City: unknown
Region: unknown
Country: Ireland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.41.233.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52909
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.41.233.68. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021600 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 01:17:18 CST 2025
;; MSG SIZE rcvd: 106Host 68.233.41.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 68.233.41.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.179 | attack | Last failed login: Sun May 12 XX:XX:XX UTC 2019 from 218.92.0.179 on ssh:notty There were 20X01 failed login attempts since the last successful login. |
2019-05-12 22:04:40 |
| 71.6.158.166 | botsattack | 71.6.158.166 - - [05/May/2019:06:08:15 +0800] "" 400 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:17 +0800] "" 400 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:17 +0800] "" 400 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:19 +0800] "" 400 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:23 +0800] "quit" 400 182 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:23 +0800] "GET /robots.txt HTTP/1.1" 200 472 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:27 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 232 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:27 +0800] "GET /sitemap.xml HTTP/1.1" 499 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:28 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "python-requests/2.10.0" 71.6.158.166 - - [05/May/2019:06:08:28 +0800] "" 400 0 "-" "-" |
2019-05-05 06:09:11 |
| 118.163.196.1 | attack | phpmyadmin db攻击 |
2019-05-09 20:13:46 |
| 116.11.65.55 | bots | 116.11.65.55 - - [28/Apr/2019:10:03:03 +0800] "GET /index.php/2018/12/07/iot_2018_12_07_cn/ HTTP/1.1" 200 39331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 116.11.65.55 - - [28/Apr/2019:10:03:25 +0800] "GET /index.php/2018/12/07/iot_2018_12_07_cn/ HTTP/1.1" 200 39331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 116.11.65.55 - - [28/Apr/2019:10:03:27 +0800] "GET /index.php/2018/07/04/deep_learning_2018_07_04_cn/ HTTP/1.1" 200 54216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 116.11.65.55 - - [28/Apr/2019:10:05:38 +0800] "GET /index.php/2018/07/04/deep_learning_2018_07_04_cn/ HTTP/1.1" 200 54216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" |
2019-04-28 10:06:45 |
| 54.157.229.122 | bots | 54.157.229.122 - - [27/Apr/2019:12:16:03 +0800] "GET /check-ip/2.40.198.194 HTTP/1.1" 200 10239 "-" "Mozilla/5.0 (Windows; Crawler; U; Windows NT 6.0; en-US; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (.NET CLR 3.5.30729)" 54.157.229.122 - - [27/Apr/2019:12:16:10 +0800] "GET /check-ip/186.193.133.98 HTTP/1.1" 200 9760 "-" "Mozilla/5.0 (Windows; Crawler; U; Windows NT 6.0; en-US; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (.NET CLR 3.5.30729)" 54.157.229.122 - - [27/Apr/2019:12:16:18 +0800] "GET /check-ip/192.141.74.34 HTTP/1.1" 200 10410 "-" "Mozilla/5.0 (Windows; Crawler; U; Windows NT 6.0; en-US; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (.NET CLR 3.5.30729)" 54.157.229.122 - - [27/Apr/2019:12:16:24 +0800] "GET /check-ip/117.8.173.184 HTTP/1.1" 200 10654 "-" "Mozilla/5.0 (Windows; Crawler; U; Windows NT 6.0; en-US; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (.NET CLR 3.5.30729)" 54.157.229.122 - - [27/Apr/2019:12:16:30 +0800] "GET /check-ip/180.77.146.49 HTTP/1.1" 200 9811 "-" "Mozilla/5.0 (Windows; Crawler; U; Windows NT 6.0; en-US; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (.NET CLR 3.5.30729)" |
2019-04-27 12:18:17 |
| 218.30.103.183 | bots | 搜狗爬虫 |
2019-05-13 11:41:17 |
| 178.195.8.238 | bots | 178.195.8.238 - - [07/May/2019:08:08:33 +0800] "GET /check-ip/80.14.181.213 HTTP/1.1" 200 9961 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:21.0) Gecko/20130331 Firefox/21.0" 178.195.8.238 - - [07/May/2019:08:09:13 +0800] "GET /check-ip/80.14.181.213 HTTP/1.1" 200 10461 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2a1pre) Gecko/20090405 Firefox/3.6a1pre" |
