城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 131.153.0.0 - 131.153.247.255
CIDR: 131.153.128.0/18, 131.153.192.0/19, 131.153.240.0/21, 131.153.0.0/17, 131.153.224.0/20
NetName: SSL-65
NetHandle: NET-131-153-0-0-1
Parent: NET131 (NET-131-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: SECURED SERVERS LLC (SSL-65)
RegDate: 2015-05-08
Updated: 2018-01-16
Ref: https://rdap.arin.net/registry/ip/131.153.0.0
OrgName: SECURED SERVERS LLC
OrgId: SSL-65
Address: 2353 W University Bldg A
City: Tempe
StateProv: AZ
PostalCode: 85281
Country: US
RegDate: 2003-12-08
Updated: 2026-04-06
Ref: https://rdap.arin.net/registry/entity/SSL-65
ReferralServer: rwhois://rwhois.securedservers.com:4321
OrgTechHandle: IPADM294-ARIN
OrgTechName: IPADMIN
OrgTechPhone: +1-480-422-2031
OrgTechEmail: ipadmin@phoenixnap.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPADM294-ARIN
OrgAbuseHandle: ABUSE1536-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-480-422-2022
OrgAbuseEmail: abuse@phoenixnap.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1536-ARIN
OrgTechHandle: MONTE41-ARIN
OrgTechName: Montebello, Adrian
OrgTechPhone: +35679305305
OrgTechEmail: adrianm@phoenixnap.com
OrgTechRef: https://rdap.arin.net/registry/entity/MONTE41-ARIN
OrgTechHandle: MUSGR48-ARIN
OrgTechName: Musgrave, Brian
OrgTechPhone: +1-480-401-0309
OrgTechEmail: brianmu@phoenixnap.com
OrgTechRef: https://rdap.arin.net/registry/entity/MUSGR48-ARIN
OrgTechHandle: ILICM-ARIN
OrgTechName: Ilic, Milos
OrgTechPhone: +381615494754
OrgTechEmail: milosi@phoenixnap.com
OrgTechRef: https://rdap.arin.net/registry/entity/ILICM-ARIN
OrgTechHandle: CARMO67-ARIN
OrgTechName: Carmody, Robert
OrgTechPhone: +1-480-506-0120
OrgTechEmail: robertca@phoenixnap.com
OrgTechRef: https://rdap.arin.net/registry/entity/CARMO67-ARIN
OrgTechHandle: PETRO182-ARIN
OrgTechName: Petrovic, Dragan
OrgTechPhone: +381621448366
OrgTechEmail: draganp@phoenixnap.com
OrgTechRef: https://rdap.arin.net/registry/entity/PETRO182-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to rwhois.securedservers.com:4321.
%rwhois V-1.0,V-1.5:00090h:00 support.phoenixnap.com (Ubersmith RWhois Server V-4.4.2)
autharea=131.153.168.0/21
xautharea=131.153.168.0/21
network:Class-Name:network
network:Auth-Area:131.153.168.0/21
network:ID:NET-685171.131.153.168.216/29
network:Network-Name:Public
network:IP-Network:131.153.168.216/29
network:IP-Network-Block:131.153.168.216 - 131.153.168.223
network:Org-Name:TipTop Technologies
network:Street-Address:1503 Emperor Way
network:City:Sunnyvale
network:State:CA
network:Postal-Code:94087
network:Country-Code:US
network:Tech-Contact:MAINT-685171.131.153.168.216/29
network:Created:20231018003321000
network:Updated:20231018003321000
network:Updated-By:dnsadmin@securedservers.com
contact:POC-Name:DNS Administrator
contact:POC-Email:dnsadmin@securedservers.com
contact:POC-Phone:(480) 422-2023
contact:Tech-Name:DNS Administrator
contact:Tech-Email:dnsadmin@securedservers.com
contact:Tech-Phone:(480) 422-2023
contact:Abuse-Name:Abuse
contact:Abuse-Email:abuse@securedservers.com
contact:Abuse-Phone:+1-480-422-2022 (Office)
%ok; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.153.168.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49775
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.153.168.218. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026051600 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 16 18:31:48 CST 2026
;; MSG SIZE rcvd: 108Host 218.168.153.131.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 218.168.153.131.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 111.40.7.83 | attackspam | Unauthorized connection attempt detected from IP address 111.40.7.83 to port 1433 [J] |
2020-02-01 21:27:16 |
| 157.55.39.137 | attackbots | Automatic report - Banned IP Access |
2020-02-01 22:08:43 |
| 113.160.152.3 | attackbotsspam | Honeypot attack, port: 445, PTR: static.vnpt.vn. |
2020-02-01 22:09:36 |
| 42.113.128.43 | attackbots | Unauthorized connection attempt detected from IP address 42.113.128.43 to port 23 [J] |
2020-02-01 21:34:49 |
| 13.239.120.56 | attackspam | Unauthorized connection attempt detected from IP address 13.239.120.56 to port 80 [T] |
2020-02-01 21:39:10 |
| 184.105.247.228 | attackbots | 30005/tcp 23/tcp 5555/tcp... [2019-12-01/2020-02-01]40pkt,17pt.(tcp),1pt.(udp) |
2020-02-01 21:57:44 |
| 15.164.49.188 | attackspambots | [SatFeb0108:25:31.7972712020][:error][pid12116:tid47392776742656][client15.164.49.188:47030][client15.164.49.188]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"211"][id"390709"][rev"30"][msg"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely"][data"/.env"][severity"CRITICAL"][hostname"appalti-contratti.ch"][uri"/.env"][unique_id"XjUn618UQQXcjZxrK4Y-KgAAAYg"][SatFeb0108:25:39.6407282020][:error][pid12039:tid47392770438912][client15.164.49.188:44782][client15.164.49.188]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\ |
2020-02-01 21:38:14 |
| 58.56.164.66 | attack | Unauthorized connection attempt detected from IP address 58.56.164.66 to port 445 [T] |
2020-02-01 21:30:29 |
| 106.75.79.172 | attack | Unauthorized connection attempt detected from IP address 106.75.79.172 to port 8000 [J] |
2020-02-01 21:27:57 |
| 106.1.56.139 | attackbots | Unauthorized connection attempt detected from IP address 106.1.56.139 to port 81 [T] |
2020-02-01 21:28:14 |
| 101.109.177.77 | attackbotsspam | Unauthorized connection attempt detected from IP address 101.109.177.77 to port 2323 [T] |
2020-02-01 21:29:12 |
| 121.126.185.155 | attackspam | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-02-01 21:59:00 |
| 122.15.65.204 | attackbots | 2020-02-01T13:47:33.139611ns386461 sshd\[25065\]: Invalid user guest from 122.15.65.204 port 38386 2020-02-01T13:47:33.145101ns386461 sshd\[25065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.15.65.204 2020-02-01T13:47:35.064410ns386461 sshd\[25065\]: Failed password for invalid user guest from 122.15.65.204 port 38386 ssh2 2020-02-01T14:50:46.133195ns386461 sshd\[16544\]: Invalid user ftp_user from 122.15.65.204 port 49248 2020-02-01T14:50:46.137746ns386461 sshd\[16544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.15.65.204 ... |
2020-02-01 22:02:24 |
| 42.112.16.179 | attackspambots | Unauthorized connection attempt detected from IP address 42.112.16.179 to port 1433 [T] |
2020-02-01 21:36:15 |
| 5.188.206.50 | attackspambots | RDP Bruteforce |
2020-02-01 21:40:37 |