City: unknown
Region: unknown
Country: India
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.94.224.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59756
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;59.94.224.132. IN A
;; AUTHORITY SECTION:
. 309 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 09:52:23 CST 2022
;; MSG SIZE rcvd: 106132.224.94.59.in-addr.arpa domain name pointer static.chandigarh.bb.59.94.224.132/24.bsnl.in.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
132.224.94.59.in-addr.arpa name = static.chandigarh.bb.59.94.224.132/24.bsnl.in.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 196.22.201.51 | attack | 登录攻击 196.22.201.51 - - [22/Apr/2019:12:36:06 +0800] "POST https://www.eznewstoday.com/wp-login.php HTTP/1.1" 200 5534 "https://www.eznewstoday.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.60.13) Gecko/20172285 Firefox/45.60.13" |
2019-04-22 12:37:16 |
| 220.181.51.109 | bots | 没有百度UA的百度爬虫 220.181.51.109 - - [22/Apr/2019:08:09:25 +0800] "GET / HTTP/1.1" 200 105648 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36" |
2019-04-22 08:10:42 |
| 123.206.22.203 | attack | 123.206.22.203 - - [19/Apr/2019:14:27:22 +0800] "POST /Moxin.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:27:26 +0800] "POST /CCCC.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" 123.206.22.203 - - [19/Apr/2019:14:27:26 +0800] "POST /mobai.PHP HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0" |
2019-04-19 14:28:25 |
| 52.5.70.31 | spambots | 52.5.70.31 - - [22/Apr/2019:18:27:34 +0800] "GET /index.php/2019/04/19/xiaomi_2019_04_19_en/ HTTP/1.1" 200 13454 "-" "Grammarly/1.0 (http://www.grammarly.com)" |
2019-04-22 18:28:24 |
| 64.233.172.176 | bots | 打开谷歌search console就会出现，国内的 64.233.172.176 - - [20/Apr/2019:10:50:07 +0800] "GET / HTTP/1.1" 200 3263 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon" 64.233.172.174 - - [20/Apr/2019:10:50:08 +0800] "GET /static/favicon.ico HTTP/1.1" 200 4286 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon" |
2019-04-20 10:51:45 |
| 123.206.44.225 | attack | 123.206.44.225 - - [18/Apr/2019:22:22:21 +0800] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 518 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:22 +0800] "GET /admin/pma/index.php HTTP/1.1" 404 513 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:22 +0800] "GET /admin/PMA/index.php HTTP/1.1" 404 513 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:23 +0800] "GET /admin/mysql/index.php HTTP/1.1" 404 515 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" 123.206.44.225 - - [18/Apr/2019:22:22:23 +0800] "GET /admin/mysql2/index.php HTTP/1.1" 404 516 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" |
2019-04-19 06:42:27 |
| 5.188.210.101 | botsattack | 5.188.210.101 - - [16/Apr/2019:16:54:38 +0800] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 465 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" |
2019-04-16 16:55:07 |
| 185.132.133.23 | proxy | 可能是代理检测吧 185.132.133.23 - - [19/Apr/2019:18:21:50 +0800] "CONNECT mobile.chomikuj.pl:80 HTTP/1.1" 400 182 "-" "-" |
2019-04-19 18:22:44 |
| 213.97.80.165 | bots | 213.97.80.165 - - [21/Apr/2019:08:08:52 +0800] "GET //CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:08:54 +0800] "GET //CHANGELOG.txt HTTP/1.1" 308 257 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:09:00 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 301 194 "-" "libwww-perl/6.04" 213.97.80.165 - - [21/Apr/2019:08:09:01 +0800] "GET /check-ip//CHANGELOG.txt HTTP/1.1" 404 232 "-" "libwww-perl/6.04" |
2019-04-21 08:10:22 |
| 81.209.177.189 | bots | 建议屏蔽 81.209.177.189 - - [19/Apr/2019:20:24:13 +0800] "GET /check-ip/103.28.161.75/ HTTP/1.1" 200 8318 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)" 81.209.177.136 - - [19/Apr/2019:20:24:34 +0800] "GET /check-ip/216.170.115.107/ HTTP/1.1" 200 8450 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)" 81.209.177.189 - - [19/Apr/2019:20:24:44 +0800] "GET /check-ip/170.239.229.3/ HTTP/1.1" 200 9318 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)" 81.209.177.189 - - [19/Apr/2019:20:24:54 +0800] "GET /check-ip/35.192.96.39/ HTTP/1.1" 200 8547 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)" |
2019-04-19 20:27:29 |
| 35.200.107.73 | attack | 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 35.200.107.73 - - [16/Apr/2019:21:17:31 +0800] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-04-16 21:34:35 |
| 128.14.133.50 | attack | 128.14.133.50 - - [23/Apr/2019:22:47:50 +0800] "GET /cgi-bin/config.exp HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" |
2019-04-23 22:48:46 |
| 14.17.3.65 | attack | 管理员账户攻击检测 14.17.3.65 - - [18/Apr/2019:07:03:49 +0800] "GET /administrator/index.php HTTP/1.1" 404 480 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Co re/UIWebView NetType/2G Mem/117" |
2019-04-18 08:10:32 |
| 89.248.172.90 | proxy | 89.248.172.90 - - [17/Apr/2019:14:10:41 +0800] "CONNECT dnspod.qcloud.com:443 HTTP/1.1" 405 519 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)" |
2019-04-17 15:15:55 |
| 222.186.10.54 | attack | 222.186.10.54 - - [23/Apr/2019:03:56:16 +0800] "POST //plus/e7xue.php HTTP/1.1" 404 513 "http://www.eznewstoday.com//plus/e7xue.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //plus/date.php HTTP/1.1" 404 512 "http://www.eznewstoday.com//plus/date.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //seo.php HTTP/1.1" 404 506 "http://www.eznewstoday.com//seo.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //tapic.php HTTP/1.1" 404 508 "http://www.eznewstoday.com//tapic.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //vedioes.php HTTP/1.1" 404 510 "http://www.eznewstoday.com//vedioes.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.10.54 - - [23/Apr/2019:03:56:17 +0800] "POST //Dom/Images/check.asp HTTP/1.1" 404 519 "http://www.eznewstoday.com//Dom/Images/check.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Window s NT 6.1)" |
2019-04-23 04:50:57 |