2019-05-07 08:10:21 |
| 182.254.197.152 | attack | 182.254.197.152 - - [14/May/2019:06:42:16 +0800] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6http://118.25.52.138/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (W |
2019-05-14 07:15:21 |
| 69.30.243.244 | bots | 疑似伪造UA爬虫 69.30.243.244 - - [05/May/2019:12:19:24 +0800] "GET /check-ip/113.53.83.48 HTTP/1.1" 200 10113 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" 69.30.243.244 - - [05/May/2019:12:19:24 +0800] "GET /check-ip/171.7.246.129 HTTP/1.1" 200 9681 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 69.30.243.244 - - [05/May/2019:12:19:25 +0800] "GET /check-ip/64.49.72.210 HTTP/1.1" 200 10263 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 69.30.243.244 - - [05/May/2019:12:19:26 +0800] "GET /check-ip/36.89.134.161 HTTP/1.1" 200 10302 "https://ipinfo.asytech.cn" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 69.30.243.244 - - [05/May/2019:12:19:27 +0800] "GET /check-ip/36.67.134.3 HTTP/1.1" 200 9927 "https://ipinfo.asytech.cn" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 69.30.243.244 - - [05/May/2019:12:19:28 +0800] "GET /check-ip/75.141.151.0 HTTP/1.1" 200 10497 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 69.30.243.244 - - [05/May/2019:12:19:30 +0800] "GET /check-ip/36.75.67.63 HTTP/1.1" 200 10095 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" |
2019-05-05 12:24:28 |
| 128.14.209.234 | attack | 128.14.209.234 - - [04/May/2019:07:46:13 +0800] "GET /console/login/LoginForm.jsp HTTP/1.1" 404 465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C hrome/60.0.3112.113 Safari/537.36" |
2019-05-05 09:00:41 |
| 110.249.212.46 | attackproxy | 110.249.212.46 - - [29/Apr/2019:09:59:33 +0800] "GET http://110.249.212.46/testget?q=23333&port=80 HTTP/1.1" 400 182 "-" "-" |
2019-04-29 10:04:47 |
| 212.64.58.150 | botsattack | 212.64.58.150 - - [06/May/2019:16:15:10 +0800] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%\\x80\\x96\\x98 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 212.64.58.150 - - [06/May/2019:16:15:13 +0800] "GET /lang.php?f=1 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-05-06 16:18:16 |
| 59.36.119.226 | botsattack | 59.36.119.226 - - [01/May/2019:07:45:43 +0800] "GET /.git/config HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 59.36.119.226 - - [01/May/2019:07:45:43 +0800] "GET /.git/config HTTP/1.1" 404 209 "http://118.25.52.138/.git/config" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-05-01 07:51:54 |
| 185.234.219.238 | attack | 数据库攻击 |
2019-05-09 17:39:18 |
| 64.233.173.174 | botsnormal | 是正常用户但是使用了GOOGLE的语音转文本服务 64.233.173.174 - - [28/Apr/2019:17:14:36 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 9994 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googl e-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.173.174 - - [28/Apr/2019:17:14:36 +0800] "GET /static/bootstrap/js/bootstrap.min.js HTTP/1.1" 200 48944 "https://ipinfo.asytech.cn/check-ip/148.72.41.76" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Geck o) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Google-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.172.172 - - [28/Apr/2019:17:14:36 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 9862 "-" "Mozilla/5.0 (Linux; Android 4.2.1; en-us; Nexus 5 Build/JOP40D) AppleWebKit/535.19 (KHTML, like Gecko; googleweblight) Chrome/38.0.1025.166 Mobile Safari/53 5.19" 64.233.173.176 - - [28/Apr/2019:17:14:37 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 10135 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Goog le-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.173.174 - - [28/Apr/2019:17:14:37 +0800] "GET /static/bootstrap/js/popper.min.js HTTP/1.1" 200 19188 "https://ipinfo.asytech.cn/check-ip/148.72.41.76" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Google-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" |
2019-04-28 17:49:13 |