城市(city): unknown
省份(region): unknown
国家(country): India
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.247.161.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2797
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;117.247.161.133. IN A
;; AUTHORITY SECTION:
. 510 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 20:45:01 CST 2022
;; MSG SIZE rcvd: 108Host 133.161.247.117.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 133.161.247.117.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 123.190.152.140 | attack | 123.190.152.140 - - [14/Apr/2019:09:56:22 +0800] "GET /mgw.htm?operationType=com.cars.otsmobile.queryLeftTicket&requestData=%5B%7B\\x22train_date\\x22%3A\\x2220181231\\x22%2C\\x22purpose_codes\\x22%3A\\x2200\\x22%2C\\x22from_station\\x22%3A\\x22BJP\\x22%2C\\x22to_station\\x22%3A\\x22SHH\\x22%2C\\x22station_train_code\\x22%3A\\x22\\x22%2C\\x22start_time_begin\\x22%3A\\x220000\\x22%2C\\x22start_time_end\\x22%3A\\x222400\\x22%2C\\x22train_headers\\x22%3A\\x22QB%23\\x22%2C\\x22train_flag\\x22%3A\\x22\\x22%2C\\x22seat_type\\x22%3A\\x220\\x22%2C\\x22seatBack_Type\\x22%3A\\x22\\x22%2C\\x22ticket_num\\x22%3A\\x22\\x22%2C\\x22dfpStr\\x22%3A\\x22\\x22%2C\\x22baseDTO\\x22%3A%7B\\x22check_code\\x22%3A\\x22d38a201f2de926ce0686aedfdcf2de68\\x22%2C\\x22device_no\\x22%3A\\x22WtaHBzID7ZQDADJh05y5LLpd\\x22%2C\\x22mobile_no\\x22%3A\\x22\\x22%2C\\x22os_type\\x22%3A\\x22a\\x22%2C\\x22time_str\\x22%3A\\x2220181030152947\\x22%2C\\x22version_no\\x22%3A\\x224.1.9\\x22%7D%7D%5D&ts=1540884587652&sign=37b8ebe6406579e4fb2ac8c9038eab37 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" |
2019-04-14 10:04:14 |
| 163.177.90.152 | attack | 163.177.90.152 - - [16/Apr/2019:03:56:56 +0800] "GET /cainiao.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 163.177.90.152 - - [16/Apr/2019:03:56:56 +0800] "GET /cmv.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 163.177.90.152 - - [16/Apr/2019:03:56:56 +0800] "GET /cainiao.php HTTP/1.1" 404 209 "http://118.25.52.138/cainiao.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 163.177.90.152 - - [16/Apr/2019:03:56:56 +0800] "GET /cmv.php HTTP/1.1" 404 209 "http://118.25.52.138/cmv.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-16 06:29:31 |
| 156.219.69.226 | attack | 156.219.69.226 - - [19/Apr/2019:04:36:01 +0800] "GET /wp-login.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 156.219.69.226 - - [19/Apr/2019:04:36:03 +0800] "GET /wp-login.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 156.219.69.226 - - [19/Apr/2019:04:36:03 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 156.219.69.226 - - [19/Apr/2019:04:36:03 +0800] "GET / HTTP/1.1" 200 10278 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" |
2019-04-19 04:38:18 |
| 68.183.123.123 | attack | 68.183.123.123 - - [15/Apr/2019:09:53:42 +0800] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 68.183.123.123 - - [15/Apr/2019:09:53:43 +0800] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 68.183.123.123 - - [15/Apr/2019:09:53:43 +0800] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 68.183.123.123 - - [15/Apr/2019:09:53:44 +0800] "GET /sql/websql/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 68.183.123.123 - - [15/Apr/2019:09:53:44 +0800] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-15 10:18:04 |
| 89.248.172.90 | proxy | 89.248.172.90 - - [17/Apr/2019:14:10:41 +0800] "CONNECT dnspod.qcloud.com:443 HTTP/1.1" 405 519 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)" |
2019-04-17 15:15:55 |
| 183.17.127.137 | bots | 183.17.127.137 - - [21/Apr/2019:21:53:36 +0800] "HEAD / HTTP/1.1" 200 0 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "GET / HTTP/1.1" 200 10288 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "HEAD /check-ip/ HTTP/1.1" 200 0 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "GET /check-ip/ HTTP/1.1" 200 8130 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "HEAD /report-ip HTTP/1.1" 200 0 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "GET /report-ip HTTP/1.1" 200 8923 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "HEAD /faq HTTP/1.1" 200 0 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" |
