City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2001:8d8:100f:f000::2e2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34688
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2001:8d8:100f:f000::2e2.	IN	A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Feb 19 00:35:56 CST 2022
;; MSG SIZE  rcvd: 52
'
        2.e.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.f.f.0.0.1.8.d.8.0.1.0.0.2.ip6.arpa domain name pointer 2001-08d8-100f-f000-0000-0000-0000-02e2.elastic-ssl.ui-r.com.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
2.e.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.f.f.0.0.1.8.d.8.0.1.0.0.2.ip6.arpa	name = 2001-08d8-100f-f000-0000-0000-0000-02e2.elastic-ssl.ui-r.com.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 61.132.42.50 | attackbotsspam | Automatic report - Port Scan Attack  | 
                    2019-09-06 07:10:52 | 
| 81.22.45.17 | attackspam | Sep 6 00:15:28 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.17 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33490 PROTO=TCP SPT=40703 DPT=33891 WINDOW=1024 RES=0x00 SYN URGP=0 ...  | 
                    2019-09-06 07:16:34 | 
| 218.98.26.170 | attackbotsspam | 2019-09-05T13:21:52.521306Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.98.26.170:40003 \(107.175.91.48:22\) \[session: 05ed7379987d\] 2019-09-05T23:13:24.620272Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.98.26.170:50898 \(107.175.91.48:22\) \[session: 3f8ec1834011\] ...  | 
                    2019-09-06 07:39:53 | 
| 68.251.142.26 | attackbots | Trying ports that it shouldn't be.  | 
                    2019-09-06 07:16:51 | 
| 157.230.213.136 | attackbotsspam | fire  | 
                    2019-09-06 07:06:46 | 
| 42.112.56.55 | attackspam | Sep 6 00:44:19 lnxded64 sshd[13581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.56.55  | 
                    2019-09-06 07:09:36 | 
| 51.37.31.61 | attackbotsspam | Portscan detected  | 
                    2019-09-06 07:12:35 | 
| 106.13.52.74 | attackbotsspam | Sep 6 01:24:30 dev0-dcfr-rnet sshd[8570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.74 Sep 6 01:24:32 dev0-dcfr-rnet sshd[8570]: Failed password for invalid user hadoopuser from 106.13.52.74 port 43738 ssh2 Sep 6 01:27:31 dev0-dcfr-rnet sshd[8598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.74  | 
                    2019-09-06 07:40:50 | 
| 177.104.26.94 | attackspam | Portscan detected  | 
                    2019-09-06 07:31:58 | 
| 177.36.58.182 | attackbotsspam | Sep 6 00:22:49 tux-35-217 sshd\[5243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.36.58.182 user=root Sep 6 00:22:51 tux-35-217 sshd\[5243\]: Failed password for root from 177.36.58.182 port 48342 ssh2 Sep 6 00:29:01 tux-35-217 sshd\[5288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.36.58.182 user=root Sep 6 00:29:03 tux-35-217 sshd\[5288\]: Failed password for root from 177.36.58.182 port 41184 ssh2 ...  | 
                    2019-09-06 07:17:56 | 
| 37.210.106.42 | attackbots | Unauthorized connection attempt from IP address 37.210.106.42 on Port 445(SMB)  | 
                    2019-09-06 07:29:37 | 
| 91.202.78.165 | attackbotsspam | Unauthorized connection attempt from IP address 91.202.78.165 on Port 445(SMB)  | 
                    2019-09-06 07:43:23 | 
| 212.227.136.209 | attackspam | SSH-BruteForce  | 
                    2019-09-06 07:18:29 | 
| 218.98.26.176 | attackspambots | 2019-09-03 08:52:08 -> 2019-09-05 19:53:35 : 19 login attempts (218.98.26.176)  | 
                    2019-09-06 07:31:31 | 
| 159.89.43.184 | attack | fire  | 
                    2019-09-06 07:00:22 |