城市(city): Des Moines
省份(region): Iowa
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 13.64.0.0 - 13.107.255.255
CIDR: 13.64.0.0/11, 13.104.0.0/14, 13.96.0.0/13
NetName: MSFT
NetHandle: NET-13-64-0-0-1
Parent: NET13 (NET-13-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-03-26
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/13.64.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.89.124.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45765
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.89.124.211. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025110602 1800 900 604800 86400
;; Query time: 194 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 07 11:30:27 CST 2025
;; MSG SIZE rcvd: 106211.124.89.13.in-addr.arpa domain name pointer azpdcs8dmkff.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
211.124.89.13.in-addr.arpa name = azpdcs8dmkff.stretchoid.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 157.230.33.175 | attackspambots | DATE:2020-04-27 18:55:57, IP:157.230.33.175, PORT:ssh SSH brute force auth (docker-dc) |
2020-04-28 02:01:14 |
| 198.50.138.227 | attackspambots | Apr 27 14:33:57 PorscheCustomer sshd[2000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.138.227 Apr 27 14:33:59 PorscheCustomer sshd[2000]: Failed password for invalid user l from 198.50.138.227 port 49832 ssh2 Apr 27 14:38:01 PorscheCustomer sshd[2142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.138.227 ... |
2020-04-28 01:57:52 |
| 36.72.219.1 | attackspambots | 2020-04-27 02:34:12 server sshd[19343]: Failed password for invalid user www from 36.72.219.1 port 34340 ssh2 |
2020-04-28 01:35:11 |
| 92.126.240.162 | attackbotsspam | RU_NSOELSV-NCC_<177>1587988270 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2]: |
2020-04-28 02:15:12 |
| 222.186.173.215 | attackspam | DATE:2020-04-27 19:48:42, IP:222.186.173.215, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) |
2020-04-28 01:49:03 |
| 72.167.190.210 | attackbotsspam | [MonApr2713:51:43.0010552020][:error][pid31977:tid47649350444800][client72.167.190.210:35027][client72.167.190.210]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(\?:/index\\\\\\\\.php/admin/catalog_category/save\|\(\?:/admin/stats\|/css/gallery-css\)\\\\\\\\.php\\\\\\\\\?1=1\|/admin\\\\\\\\.php\\\\\\\\\?tile=mail\$\|/catalog_category/save/key/\|/\\\\\\\\\?op=admin_settings\|\^/\\\\\\\\\?openpage=\|\^/admin/extra\|\^/node/[0-9] /edit\\\\\\\\\?destination=admin/content\|\^/administ..."against"REQUEST_URI"required.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"321"][id"340145"][rev"43"][msg"Atomicorp.comWAFRules:AttackBlocked-SQLinjectionprobe"][data"1=1"][severity"CRITICAL"][tag"SQLi"][hostname"www.galardi.ch"][uri"/"][unique_id"XqbHTn9dAdn11cTfR9MZ6wAAAEI"][MonApr2713:51:46.9444512020][:error][pid15251:tid47649445123840][client72.167.190.210:35079][client72.167.190.210]ModSecurity:Accessdeniedwithcode403\(phase2\).detectedSQLiusinglibinjectionwithfin |
2020-04-28 01:48:33 |
| 81.10.61.2 | attackbots | Unauthorised access (Apr 27) SRC=81.10.61.2 LEN=40 TTL=53 ID=56487 TCP DPT=23 WINDOW=52585 SYN |
2020-04-28 01:50:35 |
| 196.207.254.250 | attackspam | Apr 27 16:46:30 124388 sshd[22561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.207.254.250 Apr 27 16:46:30 124388 sshd[22561]: Invalid user oracle from 196.207.254.250 port 49819 Apr 27 16:46:32 124388 sshd[22561]: Failed password for invalid user oracle from 196.207.254.250 port 49819 ssh2 Apr 27 16:46:34 124388 sshd[22563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.207.254.250 user=root Apr 27 16:46:35 124388 sshd[22563]: Failed password for root from 196.207.254.250 port 50062 ssh2 |
2020-04-28 01:40:21 |
| 218.89.241.68 | attackbotsspam | 17508/tcp 30453/tcp 7547/tcp... [2020-04-20/27]6pkt,6pt.(tcp) |
2020-04-28 01:49:31 |
| 76.120.7.86 | attack | Apr 27 15:03:31 vps sshd[521744]: Failed password for invalid user jcm from 76.120.7.86 port 53628 ssh2 Apr 27 15:06:35 vps sshd[540482]: Invalid user ppp from 76.120.7.86 port 49798 Apr 27 15:06:35 vps sshd[540482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-76-120-7-86.hsd1.co.comcast.net Apr 27 15:06:37 vps sshd[540482]: Failed password for invalid user ppp from 76.120.7.86 port 49798 ssh2 Apr 27 15:09:44 vps sshd[555137]: Invalid user artik from 76.120.7.86 port 49904 ... |
2020-04-28 01:35:47 |
| 222.186.180.6 | attackspam | Apr 27 19:48:50 Ubuntu-1404-trusty-64-minimal sshd\[26940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Apr 27 19:48:52 Ubuntu-1404-trusty-64-minimal sshd\[26940\]: Failed password for root from 222.186.180.6 port 54788 ssh2 Apr 27 19:49:09 Ubuntu-1404-trusty-64-minimal sshd\[27097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Apr 27 19:49:11 Ubuntu-1404-trusty-64-minimal sshd\[27097\]: Failed password for root from 222.186.180.6 port 63374 ssh2 Apr 27 19:49:30 Ubuntu-1404-trusty-64-minimal sshd\[27339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root |
2020-04-28 01:57:36 |
| 210.22.78.74 | attackbots | Apr 27 12:54:03 scw-6657dc sshd[14690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.22.78.74 Apr 27 12:54:03 scw-6657dc sshd[14690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.22.78.74 Apr 27 12:54:05 scw-6657dc sshd[14690]: Failed password for invalid user brs from 210.22.78.74 port 9186 ssh2 ... |
2020-04-28 01:51:58 |
| 85.159.35.138 | attackspam | (imapd) Failed IMAP login from 85.159.35.138 (RU/Russia/-): 1 in the last 3600 secs |
2020-04-28 02:13:56 |
| 185.176.27.34 | attack | Apr 27 20:13:57 debian-2gb-nbg1-2 kernel: \[10270166.922101\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.34 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=53067 PROTO=TCP SPT=45062 DPT=31882 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-28 02:14:26 |
| 217.61.59.58 | attack | SSH brute force attempt |
2020-04-28 01:53:15 |