City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 100.21.172.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21467
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;100.21.172.128.			IN	A
;; AUTHORITY SECTION:
.			517	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 05 01:05:12 CST 2022
;; MSG SIZE  rcvd: 107
        128.172.21.100.in-addr.arpa domain name pointer ec2-100-21-172-128.us-west-2.compute.amazonaws.com.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
128.172.21.100.in-addr.arpa	name = ec2-100-21-172-128.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 104.244.73.126 | attackspam | xmlrpc attack  | 
                    2019-10-15 14:42:48 | 
| 119.18.153.154 | attackspambots | email spam  | 
                    2019-10-15 15:09:42 | 
| 138.197.189.138 | attackspambots | Oct 14 14:43:59 fv15 sshd[12792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.138 user=r.r Oct 14 14:44:01 fv15 sshd[12792]: Failed password for r.r from 138.197.189.138 port 55344 ssh2 Oct 14 14:44:01 fv15 sshd[12792]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:49:54 fv15 sshd[4094]: Failed password for invalid user fwong from 138.197.189.138 port 52014 ssh2 Oct 14 14:49:54 fv15 sshd[4094]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:53:46 fv15 sshd[8443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.138 user=r.r Oct 14 14:53:48 fv15 sshd[8443]: Failed password for r.r from 138.197.189.138 port 36594 ssh2 Oct 14 14:53:48 fv15 sshd[8443]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:57:38 fv15 sshd[11034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=........ -------------------------------  | 
                    2019-10-15 15:03:17 | 
| 111.118.177.93 | attackbots | Brute force attempt  | 
                    2019-10-15 15:06:09 | 
| 116.105.226.146 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:20.  | 
                    2019-10-15 14:59:54 | 
| 104.236.230.165 | attack | Automatic report - Banned IP Access  | 
                    2019-10-15 14:47:27 | 
| 31.173.65.142 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:23.  | 
                    2019-10-15 14:54:12 | 
| 45.95.99.230 | attackbotsspam | [Aegis] @ 2019-10-15 04:50:23 0100 -> A web attack returned code 200 (success).  | 
                    2019-10-15 14:46:11 | 
| 14.161.20.206 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:20.  | 
                    2019-10-15 14:58:57 | 
| 1.182.192.211 | attack | /download/file.php?id=171&sid=45c2995bb7350284e0c2c5b3ff651c37  | 
                    2019-10-15 15:04:02 | 
| 27.66.127.242 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:23.  | 
                    2019-10-15 14:54:29 | 
| 217.192.236.254 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:22.  | 
                    2019-10-15 14:55:00 | 
| 217.15.159.18 | attackspam | Automatic report - Port Scan Attack  | 
                    2019-10-15 15:19:19 | 
| 187.148.4.135 | attackspambots | Automatic report - Port Scan Attack  | 
                    2019-10-15 15:15:32 | 
| 207.210.200.142 | attackbots | Scanning and Vuln Attempts  | 
                    2019-10-15 14:45:33 |