城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.212.72.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15557
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.212.72.34. IN A
;; AUTHORITY SECTION:
. 46 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 11:50:19 CST 2022
;; MSG SIZE rcvd: 10534.72.212.13.in-addr.arpa domain name pointer ec2-13-212-72-34.ap-southeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
34.72.212.13.in-addr.arpa name = ec2-13-212-72-34.ap-southeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 211.35.76.241 | attack | $f2bV_matches |
2020-02-27 00:39:36 |
| 114.156.17.200 | attack | scans 22 times in preceeding hours on the ports (in chronological order) 1025 1099 1234 1434 1471 1494 1512 1515 1646 1649 1718 1720 1741 1789 2603 2809 3001 5009 5600 8001 8080 9001 |
2020-02-27 00:55:34 |
| 194.26.29.101 | attack | scans 46 times in preceeding hours on the ports (in chronological order) 33795 33961 33574 33849 33565 33761 33638 33860 33951 33808 33986 33940 33929 33578 33554 33682 33770 33679 33541 33977 33504 33980 33811 33542 33826 33673 33516 33663 33599 33658 33802 33582 33897 33603 33810 33906 33640 33590 33981 33509 33970 33688 33867 33827 33819 33878 resulting in total of 236 scans from 194.26.29.0/24 block. |
2020-02-27 01:07:16 |
| 82.221.105.6 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 72 - port: 82 proto: TCP cat: Misc Attack |
2020-02-27 00:59:56 |
| 142.44.211.179 | attackbots | probes 5 times on the port 52869 |
2020-02-27 00:53:57 |
| 144.217.34.147 | attackspam | Port 45406 scan denied |
2020-02-27 00:53:31 |
| 194.26.29.130 | attack | IP: 194.26.29.130
Ports affected
World Wide Web HTTP (80)
Abuse Confidence rating 100%
ASN Details
AS23470 RELIABLESITE
Russia (RU)
CIDR 194.26.29.0/24
Log Date: 26/02/2020 4:08:29 PM UTC |
2020-02-27 01:05:16 |
| 211.254.214.150 | attack | $f2bV_matches |
2020-02-27 00:44:39 |
| 222.186.180.130 | attack | 2020-02-26T17:25:59.310798scmdmz1 sshd[26684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root 2020-02-26T17:26:01.170553scmdmz1 sshd[26684]: Failed password for root from 222.186.180.130 port 39066 ssh2 2020-02-26T17:26:03.545091scmdmz1 sshd[26684]: Failed password for root from 222.186.180.130 port 39066 ssh2 2020-02-26T17:25:59.310798scmdmz1 sshd[26684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root 2020-02-26T17:26:01.170553scmdmz1 sshd[26684]: Failed password for root from 222.186.180.130 port 39066 ssh2 2020-02-26T17:26:03.545091scmdmz1 sshd[26684]: Failed password for root from 222.186.180.130 port 39066 ssh2 2020-02-26T17:25:59.310798scmdmz1 sshd[26684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root 2020-02-26T17:26:01.170553scmdmz1 sshd[26684]: Failed password for root from 222.186.180.130 port 3906 |
2020-02-27 00:44:19 |
| 185.216.140.252 | attackbots | 02/26/2020-11:48:17.085453 185.216.140.252 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-02-27 01:07:31 |
| 211.252.87.90 | attack | $f2bV_matches |
2020-02-27 01:04:26 |
| 185.175.93.78 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 38366 proto: TCP cat: Misc Attack |
2020-02-27 01:09:44 |
| 64.225.40.2 | attackbots | RDP Brute-Force (honeypot 13) |
2020-02-27 00:30:51 |
| 185.175.93.19 | attack | Port scan detected on ports: 5927[TCP], 5934[TCP], 5937[TCP] |
2020-02-27 01:10:53 |
| 185.175.93.34 | attackbots | Portscan or hack attempt detected by psad/fwsnort |
2020-02-27 01:10:18 |