城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 248.2.89.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22248
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;248.2.89.136. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021600 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 19:32:25 CST 2025
;; MSG SIZE rcvd: 105
Host 136.89.2.248.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 136.89.2.248.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 134.175.123.16 | attack | May 21 01:42:33 s64-1 sshd[7561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.123.16 May 21 01:42:35 s64-1 sshd[7561]: Failed password for invalid user postgres from 134.175.123.16 port 33900 ssh2 May 21 01:49:41 s64-1 sshd[7674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.123.16 |
2019-05-21 10:06:46 |
| 195.206.105.32 | attack | 未知参数,有攻击嫌疑 195.206.105.32 - - [21/May/2019:09:29:34 +0800] "GET /check-ip/36.255.87.233&sa=U&ved=0ahUKEwi24qy6vKviAhVKYVAKHX3LDZEQFghvMBM&usg=AOvVaw0pw4L36GM4AN7ztE-QYEby HTTP/1.1" 200 9880 "-" "-" |
2019-05-21 09:32:54 |
| 134.175.67.60 | bots | 134.175.67.60 - - [06/May/2019:18:45:42 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 134.175.67.60 - - [06/May/2019:18:45:42 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 134.175.67.60 - - [06/May/2019:18:45:44 +0800] "GET /webdav/ HTTP/1.1" 301 194 "-" "Mozilla/5.0" |
2019-05-06 18:46:29 |
| 198.20.87.98 | bots | 198.20.87.98 - - [20/May/2019:11:39:58 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "-" 198.20.87.98 - - [20/May/2019:11:39:59 +0800] "GET /sitemap.xml HTTP/1.1" 301 194 "-" "-" 198.20.87.98 - - [20/May/2019:11:40:00 +0800] "GET /.well-known/security.txt HTTP/1.1" 301 194 "-" "-" 198.20.87.98 - - [20/May/2019:11:40:00 +0800] "GET /favicon.ico HTTP/1.1" 301 194 "-" "python-requests/2.10.0" 198.20.87.98 - - [20/May/2019:11:40:01 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "python-requests/2.10.0" |
2019-05-20 11:45:29 |
| 114.35.105.141 | botsattack | 爬虫攻击phpadmin、pma、sql等 |
2019-05-05 11:08:25 |
| 31.184.238.211 | spam | 垃圾评论 |
2019-05-13 09:27:19 |
| 154.73.11.16 | botsattack | 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/195.38.87.217 HTTP/1.1" 200 10366 "https://ipinfo.asytech.cn/" "Opera/6.x (Windows NT 4.0; U) [de]" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/181.208.95.67 HTTP/1.1" 200 10172 "https://ipinfo.asytech.cn/" "Mozilla/3.x (I-Opener 1.1; Netpliance)" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/181.131.142.51 HTTP/1.1" 200 10146 "https://ipinfo.asytech.cn/" "Mozilla/4.0 (MobilePhone PM-8200/US/1.0) NetFront/3.x MMP/2.0" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/18.191.65.241 HTTP/1.1" 200 10290 "https://ipinfo.asytech.cn/" "TulipChain/5.x (http://ostermiller.org/tulipchain/) Java/1.x.1_0x (http://java.sun.com/) Linux/2.4.17" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/17.58.102.110 HTTP/1.1" 200 10120 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:x.xx) Gecko/20030504 Mozilla Firebird/0.6" 154.73.11.16 - - [19/May/2019:11:34:34 +0800] "GET /check-ip/158.12.180.226 HTTP/1.1" 200 9545 "https://ipinfo.asytech.cn/" "Jakarta Commons-HttpClient/2.0xxx" 154.73.11.16 - - [19/May/2019:11:34:35 +0800] "GET /check-ip/153.232.187.21 HTTP/1.1" 200 9712 "https://ipinfo.asytech.cn/" "JetBrains Omea Reader 2.0 Release Candidate 1 (http://www.jetbrains.com/omea_reader/)" 154.73.11.16 - - [19/May/2019:11:34:35 +0800] "GET /check-ip/14.26.223.133 HTTP/1.1" 200 9648 "https://ipinfo.asytech.cn/" "SlimBrowser" 154.73.11.16 - - [19/May/2019:11:34:35 +0800] "GET /check-ip/142.119.232.174 HTTP/1.1" 200 10420 "https://ipinfo.asytech.cn/" "WebQL" |
