City: unknown
Region: unknown
Country: China
Internet Service Provider: Aliyun Computing Co. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/39.104.66.195/ CN - 1H : (253) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN37963 IP : 39.104.66.195 CIDR : 39.104.0.0/15 PREFIX COUNT : 303 UNIQUE IP COUNT : 6062848 WYKRYTE ATAKI Z ASN37963 : 1H - 1 3H - 1 6H - 2 12H - 8 24H - 9 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery |
2019-09-20 11:51:58 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.104.66.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;39.104.66.195. IN A
;; AUTHORITY SECTION:
. 577 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019091902 1800 900 604800 86400
;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 20 11:51:55 CST 2019
;; MSG SIZE rcvd: 117Host 195.66.104.39.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 195.66.104.39.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 176.113.115.43 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 3381 proto: TCP cat: Misc Attack |
2020-03-29 03:09:49 |
| 87.251.74.7 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 33889 proto: TCP cat: Misc Attack |
2020-03-29 03:19:47 |
| 80.82.65.234 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 68 - port: 5093 proto: UDP cat: Misc Attack |
2020-03-29 03:22:19 |
| 80.82.70.118 | attackspambots | Mar 28 19:51:21 debian-2gb-nbg1-2 kernel: \[7680546.262819\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.70.118 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=46042 PROTO=TCP SPT=60000 DPT=1080 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-29 03:21:58 |
| 45.76.80.186 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 8080 proto: TCP cat: Misc Attack |
2020-03-29 03:32:00 |
| 222.130.130.113 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-03-29 03:02:09 |
| 94.102.51.31 | attackbotsspam | Port-scan: detected 160 distinct ports within a 24-hour window. |
2020-03-29 03:15:46 |
| 37.49.226.133 | attackspambots | firewall-block, port(s): 23/tcp |
2020-03-29 03:35:03 |
| 87.251.74.14 | attack | 03/28/2020-15:08:37.448536 87.251.74.14 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-03-29 03:18:43 |
| 200.51.46.218 | attackspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-03-29 03:38:06 |
| 45.141.84.29 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 4000 proto: TCP cat: Misc Attack |
2020-03-29 03:31:23 |
| 186.210.142.145 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-03-29 03:05:22 |
| 218.29.126.75 | attack | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-03-29 03:37:03 |
| 192.241.238.193 | attack | port scan and connect, tcp 443 (https) |
2020-03-29 03:04:33 |
| 185.176.27.30 | attack | Mar 28 20:02:12 debian-2gb-nbg1-2 kernel: \[7681197.741317\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.30 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=46066 PROTO=TCP SPT=56938 DPT=10300 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-29 03:06:40 |