疑似12377网络巡查IP段，42.83.147.0/24

zhiyang3

不知道具体干嘛的。总之屏蔽掉，以防不测
12377.cn 所指向的正是同IP段的42.83.147.1

1. [19/Dec/2024:11:11:31 +0800] HTTP/1.1 GET 42.83.147.53 http://***/ 301 169 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
   
2. [19/Dec/2024:11:11:32 +0800] HTTP/1.1 GET 42.83.147.53 https://www.***.html 200 702 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
   
3. [19/Dec/2024:13:15:07 +0800] HTTP/1.1 GET 42.83.147.60 http://***/ 301 169 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
   
4. [19/Dec/2024:13:15:08 +0800] HTTP/1.1 GET 42.83.147.60 https://www.***.html 200 714 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
   
5. [18/Dec/2024:00:34:28 +0800] HTTP/1.1 GET 42.83.147.53 http://***/ 301 169 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
   
6. [18/Dec/2024:00:34:29 +0800] HTTP/1.1 GET 42.83.147.53 https://www.***.html 200 707 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
   
7. [18/Dec/2024:12:25:46 +0800] HTTP/1.1 GET 42.83.147.56 http://***/ 301 169 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
   
8. [18/Dec/2024:12:25:47 +0800] HTTP/1.1 GET 42.83.147.56 https://***.html 200 703 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
   

复制代码

yemusn

按CNNIC的asn屏蔽不就好了，AS Number 24151

1. 1.2.4.0/24
   
2. 42.83.128.0/24
   
3. 42.83.129.0/24
   
4. 42.83.130.0/24
   
5. 42.83.131.0/24
   
6. 42.83.132.0/24
   
7. 42.83.134.0/24
   
8. 42.83.144.0/24
   
9. 42.83.145.0/24
   
10. 42.83.146.0/24
    
11. 42.83.147.0/24
    
12. 42.83.255.0/24
    
13. 125.208.34.0/24
    
14. 125.208.35.0/24
    
15. 125.208.37.0/24
    
16. 125.208.38.0/24
    
17. 125.208.39.0/24
    
18. 125.208.40.0/24
    
19. 125.208.41.0/24
    
20. 125.208.42.0/24
    
21. 125.208.45.0/24
    
22. 125.208.46.0/24
    
23. 203.119.25.0/24
    
24. 203.119.28.0/24
    
25. 203.119.31.0/24
    
26. 203.119.33.0/24
    
27. 210.2.4.0/24
    
28. 218.241.96.0/20
    
29. 218.241.96.0/24
    
30. 218.241.97.0/24
    
31. 218.241.103.0/24
    
32. 218.241.104.0/24
    
33. 218.241.110.0/24
    
34. 218.241.111.0/24
    
35. 218.241.112.0/24
    
36. 218.241.113.0/24
    
37. 218.241.114.0/24
    
38. 218.241.115.0/24
    
39. 218.241.116.0/24
    
40. 218.241.117.0/24
    
41. 218.241.118.0/24
    
42. 218.241.119.0/24
    
43. 218.241.120.0/24
    
44. 218.241.121.0/24
    
45. 218.241.122.0/24
    
46. 218.241.123.0/24
    
47. 218.241.124.0/24
    
48. 218.241.125.0/24
    
49. 218.241.126.0/24
    
50. 218.241.127.0/24

复制代码

xiaosha0711

巡查會發生啥事（）

naxi2233

恐怖如斯

zhutung

yemusn 发表于 2024-12-19 15:55
按CNNIC的asn屏蔽不就好了，AS Number 24151

1. AS24406
   
2. AS24409

复制代码

这两个asn也是

tuolaji

直接把CNNIC 还有一些不安全的ASN block就好了。。