必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Des Moines

省份(region): Iowa

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       20.192.0.0 - 20.255.255.255
CIDR:           20.192.0.0/10
NetName:        MSFT
NetHandle:      NET-20-192-0-0-1
Parent:         NET20 (NET-20-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Microsoft Corporation (MSFT)
RegDate:        2017-10-18
Updated:        2021-12-14
Ref:            https://rdap.arin.net/registry/ip/20.192.0.0



OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2025-06-10
Comment:        To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment:        * https://cert.microsoft.com.  
Comment:        
Comment:        For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment:        * abuse@microsoft.com.  
Comment:        
Comment:        To report security vulnerabilities in Microsoft products and services, please contact:
Comment:        * secure@microsoft.com.  
Comment:        
Comment:        For legal and law enforcement-related requests, please contact:
Comment:        * msndcc@microsoft.com
Comment:        
Comment:        For routing, peering or DNS issues, please 
Comment:        contact:
Comment:        * IOC@microsoft.com
Ref:            https://rdap.arin.net/registry/entity/MSFT


OrgAbuseHandle: MAC74-ARIN
OrgAbuseName:   Microsoft Abuse Contact
OrgAbusePhone:  +1-425-882-8080 
OrgAbuseEmail:  abuse@microsoft.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MAC74-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName:   Microsoft Routing, Peering, and DNS
OrgTechPhone:  +1-425-882-8080 
OrgTechEmail:  IOC@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/MRPD-ARIN

OrgTechHandle: BEDAR6-ARIN
OrgTechName:   Bedard, Dawn 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  dabedard@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/BEDAR6-ARIN

OrgTechHandle: IPHOS5-ARIN
OrgTechName:   IPHostmaster, IPHostmaster 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  iphostmaster@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPHOS5-ARIN

OrgTechHandle: SINGH683-ARIN
OrgTechName:   Singh, Prachi 
OrgTechPhone:  +1-425-707-5601 
OrgTechEmail:  pracsin@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/SINGH683-ARIN

OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName:   Chaturmohta, Somesh 
OrgRoutingPhone:  +1-425-882-8080 
OrgRoutingEmail:  someshch@microsoft.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/CHATU3-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.221.68.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65437
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;20.221.68.159.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026052602 1800 900 604800 86400

