City: Singapore
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 8.219.3.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4021
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;8.219.3.30.			IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025102601 1800 900 604800 86400
;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 27 06:30:52 CST 2025
;; MSG SIZE  rcvd: 103
        Host 30.3.219.8.in-addr.arpa. not found: 3(NXDOMAIN)
        Server:		183.60.83.19
Address:	183.60.83.19#53
** server can't find 30.3.219.8.in-addr.arpa: NXDOMAIN
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 54.39.98.253 | attackspam | Unauthorized connection attempt detected from IP address 54.39.98.253 to port 2220 [J]  | 
                    2020-01-14 00:57:33 | 
| 177.16.224.165 | attackbotsspam | Honeypot attack, port: 445, PTR: 177.16.224.165.static.host.gvt.net.br.  | 
                    2020-01-14 01:03:05 | 
| 209.126.108.37 | attackbotsspam | Jan 13 08:40:12 giraffe sshd[3012]: Invalid user admin from 209.126.108.37 Jan 13 08:40:13 giraffe sshd[3012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.126.108.37 Jan 13 08:40:15 giraffe sshd[3012]: Failed password for invalid user admin from 209.126.108.37 port 23068 ssh2 Jan 13 08:40:15 giraffe sshd[3012]: Received disconnect from 209.126.108.37 port 23068:11: Bye Bye [preauth] Jan 13 08:40:15 giraffe sshd[3012]: Disconnected from 209.126.108.37 port 23068 [preauth] Jan 13 08:59:40 giraffe sshd[4484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.126.108.37 user=r.r Jan 13 08:59:42 giraffe sshd[4484]: Failed password for r.r from 209.126.108.37 port 33982 ssh2 Jan 13 08:59:42 giraffe sshd[4484]: Received disconnect from 209.126.108.37 port 33982:11: Bye Bye [preauth] Jan 13 08:59:42 giraffe sshd[4484]: Disconnected from 209.126.108.37 port 33982 [preauth] Jan 13 09:05:09 ........ -------------------------------  | 
                    2020-01-14 00:51:20 | 
| 119.145.148.219 | attackspam | michaelklotzbier.de 119.145.148.219 [13/Jan/2020:14:06:43 +0100] "POST /xmlrpc.php HTTP/1.1" 200 482 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_151)" michaelklotzbier.de 119.145.148.219 [13/Jan/2020:14:06:43 +0100] "POST /xmlrpc.php HTTP/1.1" 200 619 "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_151)"  | 
                    2020-01-14 00:34:42 | 
| 51.68.251.201 | attackbotsspam | 2020-01-13T16:49:59.036704shield sshd\[26149\]: Invalid user xh from 51.68.251.201 port 34912 2020-01-13T16:49:59.041244shield sshd\[26149\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip201.ip-51-68-251.eu 2020-01-13T16:50:00.796174shield sshd\[26149\]: Failed password for invalid user xh from 51.68.251.201 port 34912 ssh2 2020-01-13T16:52:29.284905shield sshd\[26724\]: Invalid user naren from 51.68.251.201 port 60460 2020-01-13T16:52:29.293285shield sshd\[26724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip201.ip-51-68-251.eu  | 
                    2020-01-14 00:58:48 | 
| 49.189.131.202 | attackspam | Automatic report - Port Scan Attack  | 
                    2020-01-14 00:50:21 | 
| 185.143.223.81 | attack | Jan 13 17:29:16 h2177944 kernel: \[2131404.386629\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=37660 PROTO=TCP SPT=46592 DPT=15308 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 13 17:29:16 h2177944 kernel: \[2131404.386640\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=37660 PROTO=TCP SPT=46592 DPT=15308 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 13 17:31:23 h2177944 kernel: \[2131531.045466\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17899 PROTO=TCP SPT=46592 DPT=2856 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 13 17:31:23 h2177944 kernel: \[2131531.045485\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17899 PROTO=TCP SPT=46592 DPT=2856 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 13 17:34:04 h2177944 kernel: \[2131691.719376\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.21  | 
                    2020-01-14 01:05:26 | 
| 111.95.141.34 | attackspambots | Unauthorized connection attempt detected from IP address 111.95.141.34 to port 2220 [J]  | 
                    2020-01-14 00:33:47 | 
| 176.113.161.93 | attack | Honeypot attack, port: 81, PTR: host93.corebug.o9.tv-net.com.ua.  | 
                    2020-01-14 01:00:07 | 
| 91.98.45.138 | attackspam | Honeypot attack, port: 81, PTR: 91.98.45.138.pol.ir.  | 
                    2020-01-14 00:44:34 | 
| 51.75.207.61 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.207.61 Failed password for invalid user helpdesk from 51.75.207.61 port 58620 ssh2 Invalid user prueba01 from 51.75.207.61 port 55838 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.207.61 Failed password for invalid user prueba01 from 51.75.207.61 port 55838 ssh2  | 
                    2020-01-14 00:38:37 | 
| 77.42.97.113 | attackspam | Unauthorized connection attempt detected from IP address 77.42.97.113 to port 23 [J]  | 
                    2020-01-14 00:47:37 | 
| 34.84.103.120 | attack | Automatic report - XMLRPC Attack  | 
                    2020-01-14 00:56:17 | 
| 92.253.78.38 | attackbots | Honeypot attack, port: 5555, PTR: PTR record not found  | 
                    2020-01-14 00:52:12 | 
| 41.38.203.171 | attackbots | Automatic report - Port Scan Attack  | 
                    2020-01-14 00:44:03 |