城市(city): Springfield
省份(region): Illinois
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b'#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 131.103.0.0 - 131.103.255.255
CIDR: 131.103.0.0/16
NetName: NTTA-131-103
NetHandle: NET-131-103-0-0-1
Parent: NET131 (NET-131-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: NTT America, Inc. (NTTAM-1)
RegDate: 1988-11-04
Updated: 2026-02-10
Comment: Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv
Comment:
Comment: Reassignment information for this block is
Comment: available at rwhois.gin.ntt.net port 4321
Ref: https://rdap.arin.net/registry/ip/131.103.0.0
OrgName: NTT America, Inc.
OrgId: NTTAM-1
Address: 15809 Bear Creek Pkwy
Address: Suite 320
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 2005-12-08
Updated: 2024-03-04
Ref: https://rdap.arin.net/registry/entity/NTTAM-1
ReferralServer: rwhois://rwhois.gin.ntt.net:4321
OrgTechHandle: VIPAR-ARIN
OrgTechName: VIPAR
OrgTechPhone: +1-877-688-6625
OrgTechEmail: ipr@gin.ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/VIPAR-ARIN
OrgAbuseHandle: NAAC-ARIN
OrgAbuseName: NTT America Abuse Contact
OrgAbusePhone: +1-877-688-6625
OrgAbuseEmail: abuse@ntt.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/NAAC-ARIN
OrgRoutingHandle: PEERI-ARIN
OrgRoutingName: Peering
OrgRoutingPhone: +1-877-688-6625
OrgRoutingEmail: peering@ntt.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/PEERI-ARIN
OrgNOCHandle: NASC-ARIN
OrgNOCName: NTT America Support Contact
OrgNOCPhone: +1-877-688-6625
OrgNOCEmail: ce-support@gin.ntt.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NASC-ARIN
OrgTechHandle: CANDE70-ARIN
OrgTechName: Candela, Massimo
OrgTechPhone: +1-214-915-1366
OrgTechEmail: massimo@ntt.net
OrgTechRef: https://rdap.arin.net/registry/entity/CANDE70-ARIN
RTechHandle: VIA4-ORG-ARIN
RTechName: VIPAR
RTechPhone: +1-877-688-6625
RTechEmail: ipr@gin.ntt.net
RTechRef: https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.gin.ntt.net:4321.
%rwhois V-1.5:0078b6:00 rwhois.gin.ntt.net (Vipar 0.1a. Comments to ipr@gin.ntt.net)
network:Class-Name:network
network:Auth-Area:131.103.128.0/17
network:ID:USV4-131-103-140-0.127.0.0.1/32
network:Handle:USV4-131-103-140-0
network:Network-Name:USV4-131-103-140-0
network:IP-Network:131.103.140.0/22
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:131.103.140.0 - 131.103.143.255
network:Org-Name:Zhilian Technology CO., LTD.
network:Street-Address:ORTON SOUTHGATE SUITE 100 12 MAN
network:City:PETERBOROUGH
network:State:
network:Postal-Code:E26UP
network:Country-Code:EN
network:Tech-Contact;I:ZLIDC.127.0.0.1/32
network:Created:2025-10-02 17:04:39.741331+00
network:Updated:2025-10-02 17:04:39.741331+00
network:Class-Name:network
network:Auth-Area:131.103.128.0/17
network:ID:NETBLK-131-103-128.127.0.0.1/32
network:Handle:NETBLK-131-103-128
network:Network-Name:131-103-128
network:IP-Network:131.103.128.0/17
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:131.103.128.0 - 131.103.255.255
network:Org-Name:NTT DATA
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:GIN-BBV4.127.0.0.1/32
network:Created:2025-03-26 18:23:40.529641+00
network:Updated:2025-03-26 18:23:40.529641+00
network:Class-Name:network
network:Auth-Area:131.103.128.0/17
network:ID:NETBLK-VRIO-131-103.127.0.0.1/32
network:Handle:NETBLK-VRIO-131-103
network:Network-Name:VRIO-131-103
network:IP-Network:131.103.0.0/16
network:In-Addr-Server;I:AUTH21-GIN-HST.127.0.0.1/32
network:In-Addr-Server;I:AUTH22-GIN-HST.127.0.0.1/32
network:In-Addr-Server;I:AUTH23-GIN-HST.127.0.0.1/32
network:In-Addr-Server;I:AUTH24-GIN-HST.127.0.0.1/32
network:In-Addr-Server;I:AUTH25-GIN-HST.127.0.0.1/32
network:IP-Network-Block:131.103.0.0 - 131.103.255.255
network:Org-Name:NTT America, Inc.
