城市(city): Campinas
省份(region): Sao Paulo
国家(country): Brazil
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.192.0.0 - 20.255.255.255
CIDR: 20.192.0.0/10
NetName: MSFT
NetHandle: NET-20-192-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-10-18
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/20.192.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.206.210.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60903
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.206.210.59. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026021601 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 17 10:00:16 CST 2026
;; MSG SIZE rcvd: 106Host 59.210.206.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 59.210.206.20.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 178.45.33.250 | attackbotsspam | $f2bV_matches |
2019-08-27 01:43:12 |
| 92.118.38.35 | attack | Aug 26 19:54:46 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 19:55:26 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 19:56:06 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 19:56:45 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 19:57:26 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-08-27 02:12:09 |
| 45.236.152.16 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-27 02:21:29 |
| 198.24.72.60 | attackbots | Unauthorized connection attempt from IP address 198.24.72.60 on Port 445(SMB) |
2019-08-27 01:47:44 |
| 43.227.196.157 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-27 01:46:43 |
| 106.51.226.196 | attack | Aug 26 04:08:56 php1 sshd\[969\]: Invalid user minecraft from 106.51.226.196 Aug 26 04:08:56 php1 sshd\[969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.226.196 Aug 26 04:08:58 php1 sshd\[969\]: Failed password for invalid user minecraft from 106.51.226.196 port 21046 ssh2 Aug 26 04:13:59 php1 sshd\[1543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.226.196 user=root Aug 26 04:14:02 php1 sshd\[1543\]: Failed password for root from 106.51.226.196 port 2587 ssh2 |
2019-08-27 02:13:45 |
| 113.165.0.218 | attackspambots | Unauthorized connection attempt from IP address 113.165.0.218 on Port 445(SMB) |
2019-08-27 01:42:34 |
| 122.224.214.18 | attackbotsspam | Aug 26 17:05:44 meumeu sshd[2337]: Failed password for invalid user vmuser from 122.224.214.18 port 54088 ssh2 Aug 26 17:09:42 meumeu sshd[2841]: Failed password for invalid user inaintemodelu2008 from 122.224.214.18 port 55826 ssh2 ... |
2019-08-27 01:49:03 |
| 59.42.51.187 | attack | Aug 26 13:41:50 xtremcommunity sshd\[11416\]: Invalid user odoo from 59.42.51.187 port 12565 Aug 26 13:41:50 xtremcommunity sshd\[11416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.51.187 Aug 26 13:41:52 xtremcommunity sshd\[11416\]: Failed password for invalid user odoo from 59.42.51.187 port 12565 ssh2 Aug 26 13:46:17 xtremcommunity sshd\[11588\]: Invalid user gdm from 59.42.51.187 port 42764 Aug 26 13:46:17 xtremcommunity sshd\[11588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.51.187 ... |
2019-08-27 02:11:36 |
| 89.46.235.200 | attackspam | Sending SPAM email |
2019-08-27 01:46:16 |
| 45.55.95.57 | attack | 2019-08-26T20:12:30.134047 sshd[11676]: Invalid user emma123 from 45.55.95.57 port 49560 2019-08-26T20:12:30.149109 sshd[11676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.95.57 2019-08-26T20:12:30.134047 sshd[11676]: Invalid user emma123 from 45.55.95.57 port 49560 2019-08-26T20:12:32.455842 sshd[11676]: Failed password for invalid user emma123 from 45.55.95.57 port 49560 ssh2 2019-08-26T20:16:43.415463 sshd[11781]: Invalid user 123456 from 45.55.95.57 port 38604 ... |
2019-08-27 02:33:52 |
| 188.84.189.235 | attack | Aug 26 08:05:36 web9 sshd\[16225\]: Invalid user cvs from 188.84.189.235 Aug 26 08:05:36 web9 sshd\[16225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.84.189.235 Aug 26 08:05:38 web9 sshd\[16225\]: Failed password for invalid user cvs from 188.84.189.235 port 59932 ssh2 Aug 26 08:09:52 web9 sshd\[16984\]: Invalid user manager from 188.84.189.235 Aug 26 08:09:52 web9 sshd\[16984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.84.189.235 |
2019-08-27 02:21:06 |
| 182.125.80.138 | attackspam | Aug 26 20:10:43 keyhelp sshd[15289]: Invalid user admin from 182.125.80.138 Aug 26 20:10:43 keyhelp sshd[15289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.125.80.138 Aug 26 20:10:43 keyhelp sshd[15290]: Invalid user admin from 182.125.80.138 Aug 26 20:10:43 keyhelp sshd[15290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.125.80.138 Aug 26 20:10:45 keyhelp sshd[15289]: Failed password for invalid user admin from 182.125.80.138 port 50527 ssh2 Aug 26 20:10:46 keyhelp sshd[15290]: Failed password for invalid user admin from 182.125.80.138 port 50531 ssh2 Aug 26 20:10:47 keyhelp sshd[15289]: Failed password for invalid user admin from 182.125.80.138 port 50527 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=182.125.80.138 |
2019-08-27 02:28:47 |
| 2a02:29e8:770:0:1:1:0:128 | attackspambots | WordPress wp-login brute force :: 2a02:29e8:770:0:1:1:0:128 0.060 BYPASS [26/Aug/2019:23:35:17 1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3836 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-08-27 02:05:15 |
| 218.92.0.157 | attackspam | Aug 26 09:34:51 ny01 sshd[10346]: Failed password for root from 218.92.0.157 port 37510 ssh2 Aug 26 09:34:51 ny01 sshd[10348]: Failed password for root from 218.92.0.157 port 9081 ssh2 Aug 26 09:34:54 ny01 sshd[10346]: Failed password for root from 218.92.0.157 port 37510 ssh2 |
2019-08-27 02:25:45 |