城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.132.22.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34227
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;219.132.22.156. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012200 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 00:08:21 CST 2025
;; MSG SIZE rcvd: 107Host 156.22.132.219.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 156.22.132.219.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 123.206.44.225 | attack | 123.206.44.225 - - [18/Apr/2019:22:22:21 +0800] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 518 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:22 +0800] "GET /admin/pma/index.php HTTP/1.1" 404 513 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:22 +0800] "GET /admin/PMA/index.php HTTP/1.1" 404 513 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:23 +0800] "GET /admin/mysql/index.php HTTP/1.1" 404 515 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:23 +0800] "GET /admin/mysql2/index.php HTTP/1.1" 404 516 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" |
2019-04-19 06:42:27 |
| 58.251.121.185 | attack | 58.251.121.185 - - [15/Apr/2019:14:51:57 +0800] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang%3Den HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 58.251.121.185 - - [15/Apr/2019:14:51:57 +0800] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang%3Den HTTP/1.1" 404 209 "http://118.25.52.138/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang%3Den" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-15 14:52:24 |
| 52.114.6.38 | bots | 52.114.6.38 - - [12/Apr/2019:14:09:43 +0800] "GET /check-ip/106.13.55.69 HTTP/1.1" 200 53479 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5" 52.114.6.38 - - [12/Apr/2019:14:09:43 +0800] "GET /static/favicon.ico HTTP/1.1" 200 4286 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5" |
2019-04-12 14:15:45 |
| 82.221.105.7 | bots | 82.221.105.7 - - [19/Apr/2019:14:31:43 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 82.221.105.7 - - [19/Apr/2019:14:31:44 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:45 +0800] "GET /sitemap.xml HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:46 +0800] "GET /.well-known/security.txt HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:48 +0800] "GET /favicon.ico HTTP/1.1" 301 194 "-" "python-requests/2.10.0" |
2019-04-19 14:32:28 |
| 14.17.3.65 | attack | 管理员账户攻击检测 14.17.3.65 - - [18/Apr/2019:07:03:49 +0800] "GET /administrator/index.php HTTP/1.1" 404 480 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Co re/UIWebView NetType/2G Mem/117" |
2019-04-18 08:10:32 |
| 104.248.39.213 | attack | 104.248.39.213 - - [14/Apr/2019:21:20:52 +0800] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 182 "-" "Hello, World" |
2019-04-14 21:21:51 |
| 81.209.177.189 | bots | 建议屏蔽 81.209.177.189 - - [19/Apr/2019:20:24:13 +0800] "GET /check-ip/103.28.161.75/ HTTP/1.1" 200 8318 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)" 81.209.177.136 - - [19/Apr/2019:20:24:34 +0800] "GET /check-ip/216.170.115.107/ HTTP/1.1" 200 8450 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)" 81.209.177.189 - - [19/Apr/2019:20:24:44 +0800] "GET /check-ip/170.239.229.3/ HTTP/1.1" 200 9318 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)" 81.209.177.189 - - [19/Apr/2019:20:24:54 +0800] "GET /check-ip/35.192.96.39/ HTTP/1.1" 200 8547 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)" |
2019-04-19 20:27:29 |
| 35.200.107.73 | attack | 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-04-16 21:34:35 |
| 200.53.15.17 | attack | 200.53.15.17 - - [21/Apr/2019:04:56:51 +0800] "GET /wp-login.php HTTP/1.1" 302 284 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:52 +0800] "GET /wp-login.php HTTP/1.1" 200 7801 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:52 +0800] "GET / HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:53 +0800] "GET / HTTP/1.1" 200 93842 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" |
2019-04-21 06:59:00 |
| 216.244.66.245 | bots | 216.244.66.245 - - [12/Apr/2019:21:10:08 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)" 216.244.66.245 - - [12/Apr/2019:21:10:12 +0800] "GET /robots.txt HTTP/1.1" 200 292 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)" |
2019-04-13 09:20:01 |
| 202.62.39.6 | attack | 自动注册检测 202.62.39.6 - - [14/Apr/2019:19:12:43 +0800] "GET /?q=user/register HTTP/1.1" 200 3267 "https://ipinfo.asytech.cn/?q=node/add" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.101 Safari/537.36 QQBrowser/4.3.4986.400" |
2019-04-14 19:40:11 |
| 123.206.22.203 | attack | 123.206.22.203 - - [19/Apr/2019:14:27:22 +0800] "POST /Moxin.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:27:26 +0800] "POST /CCCC.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:27:26 +0800] "POST /mobai.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-04-19 14:28:25 |
| 50.63.197.101 | attack | wordpress检测攻击 50.63.197.101 - - [18/Apr/2019:14:15:48 +0800] "GET /wordpress/wp-admin/ HTTP/1.1" 301 194 "-" "-" |
2019-04-18 14:17:06 |
| 185.65.134.174 | attack | 185.65.134.174 - - [16/Apr/2019:22:01:51 +0800] "GET /.git/config HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 185.65.134.174 - - [16/Apr/2019:22:01:51 +0800] "\\x03\\x00" 400 182 "-" "-" 185.65.134.174 - - [16/Apr/2019:22:01:53 +0800] "GET /.git/config HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 185.65.134.174 - - [16/Apr/2019:22:01:55 +0800] "\\x03\\x00" 400 182 "-" "-" |
2019-04-16 22:09:36 |
| 122.152.211.94 | botsattack | 122.152.211.94 - - [18/Apr/2019:12:23:08 +0800] "GET /login HTTP/1.1" 301 194 "-" "-" 122.152.211.94 - - [18/Apr/2019:12:23:08 +0800] "GET /customers/1 HTTP/1.1" 301 194 "-" "-" 122.152.211.94 - - [18/Apr/2019:12:23:08 +0800] "GET /gs-guide-websocket/803/a8vbaovq/htmlfile?c=_jp.local HTTP/1.1" 301 194 "-" "-" 122.152.211.94 - - [18/Apr/2019:12:23:08 +0800] "GET /console/login/LoginForm.jsp HTTP/1.1" 301 194 "-" "-" 122.152.211.94 - - [18/Apr/2019:12:23:08 +0800] "POST /index.php?s=captcha HTTP/1.1" 301 194 "-" "-" 122.152.211.94 - - [18/Apr/2019:12:23:08 +0800] "GET /index.php?s=/Index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=abc HTTP/1.1" 301 194 "-" "-" 122.152.211.94 - - [18/Apr/2019:12:23:08 +0800] "POST /website/blog/ HTTP/1.1" 301 194 "-" "-" |
2019-04-18 12:23:38 |