城市(city): unknown
省份(region): unknown
国家(country): Lithuania
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 90.138.101.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30373
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;90.138.101.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024120800 1800 900 604800 86400
;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 15:52:36 CST 2024
;; MSG SIZE rcvd: 107242.101.138.90.in-addr.arpa domain name pointer m90-138-101-242.cust.tele2.lt.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.101.138.90.in-addr.arpa name = m90-138-101-242.cust.tele2.lt.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.143.222.137 | attack | Nov 23 15:20:25 mc1 kernel: \[5805066.852991\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.143.222.137 DST=159.69.205.51 LEN=52 TOS=0x12 PREC=0x40 TTL=117 ID=30307 DF PROTO=TCP SPT=51285 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Nov 23 15:20:28 mc1 kernel: \[5805069.854963\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.143.222.137 DST=159.69.205.51 LEN=52 TOS=0x12 PREC=0x40 TTL=117 ID=30308 DF PROTO=TCP SPT=51285 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Nov 23 15:20:34 mc1 kernel: \[5805075.854863\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.143.222.137 DST=159.69.205.51 LEN=48 TOS=0x10 PREC=0x40 TTL=117 ID=30309 DF PROTO=TCP SPT=51285 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 ... |
2019-11-24 04:00:31 |
| 218.253.242.115 | attack | [Sat Nov 23 12:36:17.260077 2019] [:error] [pid 26036] [client 218.253.242.115:44858] [client 218.253.242.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XdlR8OyVvAr7DjkOb0K9UAAAAAY"] ... |
2019-11-24 03:54:49 |
| 59.63.67.68 | attackspambots | badbot |
2019-11-24 03:52:41 |
| 81.136.153.117 | attackspam | Attacking Mailserver |
2019-11-24 03:42:28 |
| 62.210.202.127 | attack | Brute force SMTP login attempted. ... |
2019-11-24 03:45:42 |
| 36.110.80.154 | attackspam | Nov 23 20:15:22 MK-Soft-Root1 sshd[5442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.110.80.154 Nov 23 20:15:24 MK-Soft-Root1 sshd[5442]: Failed password for invalid user admin from 36.110.80.154 port 54025 ssh2 ... |
2019-11-24 04:07:53 |
| 114.67.224.164 | attackspambots | Nov 23 07:17:33 wbs sshd\[26710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.224.164 user=mysql Nov 23 07:17:35 wbs sshd\[26710\]: Failed password for mysql from 114.67.224.164 port 43212 ssh2 Nov 23 07:21:41 wbs sshd\[27031\]: Invalid user mandap from 114.67.224.164 Nov 23 07:21:41 wbs sshd\[27031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.224.164 Nov 23 07:21:43 wbs sshd\[27031\]: Failed password for invalid user mandap from 114.67.224.164 port 45890 ssh2 |
2019-11-24 03:50:42 |
| 209.94.195.212 | attackspam | F2B jail: sshd. Time: 2019-11-23 20:21:29, Reported by: VKReport |
2019-11-24 03:52:26 |
| 106.12.22.146 | attackspambots | Invalid user vollan from 106.12.22.146 port 36204 |
2019-11-24 03:36:59 |
| 103.113.87.57 | attack | Unauthorised access (Nov 23) SRC=103.113.87.57 LEN=52 TTL=113 ID=21279 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-24 03:51:32 |
| 51.77.195.149 | attack | Nov 23 19:56:55 vmanager6029 sshd\[24041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149 user=root Nov 23 19:56:57 vmanager6029 sshd\[24041\]: Failed password for root from 51.77.195.149 port 57270 ssh2 Nov 23 20:05:06 vmanager6029 sshd\[24375\]: Invalid user ubnt from 51.77.195.149 port 37730 |
2019-11-24 03:51:58 |
| 106.13.56.12 | attackbotsspam | Nov 23 17:31:11 SilenceServices sshd[16906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12 Nov 23 17:31:13 SilenceServices sshd[16906]: Failed password for invalid user vest from 106.13.56.12 port 48286 ssh2 Nov 23 17:36:18 SilenceServices sshd[18437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12 |
2019-11-24 04:09:18 |
| 138.201.54.59 | attackspam | 138.201.54.59 - - \[23/Nov/2019:14:21:10 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 138.201.54.59 - - \[23/Nov/2019:14:21:11 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-11-24 03:37:49 |
| 134.209.237.55 | attackbots | Nov 23 11:23:43 askasleikir sshd[107597]: Failed password for root from 134.209.237.55 port 43182 ssh2 |
2019-11-24 03:40:16 |
| 54.186.123.213 | attackspam | 11/23/2019-20:33:16.344155 54.186.123.213 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-11-24 03:43:17 |