2019-04-21 21:55:45 |
| 203.208.60.97 | bots | Googlebot，中国谷歌 |
2019-04-19 16:45:34 |
| 171.12.10.98 | bots | 171.12.10.98 - - [19/Apr/2019:12:57:39 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" 171.12.10.98 - - [19/Apr/2019:12:57:39 +0800] "GET /home/favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" 171.12.10.98 - - [19/Apr/2019:12:57:40 +0800] "GET /home/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" 171.12.10.98 - - [19/Apr/2019:12:57:40 +0800] "GET /2/favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 171.12.10.98 - - [19/Apr/2019:12:57:40 +0800] "GET /2/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 171.12.10.98 - - [19/Apr/2019:12:57:46 +0800] "GET /3/favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" |
2019-04-19 13:02:20 |
| 87.168.245.228 | attack | 87.168.245.228 - - [16/Apr/2019:06:41:59 +0800] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 87.168.245.228 - - [16/Apr/2019:06:42:02 +0800] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-16 06:42:34 |
| 104.128.144.131 | botsattack | 扫描 104.128.144.131 - - [20/Apr/2019:12:32:14 +0800] "GET / HTTP/1.0" 301 194 "-" "www.probethenet.com scanner" |
2019-04-20 12:33:12 |
| 205.205.150.9 | bots | 205.205.150.9 - - [17/Apr/2019:06:19:22 +0800] "GET / HTTP/1.1" 200 212220 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" |
2019-04-17 08:05:47 |
| 101.226.114.193 | attack | 101.226.114.193 - - [13/Apr/2019:13:01:15 +0800] "GET /zuos.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.114.193 - - [13/Apr/2019:13:01:15 +0800] "GET /zuos.php HTTP/1.1" 404 209 "http://118.25.52.138/zuos.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.227.151.57 - - [13/Apr/2019:13:01:16 +0800] "GET /MCLi.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.227.151.57 - - [13/Apr/2019:13:01:16 +0800] "GET /MCLi.php HTTP/1.1" 404 209 "http://118.25.52.138/MCLi.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-13 13:01:46 |
| 176.121.14.179 | attack | 176.121.14.179 - - [12/Apr/2019:18:51:46 +0800] "GET /wp-includes/js/jquery/jquery.js?ver=%28SELECT%20%28CASE%20WHEN%20%286045%3D3065%29%20THEN%206045%20ELSE%206045%2A%28SELECT%206045%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%29%20END%29%29 HTTP/1.1" 200 37676 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 176.121.14.179 - - [12/Apr/2019:18:51:46 +0800] "GET /wp-includes/js/jquery/jquery.js?ver=%28SELECT%20%28CASE%20WHEN%20%281221%3D1221%29%20THEN%201221%20ELSE%201221%2A%28SELECT%201221%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%29%20END%29%29 HTTP/1.1" 200 37676 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 176.121.14.179 - - [12/Apr/2019:18:51:46 +0800] "GET /wp-includes/js/jquery/jquery.js?ver=1.12.4%29%20AND%20%28SELECT%204391%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x716a717871%2C%28SELECT%20%28ELT%284391%3D4391%2C1%29%29%29%2C0x7178717671%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29%20AND%20%287476%3D7476 HTTP/1.1" 200 37676 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 176.121.14.179 - - [12/Apr/2019:18:51:46 +0800] "GET /wp-includes/js/jquery/jquery.js?ver=1.12.4%20AND%20%28SELECT%204391%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x716a717871%2C%28SELECT%20%28ELT%284391%3D4391%2C1%29%29%29%2C0x7178717671%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29 HTTP/1.1" 200 37676 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" |
2019-04-12 18:57:10 |
| 123.206.22.203 | attack | 123.206.22.203 - - [19/Apr/2019:14:27:22 +0800] "POST /Moxin.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:27:26 +0800] "POST /CCCC.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:27:26 +0800] "POST /mobai.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-04-19 14:28:25 |
| 101.227.151.57 | attack | 101.227.151.57 - - [18/Apr/2019:17:29:20 +0800] "GET /program/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.227.151.57 - - [18/Apr/2019:17:29:20 +0800] "GET /program/index.php HTTP/1.1" 404 209 "http://118.25.52.138/program/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-18 17:30:14 |