;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 27 10:30:19 CST 2026
;; MSG SIZE  rcvd: 106
HOST信息:
159.68.221.20.in-addr.arpa domain name pointer azpdcgd9t716.stretchoid.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
159.68.221.20.in-addr.arpa	name = azpdcgd9t716.stretchoid.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.180.130 attackbotsspam
Too many connections or unauthorized access detected from Arctic banned ip
2020-05-05 05:47:17
101.71.129.8 attackbots
May  4 23:28:12 nextcloud sshd\[18755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.129.8  user=root
May  4 23:28:15 nextcloud sshd\[18755\]: Failed password for root from 101.71.129.8 port 7882 ssh2
May  4 23:40:41 nextcloud sshd\[31122\]: Invalid user admin from 101.71.129.8
May  4 23:40:41 nextcloud sshd\[31122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.129.8
2020-05-05 06:00:01
3.23.89.250 attack
mue-Direct access to plugin not allowed
2020-05-05 05:26:03
51.79.53.106 attackspambots
May  4 20:21:36 web8 sshd\[22099\]: Invalid user valera from 51.79.53.106
May  4 20:21:36 web8 sshd\[22099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.53.106
May  4 20:21:38 web8 sshd\[22099\]: Failed password for invalid user valera from 51.79.53.106 port 48664 ssh2
May  4 20:26:18 web8 sshd\[24364\]: Invalid user demo from 51.79.53.106
May  4 20:26:18 web8 sshd\[24364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.53.106
2020-05-05 05:38:18
160.16.82.31 attackspam
May  4 23:43:09 debian-2gb-nbg1-2 kernel: \[10887487.230235\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=160.16.82.31 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=12341 PROTO=TCP SPT=42501 DPT=475 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-05 05:53:22
171.234.199.211 attack
Brute-force attempt banned
2020-05-05 05:23:39
121.229.6.166 attack
May  4 21:09:21 localhost sshd[103347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.6.166  user=root
May  4 21:09:23 localhost sshd[103347]: Failed password for root from 121.229.6.166 port 33028 ssh2
May  4 21:14:56 localhost sshd[103747]: Invalid user zjw from 121.229.6.166 port 36066
May  4 21:14:56 localhost sshd[103747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.6.166
May  4 21:14:56 localhost sshd[103747]: Invalid user zjw from 121.229.6.166 port 36066
May  4 21:14:58 localhost sshd[103747]: Failed password for invalid user zjw from 121.229.6.166 port 36066 ssh2
...
2020-05-05 05:27:31
198.251.83.248 attackbots
May  4 17:48:00 vps46666688 sshd[4955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.251.83.248
May  4 17:48:02 vps46666688 sshd[4955]: Failed password for invalid user a from 198.251.83.248 port 57288 ssh2
...
2020-05-05 05:44:54
138.88.96.2 attackbots
May  4 23:10:26 home sshd[32358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.88.96.2
May  4 23:10:28 home sshd[32358]: Failed password for invalid user sprint from 138.88.96.2 port 60878 ssh2
May  4 23:13:36 home sshd[458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.88.96.2
...
2020-05-05 05:21:17
113.141.70.204 attack
[2020-05-04 17:49:25] NOTICE[1157] chan_sip.c: Registration from '"7070" ' failed for '113.141.70.204:5156' - Wrong password
[2020-05-04 17:49:25] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-04T17:49:25.510-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7070",SessionID="0x7f5f1001be58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/113.141.70.204/5156",Challenge="35b66614",ReceivedChallenge="35b66614",ReceivedHash="b096b5e7d89aee28e2baadb4f3cec925"
[2020-05-04 17:49:25] NOTICE[1157] chan_sip.c: Registration from '"7070" ' failed for '113.141.70.204:5156' - Wrong password
[2020-05-04 17:49:25] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-04T17:49:25.770-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7070",SessionID="0x7f5f1009cfe8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...
2020-05-05 05:57:44
159.203.112.185 attack
May  5 02:14:44 gw1 sshd[24859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.112.185
May  5 02:14:45 gw1 sshd[24859]: Failed password for invalid user mvx from 159.203.112.185 port 56562 ssh2
...
2020-05-05 05:32:21
115.238.97.2 attackspam
Lines containing failures of 115.238.97.2
May  4 03:10:46 ghostnameioc sshd[5907]: Invalid user gbase from 115.238.97.2 port 15624
May  4 03:10:46 ghostnameioc sshd[5907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.97.2 
May  4 03:10:47 ghostnameioc sshd[5907]: Failed password for invalid user gbase from 115.238.97.2 port 15624 ssh2
May  4 03:10:49 ghostnameioc sshd[5907]: Received disconnect from 115.238.97.2 port 15624:11: Bye Bye [preauth]
May  4 03:10:49 ghostnameioc sshd[5907]: Disconnected from invalid user gbase 115.238.97.2 port 15624 [preauth]
May  4 03:25:17 ghostnameioc sshd[6359]: Invalid user ftpuser from 115.238.97.2 port 17252
May  4 03:25:17 ghostnameioc sshd[6359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.97.2 
May  4 03:25:19 ghostnameioc sshd[6359]: Failed password for invalid user ftpuser from 115.238.97.2 port 17252 ssh2
May  4 03:25:21 ghostna........
------------------------------
2020-05-05 05:39:10
123.171.165.229 attackbots
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-05-05 05:55:46
120.72.86.4 attackspam
May  4 23:19:37 piServer sshd[4905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.72.86.4 
May  4 23:19:38 piServer sshd[4905]: Failed password for invalid user zww from 120.72.86.4 port 39050 ssh2
May  4 23:24:06 piServer sshd[5399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.72.86.4 
...
2020-05-05 05:30:39
120.29.157.206 attack
May  4 20:26:02 system,error,critical: login failure for user admin from 120.29.157.206 via telnet
May  4 20:26:03 system,error,critical: login failure for user ubnt from 120.29.157.206 via telnet
May  4 20:26:04 system,error,critical: login failure for user root from 120.29.157.206 via telnet
May  4 20:26:06 system,error,critical: login failure for user root from 120.29.157.206 via telnet
May  4 20:26:07 system,error,critical: login failure for user root from 120.29.157.206 via telnet
May  4 20:26:08 system,error,critical: login failure for user service from 120.29.157.206 via telnet
May  4 20:26:09 system,error,critical: login failure for user administrator from 120.29.157.206 via telnet
May  4 20:26:10 system,error,critical: login failure for user root from 120.29.157.206 via telnet
May  4 20:26:11 system,error,critical: login failure for user root from 120.29.157.206 via telnet
May  4 20:26:12 system,error,critical: login failure for user admin from 120.29.157.206 via telnet
2020-05-05 05:45:39

最近上报的IP列表

20.42.65.84 39.98.42.180 20.29.24.158 110.78.158.55
2606:4700:10::6814:7168 2606:4700:10::6816:3734 2606:4700:10::6814:9477 104.155.70.10
198.74.56.66 183.60.50.5 122.226.191.165 23.239.11.64
172.239.64.155 2606:4700:10::6814:6863 93.123.109.166 20.64.97.78
146.56.199.139 2606:4700:10::6814:6925 180.165.16.172 39.98.184.104