City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.17.207.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9046
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.17.207.71.			IN	A
;; AUTHORITY SECTION:
.			366	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:40:29 CST 2022
;; MSG SIZE  rcvd: 106
        Host 71.207.17.104.in-addr.arpa. not found: 3(NXDOMAIN)
        Server:		183.60.83.19
Address:	183.60.83.19#53
** server can't find 71.207.17.104.in-addr.arpa: NXDOMAIN
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 185.153.196.126 | attackspambots | [MK-Root1] Blocked by UFW  | 
                    2020-09-07 02:29:34 | 
| 190.201.186.59 | attack | Honeypot attack, port: 445, PTR: 190-201-186-59.dyn.dsl.cantv.net.  | 
                    2020-09-07 02:57:47 | 
| 103.40.172.173 | attackspambots | Honeypot attack, port: 5555, PTR: PTR record not found  | 
                    2020-09-07 02:42:18 | 
| 220.134.66.62 | attackbotsspam | 
  | 
                    2020-09-07 02:23:24 | 
| 83.146.97.13 | attackbots | Icarus honeypot on github  | 
                    2020-09-07 02:55:16 | 
| 175.213.178.217 | attack | Honeypot attack, port: 81, PTR: PTR record not found  | 
                    2020-09-07 02:54:22 | 
| 47.197.51.67 | attackspam | Sep 6 15:02:31 mx sshd[9870]: Failed password for root from 47.197.51.67 port 3660 ssh2  | 
                    2020-09-07 02:26:48 | 
| 190.39.103.139 | attack | Honeypot attack, port: 445, PTR: PTR record not found  | 
                    2020-09-07 03:01:36 | 
| 45.116.233.62 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found  | 
                    2020-09-07 02:31:45 | 
| 190.207.85.114 | attack | Lines containing failures of 190.207.85.114 Sep 4 00:08:53 kopano sshd[25501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.207.85.114 user=r.r Sep 4 00:08:55 kopano sshd[25501]: Failed password for r.r from 190.207.85.114 port 39034 ssh2 Sep 4 00:09:10 kopano sshd[25501]: Received disconnect from 190.207.85.114 port 39034:11: Bye Bye [preauth] Sep 4 00:09:10 kopano sshd[25501]: Disconnected from authenticating user r.r 190.207.85.114 port 39034 [preauth] Sep 4 00:33:55 kopano sshd[13899]: Connection reset by 190.207.85.114 port 42496 [preauth] Sep 4 00:43:45 kopano sshd[22014]: Connection closed by 190.207.85.114 port 42628 [preauth] Sep 4 00:53:47 kopano sshd[30029]: Invalid user tom from 190.207.85.114 port 42742 Sep 4 00:53:47 kopano sshd[30029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.207.85.114 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.  | 
                    2020-09-07 02:34:56 | 
| 116.98.140.102 | attack | 81/tcp [2020-09-06]1pkt  | 
                    2020-09-07 02:32:08 | 
| 118.25.79.56 | attack | Sep 6 13:33:24 Tower sshd[12770]: Connection from 118.25.79.56 port 53886 on 192.168.10.220 port 22 rdomain "" Sep 6 13:33:26 Tower sshd[12770]: Failed password for root from 118.25.79.56 port 53886 ssh2 Sep 6 13:33:26 Tower sshd[12770]: Received disconnect from 118.25.79.56 port 53886:11: Bye Bye [preauth] Sep 6 13:33:26 Tower sshd[12770]: Disconnected from authenticating user root 118.25.79.56 port 53886 [preauth]  | 
                    2020-09-07 02:46:44 | 
| 1.54.251.14 | attackspambots | 1599324266 - 09/05/2020 18:44:26 Host: 1.54.251.14/1.54.251.14 Port: 445 TCP Blocked  | 
                    2020-09-07 02:37:14 | 
| 51.75.18.215 | attackbotsspam | *Port Scan* detected from 51.75.18.215 (FR/France/Hauts-de-France/Gravelines/215.ip-51-75-18.eu). 4 hits in the last 266 seconds  | 
                    2020-09-07 02:47:36 | 
| 50.252.47.29 | attackspam | Honeypot attack, port: 81, PTR: 50-252-47-29-static.hfc.comcastbusiness.net.  | 
                    2020-09-07 02:26:25 |