城市(city): Des Moines
省份(region): Iowa
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.33.0.0 - 20.128.255.255
CIDR: 20.36.0.0/14, 20.40.0.0/13, 20.128.0.0/16, 20.64.0.0/10, 20.34.0.0/15, 20.33.0.0/16, 20.48.0.0/12
NetName: MSFT
NetHandle: NET-20-33-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-10-18
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/20.33.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.80.75.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17116
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.80.75.95. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101300 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 13 23:05:43 CST 2026
;; MSG SIZE rcvd: 104Host 95.75.80.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 95.75.80.20.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 193.56.28.185 | attackspambots | Jul 12 00:10:11 mail.srvfarm.net postfix/smtpd[1660622]: warning: unknown[193.56.28.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 12 00:12:35 mail.srvfarm.net postfix/smtpd[1660622]: warning: unknown[193.56.28.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 12 00:15:02 mail.srvfarm.net postfix/smtpd[1567717]: warning: unknown[193.56.28.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 12 00:17:25 mail.srvfarm.net postfix/smtpd[1660622]: warning: unknown[193.56.28.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 12 00:19:49 mail.srvfarm.net postfix/smtpd[1566624]: warning: unknown[193.56.28.185]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-07-12 06:53:41 |
| 106.13.173.73 | attack | SSH Invalid Login |
2020-07-12 06:52:06 |
| 195.54.160.135 | attackbotsspam | Brute force attack stopped by firewall |
2020-07-12 06:46:55 |
| 36.92.126.109 | attackspambots | Jul 12 01:02:06 eventyay sshd[13997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.126.109 Jul 12 01:02:08 eventyay sshd[13997]: Failed password for invalid user test from 36.92.126.109 port 46376 ssh2 Jul 12 01:05:51 eventyay sshd[14135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.126.109 ... |
2020-07-12 07:10:03 |
| 140.143.238.46 | attackspam | $f2bV_matches |
2020-07-12 06:41:59 |
| 112.29.238.18 | attack | $f2bV_matches |
2020-07-12 07:07:40 |
| 134.209.12.115 | attackspam | Invalid user thomson from 134.209.12.115 port 53910 |
2020-07-12 06:38:49 |
| 123.143.203.67 | attack | 136. On Jul 11 2020 experienced a Brute Force SSH login attempt -> 18 unique times by 123.143.203.67. |
2020-07-12 06:37:44 |
| 128.199.219.43 | attack | Invalid user Antal from 128.199.219.43 port 43204 |
2020-07-12 06:39:17 |
| 205.215.11.132 | attackspambots | 1594497951 - 07/11/2020 22:05:51 Host: 205.215.11.132/205.215.11.132 Port: 445 TCP Blocked |
2020-07-12 06:35:48 |
| 190.25.49.114 | attack | Jul 11 22:43:39 game-panel sshd[9994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.25.49.114 Jul 11 22:43:41 game-panel sshd[9994]: Failed password for invalid user yz from 190.25.49.114 port 54947 ssh2 Jul 11 22:50:04 game-panel sshd[10306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.25.49.114 |
2020-07-12 07:02:40 |
| 80.82.77.240 | attack | Jul 11 22:48:03 debian-2gb-nbg1-2 kernel: \[16759065.370065\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.77.240 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=12523 PROTO=TCP SPT=64344 DPT=5800 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-12 06:35:18 |
| 163.44.198.31 | attackspam | Automatic report - Banned IP Access |
2020-07-12 06:59:32 |
| 124.239.148.63 | attackspam | Jul 12 02:32:46 gw1 sshd[22786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.148.63 Jul 12 02:32:48 gw1 sshd[22786]: Failed password for invalid user abeko from 124.239.148.63 port 52270 ssh2 ... |
2020-07-12 06:36:07 |
| 136.49.109.217 | attack | Jul 12 00:37:33 h2779839 sshd[18129]: Invalid user chfjiao from 136.49.109.217 port 59388 Jul 12 00:37:33 h2779839 sshd[18129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.49.109.217 Jul 12 00:37:33 h2779839 sshd[18129]: Invalid user chfjiao from 136.49.109.217 port 59388 Jul 12 00:37:34 h2779839 sshd[18129]: Failed password for invalid user chfjiao from 136.49.109.217 port 59388 ssh2 Jul 12 00:41:07 h2779839 sshd[18206]: Invalid user pkomurluoglu from 136.49.109.217 port 55288 Jul 12 00:41:07 h2779839 sshd[18206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.49.109.217 Jul 12 00:41:07 h2779839 sshd[18206]: Invalid user pkomurluoglu from 136.49.109.217 port 55288 Jul 12 00:41:10 h2779839 sshd[18206]: Failed password for invalid user pkomurluoglu from 136.49.109.217 port 55288 ssh2 Jul 12 00:42:27 h2779839 sshd[18225]: Invalid user yarn from 136.49.109.217 port 52622 ... |
2020-07-12 07:01:29 |