City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.254.128.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1165
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.254.128.211.		IN	A
;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:32:08 CST 2022
;; MSG SIZE  rcvd: 108
        211.128.254.104.in-addr.arpa domain name pointer 104-254-128-211.static.hvvc.us.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
211.128.254.104.in-addr.arpa	name = 104-254-128-211.static.hvvc.us.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 101.53.100.115 | attack | 445/tcp 445/tcp 445/tcp... [2019-05-12/07-06]17pkt,1pt.(tcp)  | 
                    2019-07-07 16:10:56 | 
| 128.199.165.124 | attack | 8545/tcp 8545/tcp 8545/tcp... [2019-05-07/07-06]300pkt,1pt.(tcp)  | 
                    2019-07-07 16:12:49 | 
| 103.245.11.171 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2019-06-06/07-07]4pkt,1pt.(tcp)  | 
                    2019-07-07 16:25:00 | 
| 112.175.238.149 | attackspam | Invalid user lightdm from 112.175.238.149 port 43604  | 
                    2019-07-07 15:57:28 | 
| 142.93.122.185 | attackspambots | web-1 [ssh] SSH Attack  | 
                    2019-07-07 15:36:52 | 
| 74.208.24.240 | attackspambots | 445/tcp 445/tcp [2019-07-05/06]2pkt  | 
                    2019-07-07 16:14:55 | 
| 201.150.89.168 | attackbotsspam | Jul 6 23:49:28 web1 postfix/smtpd[31851]: warning: unknown[201.150.89.168]: SASL PLAIN authentication failed: authentication failure ...  | 
                    2019-07-07 15:58:58 | 
| 46.200.157.241 | attackspam | port scan and connect, tcp 23 (telnet)  | 
                    2019-07-07 16:20:12 | 
| 59.115.153.200 | attack | firewall-block, port(s): 23/tcp  | 
                    2019-07-07 15:43:06 | 
| 103.224.248.19 | attackspam | 10 attempts against mh-pma-try-ban on wood.magehost.pro  | 
                    2019-07-07 16:17:28 | 
| 62.78.81.28 | attack | Port scan on 3 port(s): 1024 8000 8080  | 
                    2019-07-07 15:35:48 | 
| 122.165.149.75 | attackspam | Jul 7 07:53:38 nextcloud sshd\[23173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.165.149.75 user=root Jul 7 07:53:39 nextcloud sshd\[23173\]: Failed password for root from 122.165.149.75 port 59766 ssh2 Jul 7 07:59:19 nextcloud sshd\[4286\]: Invalid user dev from 122.165.149.75 Jul 7 07:59:19 nextcloud sshd\[4286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.165.149.75 ...  | 
                    2019-07-07 15:54:34 | 
| 118.99.99.23 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 00:10:01,606 INFO [shellcode_manager] (118.99.99.23) no match, writing hexdump (e15ba999f3d1ca066f938b9d5e28bbd3 :2254784) - MS17010 (EternalBlue)  | 
                    2019-07-07 15:34:09 | 
| 139.162.123.29 | attack | " "  | 
                    2019-07-07 16:10:05 | 
| 118.27.7.0 | attackspambots | Jul 7 08:34:47 dedicated sshd[25672]: Failed password for elasticsearch from 118.27.7.0 port 48770 ssh2 Jul 7 08:37:14 dedicated sshd[25911]: Invalid user ubuntu from 118.27.7.0 port 46004 Jul 7 08:37:14 dedicated sshd[25911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.7.0 Jul 7 08:37:14 dedicated sshd[25911]: Invalid user ubuntu from 118.27.7.0 port 46004 Jul 7 08:37:15 dedicated sshd[25911]: Failed password for invalid user ubuntu from 118.27.7.0 port 46004 ssh2  | 
                    2019-07-07 16:05:20 |