2019-05-20 09:15:57 |
| 92.118.161.53 | spam | 92.118.161.53 - - [07/May/2019:11:52:51 +0800] "GET / HTTP/1.0" 301 194 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com" |
2019-05-07 11:53:21 |
| 54.39.24.42 | spam | 垃圾IP推广评论 |
2019-05-13 09:29:54 |
| 212.64.58.150 | botsattack | 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /luoke.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /nidage.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /sanan.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:01 +0800] "POST /sbkcb.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /cnm.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /tests.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /luoran.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /luoran6.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /asen.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /MCLi.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /MCLi.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 212.64.58.150 - - [06/May/2019:16:23:05 +0800] "POST /coon.php HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" |
2019-05-06 16:23:50 |
| 218.30.103.183 | bots | 搜狗爬虫 |
2019-05-13 11:41:17 |
| 213.180.203.19 | bots | 213.180.203.19 - - [14/May/2019:06:21:24 +0800] "GET /robots.txt HTTP/1.1" 200 634 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" 37.9.113.69 - - [14/May/2019:06:21:28 +0800] "GET /check-ip/94.247.177.124 HTTP/1.1" 200 9954 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" 87.250.224.100 - - [14/May/2019:06:21:32 +0800] "GET /check-ip/102.196.212.28/ HTTP/1.1" 200 10050 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" 141.8.142.176 - - [14/May/2019:06:21:36 +0800] "GET /check-ip/179.26.25.87/ HTTP/1.1" 200 10182 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" |
2019-05-14 06:22:30 |
| 95.52.84.202 | botsattack | 95.52.84.202 - - [08/May/2019:18:17:24 +0800] "GET /index.php?option=com_users&view=registration HTTP/1.1" 301 194 "-" "Opera/9.80 (Windows NT 6.1); U; en) Presto/2.7.62 Version/11.00" 95.52.84.202 - - [08/May/2019:18:17:26 +0800] "GET /index.php?option=com_users&view=registration HTTP/1.1" 404 209 "-" "Opera/9.80 (Windows NT 6.1); U; en) Presto/2.7.62 Version/11.00" |
2019-05-08 18:19:31 |
| 104.152.52.74 | botsattack | 104.152.52.74 - - [13/May/2019:16:52:17 +0800] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 232 "-" "-" 104.152.52.74 - - [13/May/2019:16:52:18 +0800] "\\x01default" 400 182 "-" "-" 104.152.52.74 - - [13/May/2019:16:52:19 +0800] "0\\x0C\\x02\\x01\\x01`\\x07\\x02\\x01\\x02\\x04\\x00\\x80\\x00" 400 182 "-" "-" 104.152.52.74 - - [13/May/2019:16:52:20 +0800] "OPTIONS sip:nm SIP/2.0" 400 182 "-" "-" 104.152.52.74 - - [13/May/2019:16:52:21 +0800] "TNMP\\x04\\x00\\x00\\x00TNME\\x00\\x00\\x04\\x00" 400 182 "-" "-" |
2019-05-13 16:53:29 |
| 66.102.7.131 | bots | Google-Ads-Overview广告预览 66.102.7.131 - - [05/May/2019:18:36:40 +0800] "GET /cloud/index.php/apps/registration/ HTTP/1.1" 200 7409 "http://www.ads.google.com/" "Google-Ads-Overview Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36" "-" 66.102.7.131 - - [05/May/2019:18:43:01 +0800] "GET /cloud/index.php/apps/registration/ HTTP/1.1" 200 7400 "http://www.ads.google.com/" "Google-Ads-Overview Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36" "-" 66.102.7.131 - - [05/May/2019:18:44:00 +0800] "GET /cloud/index.php/apps/registration/ HTTP/1.1" 200 7392 "http://www.ads.google.com/" "Google-Ads-Overview Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36" "-" |
2019-05-05 18:52:40 |