City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.9.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25686
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.9.3.			IN	A
;; AUTHORITY SECTION:
.			371	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:12:55 CST 2022
;; MSG SIZE  rcvd: 103Host 3.9.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server:		183.60.83.19
Address:	183.60.83.19#53
** server can't find 3.9.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime | 
|---|---|---|---|
| 188.32.108.72 | attack | Scanning random ports - tries to find possible vulnerable services | 2020-02-24 09:36:23 | 
| 223.71.167.164 | attackbotsspam | 223.71.167.164 was recorded 17 times by 3 hosts attempting to connect to the following ports: 69,8005,50070,623,1720,23023,6000,9003,2427,8004,37778,5632,3001,8161,2379,33338. Incident counter (4h, 24h, all-time): 17, 70, 2340 | 2020-02-24 13:20:40 | 
| 61.28.108.122 | attack | suspicious action Mon, 24 Feb 2020 01:59:24 -0300 | 2020-02-24 13:07:43 | 
| 185.232.30.130 | attackbots | 02/23/2020-19:53:16.900356 185.232.30.130 Protocol: 6 ET SCAN NMAP -sS window 1024 | 2020-02-24 09:50:26 | 
| 187.62.219.138 | attackspambots | Scanning random ports - tries to find possible vulnerable services | 2020-02-24 09:43:35 | 
| 196.203.31.154 | attack | Feb 24 04:51:19 shared-1 sshd\[17349\]: Invalid user skkf1234 from 196.203.31.154Feb 24 04:58:52 shared-1 sshd\[17426\]: Invalid user admin from 196.203.31.154 ... | 2020-02-24 13:21:14 | 
| 187.132.84.89 | attack | Scanning random ports - tries to find possible vulnerable services | 2020-02-24 09:42:50 | 
| 193.56.28.226 | attackbotsspam | Feb 24 05:58:41 karger postfix/smtpd[22114]: warning: unknown[193.56.28.226]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 24 05:58:47 karger postfix/smtpd[22114]: warning: unknown[193.56.28.226]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 24 05:58:57 karger postfix/smtpd[22114]: warning: unknown[193.56.28.226]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... | 2020-02-24 13:18:41 | 
| 218.92.0.145 | attack | 2020-02-24T05:14:11.009731homeassistant sshd[21205]: Failed none for root from 218.92.0.145 port 36080 ssh2 2020-02-24T05:14:11.882962homeassistant sshd[21205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145 user=root ... | 2020-02-24 13:19:16 | 
| 49.235.95.179 | attack | suspicious action Mon, 24 Feb 2020 01:59:09 -0300 | 2020-02-24 13:13:49 | 
| 187.35.112.243 | attack | Scanning random ports - tries to find possible vulnerable services | 2020-02-24 09:44:13 | 
| 188.93.243.244 | attackbots | Scanning random ports - tries to find possible vulnerable services | 2020-02-24 09:35:56 | 
| 187.10.130.3 | attackbots | Scanning random ports - tries to find possible vulnerable services | 2020-02-24 09:46:11 | 
| 188.0.135.76 | attack | Scanning random ports - tries to find possible vulnerable services | 2020-02-24 09:37:42 | 
| 51.89.250.10 | spam | X-ASG-Debug-ID: 1582512178-05f39b12762fd230001-8J236c Received: from mail.kwpl.lk (mail.kwpl.lk [203.143.28.194]) by filter.internet.net.au with ESMTP id H5cI0AcDtjgcisWl for Mon, 24 Feb 2020 13:42:59 +1100 (AEDT) X-Barracuda-Envelope-From: v.steenkamp@order-invoicing.com X-Barracuda-Effective-Source-IP: mail.kwpl.lk[203.143.28.194] X-Barracuda-Apparent-Source-IP: 203.143.28.194 Received: from [51.89.250.10] (ip10.ip-51-89-250.eu [51.89.250.10]) | 2020-02-24 11:11:22 |