疑似12377网络巡查IP段，42.83.147.0/24

zhiyang3

不知道具体干嘛的。总之屏蔽掉，以防不测
12377.cn 所指向的正是同IP段的42.83.147.1

[19/Dec/2024:11:11:31 +0800] HTTP/1.1 GET 42.83.147.53 http://***/ 301 169 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
[19/Dec/2024:11:11:32 +0800] HTTP/1.1 GET 42.83.147.53 https://www.***.html 200 702 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
[19/Dec/2024:13:15:07 +0800] HTTP/1.1 GET 42.83.147.60 http://***/ 301 169 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
[19/Dec/2024:13:15:08 +0800] HTTP/1.1 GET 42.83.147.60 https://www.***.html 200 714 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
[18/Dec/2024:00:34:28 +0800] HTTP/1.1 GET 42.83.147.53 http://***/ 301 169 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
[18/Dec/2024:00:34:29 +0800] HTTP/1.1 GET 42.83.147.53 https://www.***.html 200 707 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
[18/Dec/2024:12:25:46 +0800] HTTP/1.1 GET 42.83.147.56 http://***/ 301 169 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
[18/Dec/2024:12:25:47 +0800] HTTP/1.1 GET 42.83.147.56 https://***.html 200 703 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36

bxn21583

这个IP段有点意思哈，关注一下

yemusn

按CNNIC的asn屏蔽不就好了，AS Number 24151

1.2.4.0/24
42.83.128.0/24
42.83.129.0/24
42.83.130.0/24
42.83.131.0/24
42.83.132.0/24
42.83.134.0/24
42.83.144.0/24
42.83.145.0/24
42.83.146.0/24
42.83.147.0/24
42.83.255.0/24
125.208.34.0/24
125.208.35.0/24
125.208.37.0/24
125.208.38.0/24
125.208.39.0/24
125.208.40.0/24
125.208.41.0/24
125.208.42.0/24
125.208.45.0/24
125.208.46.0/24
203.119.25.0/24
203.119.28.0/24
203.119.31.0/24
203.119.33.0/24
210.2.4.0/24
218.241.96.0/20
218.241.96.0/24
218.241.97.0/24
218.241.103.0/24
218.241.104.0/24
218.241.110.0/24
218.241.111.0/24
218.241.112.0/24
218.241.113.0/24
218.241.114.0/24
218.241.115.0/24
218.241.116.0/24
218.241.117.0/24
218.241.118.0/24
218.241.119.0/24
218.241.120.0/24
218.241.121.0/24
218.241.122.0/24
218.241.123.0/24
218.241.124.0/24
218.241.125.0/24
218.241.126.0/24
218.241.127.0/24

xiaosha0711

巡查會發生啥事（）

naxi2233

恐怖如斯

zhutung

yemusn 发表于 2024-12-19 15:55
按CNNIC的asn屏蔽不就好了，AS Number 24151

AS24406
AS24409

这两个asn也是

tuolaji

直接把CNNIC 还有一些不安全的ASN block就好了。。