City: Nanjing
Region: Jiangsu
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.94.64.36
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19124
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.94.64.36. IN A
;; AUTHORITY SECTION:
. 441 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022012201 1800 900 604800 86400
;; Query time: 252 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 23 10:35:13 CST 2022
;; MSG SIZE rcvd: 104Host 36.64.94.49.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 36.64.94.49.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 77.247.109.79 | botsattack | 77.247.109.79 - - [12/Apr/2019:14:11:58 +0800] "GET /admin/config.php HTTP/1.1" 404 232 "-" "curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2" 77.247.109.79 - - [12/Apr/2019:14:11:59 +0800] "\\x16\\x03\\x01\\x00\\x90\\x01\\x00\\x00\\x8C\\x03\\x03g\\xC4\\x0C\\x1A\\xF7q|\\xEF\\x98\\xBC\\x1AO\\xC2!\\x14-\\xA3K\\x85\\xCD\\xA5aG\\xEF\\xD8\\xC3\\x99y:F|\\xBA\\x00\\x00.\\xC0+\\xC0/\\x00\\x9E\\x00\\x9C\\xC0" 400 182 "-" "-" |
2019-04-12 14:16:02 |
| 42.156.254.59 | bots | 应该是yisou爬虫，但是不知道为啥400 42.156.254.59 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2 HTTP/1.1" 400 3429 "-" "-" 42.156.254.57 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-content/plugins/wp-quicklatex/css/quicklatex-format.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" 42.156.254.59 - - [09/Apr/2019:14:25:31 +0800] "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" 42.156.254.60 - - [09/Apr/2019:14:25:32 +0800] "GET /wp-content/themes/twentyfifteen-child/style.css?ver=5.1.1 HTTP/1.1" 400 3429 "-" "-" |
2019-04-09 14:46:10 |
| 180.97.35.149 | bots | 不是正常流量 180.97.35.149 - - [09/Apr/2019:06:37:37 +0800] "GET / HTTP/1.1" 301 194 "http://www.baidu.com/s?wd=widetme" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" 180.97.35.164 - - [09/Apr/2019:06:37:38 +0800] "GET / HTTP/1.1" 200 3259 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" 180.97.35.164 - - [09/Apr/2019:06:37:38 +0800] "GET /static/bootstrap/css/bootstrap.min.css HTTP/1.1" 200 144877 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" |
2019-04-09 06:44:15 |
| 118.25.49.95 | attack | 118.25.49.95 - - [08/Apr/2019:17:56:10 +0800] "GET /struts2-rest-showcase/orders.xhtml HTTP/1.1" 400 682 "http://118.25.52.138:443/struts2-rest-showcase/orders.xhtml" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [08/Apr/2019:17:56:10 +0800] "GET /index.action HTTP/1.1" 400 682 "http://118.25.52.138:443/index.action" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 118.25.49.95 - - [08/Apr/2019:17:56:10 +0800] "GET /index.do HTTP/1.1" 400 682 "http://118.25.52.138:443/index.do" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-08 17:57:55 |
| 1.20.100.97 | attack | 1.20.100.97 - - [08/Apr/2019:08:27:17 +0800] "POST https://www.eznewstoday.com/wp-login.php HTTP/1.1" 200 5534 "https://www.eznewstoday.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:52.54.17) Gecko/20166441 Firefox/52.54.17" |
2019-04-08 08:28:11 |
| 119.3.230.3 | attack | 119.3.230.3 - - [09/Apr/2019:01:31:17 +0800] "GET /db_cts.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 S afari/537.36" 119.3.230.3 - - [09/Apr/2019:01:31:17 +0800] "GET /db_pma.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 S afari/537.36" 119.3.230.3 - - [09/Apr/2019:01:31:18 +0800] "GET /logon.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Sa fari/537.36" 119.3.230.3 - - [09/Apr/2019:01:31:18 +0800] "GET /help-e.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 S afari/537.36" |
2019-04-09 04:10:33 |
