城市(city): Boydton
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 52.145.0.0 - 52.191.255.255
CIDR: 52.146.0.0/15, 52.148.0.0/14, 52.160.0.0/11, 52.145.0.0/16, 52.152.0.0/13
NetName: MSFT
NetHandle: NET-52-145-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-11-24
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/52.145.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.177.253.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34682
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.177.253.131. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026031400 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 15 00:30:03 CST 2026
;; MSG SIZE rcvd: 107Host 131.253.177.52.in-addr.arpa. not found: 3(NXDOMAIN)server can't find 52.177.253.131.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 5.135.179.178 | attack | Invalid user ubuntu from 5.135.179.178 port 21029 |
2020-04-18 07:13:32 |
| 189.82.33.204 | attackspambots | Apr 17 20:36:47 h1946882 sshd[880]: Connection closed by 189.82.33.204 = [preauth] Apr 17 20:44:54 h1946882 sshd[951]: pam_unix(sshd:auth): authentication= failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D189-82= -33-204.user.veloxzone.com.br=20 Apr 17 20:44:55 h1946882 sshd[951]: Failed password for invalid user ad= min123 from 189.82.33.204 port 59717 ssh2 Apr 17 20:44:56 h1946882 sshd[951]: Received disconnect from 189.82.33.= 204: 11: Bye Bye [preauth] Apr 17 21:17:49 h1946882 sshd[1521]: pam_unix(sshd:auth): authenticatio= n failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D189-8= 2-33-204.user.veloxzone.com.br=20 Apr 17 21:17:51 h1946882 sshd[1521]: Failed password for invalid user c= w from 189.82.33.204 port 60515 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=189.82.33.204 |
2020-04-18 07:43:57 |
| 222.186.175.150 | attackbots | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-04-18 07:23:15 |
| 192.207.202.2 | attackspam | 2020-04-17T22:18:56.823684abusebot-4.cloudsearch.cf sshd[24669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.207.202.2 user=root 2020-04-17T22:18:58.557595abusebot-4.cloudsearch.cf sshd[24669]: Failed password for root from 192.207.202.2 port 49645 ssh2 2020-04-17T22:23:16.961155abusebot-4.cloudsearch.cf sshd[25062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.207.202.2 user=root 2020-04-17T22:23:19.056504abusebot-4.cloudsearch.cf sshd[25062]: Failed password for root from 192.207.202.2 port 53402 ssh2 2020-04-17T22:27:39.133969abusebot-4.cloudsearch.cf sshd[25278]: Invalid user cw from 192.207.202.2 port 57156 2020-04-17T22:27:39.140781abusebot-4.cloudsearch.cf sshd[25278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.207.202.2 2020-04-17T22:27:39.133969abusebot-4.cloudsearch.cf sshd[25278]: Invalid user cw from 192.207.202.2 port 57156 2020- ... |
2020-04-18 07:47:37 |
| 103.123.65.35 | attack | Invalid user new from 103.123.65.35 port 38158 |
2020-04-18 07:13:05 |
| 213.217.0.205 | attackbotsspam | Apr 17 21:20:55 debian-2gb-nbg1-2 kernel: \[9410230.139319\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=213.217.0.205 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=14721 PROTO=TCP SPT=48588 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-18 07:16:53 |
| 153.246.16.157 | attackspam | Invalid user testman from 153.246.16.157 port 39900 |
2020-04-18 07:17:35 |
| 129.204.205.125 | attack | 2020-04-17T23:54:41.459715ns386461 sshd\[2949\]: Invalid user rg from 129.204.205.125 port 40184 2020-04-17T23:54:41.464333ns386461 sshd\[2949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.205.125 2020-04-17T23:54:43.453933ns386461 sshd\[2949\]: Failed password for invalid user rg from 129.204.205.125 port 40184 ssh2 2020-04-17T23:57:25.940878ns386461 sshd\[5335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.205.125 user=root 2020-04-17T23:57:27.442384ns386461 sshd\[5335\]: Failed password for root from 129.204.205.125 port 46246 ssh2 ... |
2020-04-18 07:18:30 |
| 103.145.12.43 | attack | Apr 17 23:19:22 debian-2gb-nbg1-2 kernel: \[9417336.542043\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.145.12.43 DST=195.201.40.59 LEN=440 TOS=0x00 PREC=0x00 TTL=54 ID=35562 DF PROTO=UDP SPT=5304 DPT=5060 LEN=420 |
2020-04-18 07:43:14 |
| 77.232.100.223 | attackbotsspam | IP blocked |
2020-04-18 07:16:08 |
| 185.173.35.21 | attackspambots | Port Scan: Events[1] countPorts[1]: 2161 .. |
2020-04-18 07:47:17 |
| 113.140.10.134 | attack | Invalid user dead from 113.140.10.134 port 50610 |
2020-04-18 07:28:27 |
| 45.138.98.10 | attack | subject: "Angebote von Heizungsbauern in Ihrer Nähe" |
2020-04-18 07:21:14 |
| 3.226.237.19 | attackspam | [FriApr1721:20:22.3526282020][:error][pid20935:tid47976619747072][client3.226.237.19:38302][client3.226.237.19]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"volcano.ch"][uri"/"][unique_id"XpoBdtmzRMpLTp9qizGT8QAAAdg"][FriApr1721:20:22.5711692020][:error][pid20786:tid47976518133504][client3.226.237.19:38310][client3.226.237.19]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"volca |
2020-04-18 07:43:28 |
| 106.13.184.7 | attack | (sshd) Failed SSH login from 106.13.184.7 (CN/China/-): 5 in the last 3600 secs |
2020-04-18 07:38:27 |