 6 17:37:46 onepixel sshd[2193494]: Invalid user lrios from 218.2.197.240 port 48230 |
2020-09-07 06:47:23 |
| 139.59.84.29 | attack | 2020-09-06T16:46:24.205608morrigan.ad5gb.com sshd[1712718]: Failed password for root from 139.59.84.29 port 43970 ssh2 2020-09-06T16:46:26.557635morrigan.ad5gb.com sshd[1712718]: Disconnected from authenticating user root 139.59.84.29 port 43970 [preauth] |
2020-09-07 06:28:59 |
| 69.114.116.254 | attackbots | Honeypot attack, port: 5555, PTR: ool-457274fe.dyn.optonline.net. |
2020-09-07 06:26:15 |
| 46.125.249.51 | attackspambots | Port Scan: TCP/443 |
2020-09-07 06:14:04 |
| 5.188.86.168 | attackbotsspam | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-06T21:00:21Z |
2020-09-07 06:50:55 |
| 222.186.175.215 | attack | Sep 6 22:43:45 scw-tender-jepsen sshd[17694]: Failed password for root from 222.186.175.215 port 10756 ssh2 Sep 6 22:43:49 scw-tender-jepsen sshd[17694]: Failed password for root from 222.186.175.215 port 10756 ssh2 |
2020-09-07 06:45:33 |
| 89.109.35.233 | attackspam | Honeypot attack, port: 445, PTR: 89-109-35-233.static.mts-nn.ru. |
2020-09-07 06:30:10 |
| 108.190.31.236 | attack | Honeypot attack, port: 81, PTR: 108-190-31-236.biz.bhn.net. |
2020-09-07 06:32:06 |
| 222.124.17.227 | attackspam | Sep 6 18:51:49 firewall sshd[5060]: Failed password for root from 222.124.17.227 port 44254 ssh2 Sep 6 18:54:13 firewall sshd[5129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.124.17.227 user=root Sep 6 18:54:15 firewall sshd[5129]: Failed password for root from 222.124.17.227 port 49804 ssh2 ... |
2020-09-07 06:46:24 |
| 49.235.158.195 | attackbots | $f2bV_matches |
2020-09-07 06:26:43 |