城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.233.165.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3684
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.233.165.57. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 18:54:24 CST 2025
;; MSG SIZE rcvd: 106Host 57.165.233.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 57.165.233.53.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 193.27.242.2 | attack | [portscan] Port scan |
2019-05-25 07:29:47 |
| 142.44.176.72 | bots | 142.44.176.72 - - [16/May/2019:15:23:15 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10022 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.4) Gecko/20100523 Firefox/3.6.4 ( .NET CLR 3.5.30729)" 142.44.176.72 - - [16/May/2019:15:23:33 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10371 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0b11pre) Gecko/20110128 Firefox/4.0b11pre" 142.44.176.72 - - [16/May/2019:15:23:47 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10111 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" 142.44.176.72 - - [16/May/2019:15:23:58 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10460 "-" "Mozilla/5.0 (Windows NT 5.1; U; rv:5.0) Gecko/20100101 Firefox/5.0" |
2019-05-16 15:25:51 |
| 198.20.99.130 | attack | 3389BruteforceFW21 |
2019-06-12 10:46:09 |
| 46.105.98.178 | normal | Ok |
2019-06-12 07:18:05 |
| 198.20.87.98 | bots | 198.20.87.98 - - [20/May/2019:11:39:58 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "-" 198.20.87.98 - - [20/May/2019:11:39:59 +0800] "GET /sitemap.xml HTTP/1.1" 301 194 "-" "-" 198.20.87.98 - - [20/May/2019:11:40:00 +0800] "GET /.well-known/security.txt HTTP/1.1" 301 194 "-" "-" 198.20.87.98 - - [20/May/2019:11:40:00 +0800] "GET /favicon.ico HTTP/1.1" 301 194 "-" "python-requests/2.10.0" 198.20.87.98 - - [20/May/2019:11:40:01 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "python-requests/2.10.0" |
2019-05-20 11:45:29 |
| 184.164.157.73 | bots | 184.164.157.73 - - [21/May/2019:18:18:59 +0800] "GET /does_not_exist_89057 HTTP/2.0" 404 277 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 UBrowser/7.0.185.1002 Safari/537.36" |
2019-05-21 18:21:29 |
| 139.59.190.69 | attack | Jun 10 13:15:29 vmd17057 sshd\\[32574\\]: Invalid user postgres from 139.59.190.69 port 60410 Jun 10 13:15:29 vmd17057 sshd\\[32574\\]: pam_unix\\(sshd:auth\\): authentication failure\\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.69 Jun 10 13:15:31 vmd17057 sshd\\[32574\\]: Failed password for invalid user postgres from 139.59.190.69 port 60410 ssh2 |
2019-06-12 10:47:11 |
| 220.136.130.164 | attack | TCP port 445 (SMB) attempt blocked by firewall. [2019-05-25 01:11:10] |
2019-05-25 07:40:15 |
| 222.82.54.150 | botsattack | 222.82.54.150 - - [19/May/2019:13:55:53 +0800] "GET /home.asp HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 222.82.54.150 - - [19/May/2019:13:55:55 +0800] "GET /images/logo.gif HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:55:56 +0800] "GET /fdsrwe HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:55:57 +0800] "GET /qnfxcjqr HTTP/1.1" 400 182 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:07 +0800] "GET /winbox.png HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:09 +0800] "GET /login.html HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:09 +0800] "GET /device_description.xml HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:09 +0800] "GET /cgi-bin/user/Config.cgi?.cab&action=get&category=Account.* HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:09 +0800] "GET /current_config/passwd HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:11 +0800] "GET /cgi-bin/nobody/Machine.cgi?action=get_capability HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:11 +0800] "GET /index.asp HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" |
2019-05-19 14:01:20 |
| 205.251.150.194 | botsattack | 205.251.150.194 - - [21/May/2019:08:52:31 +0800] "GET /shop/index.php?l=page_view&p=advanced_search HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:34 +0800] "GET /shop/index.php?l=page_view&p=advanced_search HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:35 +0800] "GET /ss/index.php?l=page_view&p=advanced_search HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:37 +0800] "GET /ss/index.php?l=page_view&p=advanced_search HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" |
2019-05-21 08:53:56 |
| 94.23.145.174 | botsattack | 94.23.145.174 - - [15/May/2019:22:07:23 +0800] "GET /bitrix/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 94.23.145.174 - - [15/May/2019:22:07:35 +0800] "GET /admin/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 94.23.145.174 - - [15/May/2019:22:07:37 +0800] "GET /user/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" |
2019-05-15 22:08:53 |
| 46.248.189.244 | bots | 46.248.189.244 - - [22/May/2019:18:13:37 +0800] "GET /check-ip/102.165.36.235 HTTP/1.1" 200 10125 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0" |
2019-05-22 18:15:23 |
| 203.114.235.16 | attack | TCP Port: 25 _ invalid blocked abuseat-org zen-spamhaus _ _ _ _ (11) |
2019-05-25 07:33:05 |
| 112.215.151.15 | spambotsattackproxynormal | plis yang benar |
2019-06-05 05:10:39 |
| 123.249.83.139 | attack | 事件類型：Misc Attack 特徵碼：ET DROP Spamhaus DROP Listed Traffic Inbound group 7 |
2019-06-10 01:38:52 |