| 207.180.211.248 | attack | 207.180.211.248 - - [10/Apr/2019:15:58:13 +0800] "GET /t6nv.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:14 +0800] "GET /muhstik.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:14 +0800] "GET /text.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:14 +0800] "GET /wp-config.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:14 +0800] "GET /muhstik.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:15 +0800] "GET /muhstik2.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:15 +0800] "GET /muhstiks.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:15 +0800] "GET /muhstik-dpr.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" 207.180.211.248 - - [10/Apr/2019:15:58:15 +0800] "GET /lol.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" |
2019-04-10 16:01:17 |
| 46.229.206.135 | attack | 46.229.206.135 - - [10/Apr/2019:08:58:54 +0800] "POST https://www.eznewstoday.com/wp-login.php?redirect_to=https%3A%2F%2Fwww.eznewstoday.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 7150 "https://www.eznewstoday.com/wp-login.php?redirect_to=https%3A%2F%2Fwww.eznewstoday.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 5.0) AppleWebKit/533.90.37 (KHTML, like Gecko) Version/5.3.8 Safari/531.73" |
2019-04-10 09:00:42 |
| 87.168.245.228 | attack | 87.168.245.228 - - [16/Apr/2019:06:41:59 +0800] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 87.168.245.228 - - [16/Apr/2019:06:42:02 +0800] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" |
2019-04-16 06:42:34 |
| 185.195.27.254 | botsattack | 185.195.27.254 - - [18/Apr/2019:06:11:46 +0800] "GET /wp2/wp-login.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.195.27.254 - - [18/Apr/2019:06:11:47 +0800] "GET /wp2/wp-login.php HTTP/1.1" 404 209 "http://118.25.52.138/wp2/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-04-18 06:12:46 |
| 123.249.7.34 | attack | 123.249.7.34 - - [12/Apr/2019:02:27:37 +0800] "POST /uploads/dede/sys_verifies.php?action=down HTTP/1.1" 301 194 "http://ipinfo.asytech.cn/uploads/dede/sys_verifies.php?action=down" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 123.249.7.34 - - [12/Apr/2019:02:27:37 +0800] "POST /index.php/api/Uploadify/preview HTTP/1.1" 301 194 "http://ipinfo.asytech.cn/index.php/api/Uploadify/preview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" |
2019-04-12 06:28:14 |
| 58.251.121.185 | attack | 58.251.121.185 - - [12/Apr/2019:06:27:56 +0800] "GET /mbqrw.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 58.251.121.185 - - [12/Apr/2019:06:27:57 +0800] "GET /mbqrw.php HTTP/1.1" 404 209 "http://ipinfo.asytech.cn/mbqrw.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-12 06:29:46 |
| 37.59.68.172 | attack | 37.59.68.172 - - [09/Apr/2019:14:34:22 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 37.59.68.172 - - [09/Apr/2019:14:34:23 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 37.59.68.172 - - [09/Apr/2019:14:34:24 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" 37.59.68.172 - - [09/Apr/2019:14:34:24 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" 37.59.68.172 - - [09/Apr/2019:14:34:24 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 400 3623 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" |
2019-04-09 14:45:03 |
| 120.131.10.157 | attack | 120.131.10.157 - - [09/Apr/2019:04:15:09 +0800] "GET /index.php?s=/Core/File/uploadPictureBase64.html HTTP/1.1" 200 10484 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50" |
2019-04-09 04:15:48 |
| 101.226.79.190 | attack | 101.226.79.190 - - [10/Apr/2019:21:18:52 +0800] "GET /lindex.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.79.190 - - [10/Apr/2019:21:18:52 +0800] "GET /lindex.php HTTP/1.1" 404 209 "http://118.25.52.138/lindex.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 163.177.90.152 - - [10/Apr/2019:21:18:52 +0800] "GET /admin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 163.177.90.152 - - [10/Apr/2019:21:18:53 +0800] "GET /admin/index.php HTTP/1.1" 404 209 "http://118.25.52.138/admin/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-11 05:59:06 |