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:VIA4-ORG-ARIN.127.0.0.1/32
network:Created:1999-12-14 23:12:14+00
network:Updated:2007-07-18 22:40:32+00
network:Class-Name:network
network:Auth-Area:131.103.128.0/17
network:ID:NETBLK-131-103-128.127.0.0.1/32
network:Handle:NETBLK-131-103-128
network:Network-Name:131-103-128
network:IP-Network:131.103.128.0/17
network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32
network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32
network:IP-Network-Block:131.103.128.0 - 131.103.255.255
network:Org-Name:NTT DATA
network:Street-Address:8300 E Maplewood Ave. Suite 400
network:City:Greenwood Village
network:State:CO
network:Postal-Code:80111
network:Country-Code:US
network:Tech-Contact;I:GIN-BBV4.127.0.0.1/32
network:Created:2025-03-26 18:23:40.529641+00
network:Updated:2025-03-26 18:23:40.529641+00
%ok'; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.103.140.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18540
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.103.140.1. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070200 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 02 15:18:39 CST 2026
;; MSG SIZE rcvd: 106Host 1.140.103.131.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.140.103.131.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 176.114.199.56 | attack | May 4 03:12:59 gw1 sshd[29963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.114.199.56 May 4 03:13:02 gw1 sshd[29963]: Failed password for invalid user ssu from 176.114.199.56 port 38106 ssh2 ... |
2020-05-04 06:13:16 |
| 106.51.76.115 | attack | May 4 01:39:27 gw1 sshd[24365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.76.115 May 4 01:39:28 gw1 sshd[24365]: Failed password for invalid user aurore from 106.51.76.115 port 61674 ssh2 ... |
2020-05-04 05:41:26 |
| 129.211.174.145 | attack | May 3 23:46:35 server sshd[17036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.174.145 May 3 23:46:36 server sshd[17036]: Failed password for invalid user sjy from 129.211.174.145 port 58662 ssh2 May 3 23:51:53 server sshd[17346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.174.145 ... |
2020-05-04 06:11:37 |
| 180.168.35.110 | attack | May 3 23:11:03 server sshd[46150]: Failed password for root from 180.168.35.110 port 51866 ssh2 May 3 23:14:46 server sshd[48624]: Failed password for invalid user guo from 180.168.35.110 port 44056 ssh2 May 3 23:16:51 server sshd[50150]: Failed password for invalid user simo from 180.168.35.110 port 47304 ssh2 |
2020-05-04 06:03:36 |
| 219.235.6.221 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-05-04 05:43:05 |
| 79.152.163.57 | attack | Automatic report - Port Scan Attack |
2020-05-04 06:00:19 |
| 217.182.147.97 | attackbotsspam | 21 attempts against mh-misbehave-ban on beach |
2020-05-04 06:00:36 |
| 180.250.248.169 | attackspambots | SSH brute force attempt |
2020-05-04 06:09:50 |
| 36.7.110.188 | attackspam | CMS (WordPress or Joomla) login attempt. |
2020-05-04 05:39:14 |
| 90.108.193.14 | attackbotsspam | May 3 21:50:35 XXX sshd[1223]: Invalid user a from 90.108.193.14 port 40452 |
2020-05-04 06:13:50 |
| 106.58.180.83 | attackspam | (sshd) Failed SSH login from 106.58.180.83 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 3 22:32:32 rainbow sshd[25034]: Invalid user zf from 106.58.180.83 port 56668 May 3 22:32:35 rainbow sshd[25034]: Failed password for invalid user zf from 106.58.180.83 port 56668 ssh2 May 3 22:36:04 rainbow sshd[25171]: Invalid user justin from 106.58.180.83 port 37810 May 3 22:36:07 rainbow sshd[25171]: Failed password for invalid user justin from 106.58.180.83 port 37810 ssh2 May 3 22:38:42 rainbow sshd[25290]: Invalid user toms from 106.58.180.83 port 40698 |
2020-05-04 06:13:32 |
| 219.133.104.157 | attack | $f2bV_matches |
2020-05-04 05:47:00 |
| 159.203.133.182 | attackspambots | 2020-05-03T21:30:17.474770abusebot.cloudsearch.cf sshd[24000]: Invalid user wa from 159.203.133.182 port 53397 2020-05-03T21:30:17.481741abusebot.cloudsearch.cf sshd[24000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.133.182 2020-05-03T21:30:17.474770abusebot.cloudsearch.cf sshd[24000]: Invalid user wa from 159.203.133.182 port 53397 2020-05-03T21:30:19.598323abusebot.cloudsearch.cf sshd[24000]: Failed password for invalid user wa from 159.203.133.182 port 53397 ssh2 2020-05-03T21:33:13.738574abusebot.cloudsearch.cf sshd[24196]: Invalid user unicorn from 159.203.133.182 port 53756 2020-05-03T21:33:13.744309abusebot.cloudsearch.cf sshd[24196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.133.182 2020-05-03T21:33:13.738574abusebot.cloudsearch.cf sshd[24196]: Invalid user unicorn from 159.203.133.182 port 53756 2020-05-03T21:33:16.357419abusebot.cloudsearch.cf sshd[24196]: Failed passwo ... |
2020-05-04 05:56:29 |
| 195.54.167.14 | attack | May 3 23:47:53 debian-2gb-nbg1-2 kernel: \[10801375.004414\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.167.14 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=949 PROTO=TCP SPT=51434 DPT=14431 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-04 06:05:22 |
| 218.92.0.199 | attackspambots | May 3 23:42:04 vmanager6029 sshd\[14123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.199 user=root May 3 23:42:07 vmanager6029 sshd\[14121\]: error: PAM: Authentication failure for root from 218.92.0.199 May 3 23:42:08 vmanager6029 sshd\[14126\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.199 user=root |
2020-05-04 05:53:11 |