City: Phoenix
Region: Arizona
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.150.0.0 - 20.153.255.255
CIDR: 20.152.0.0/15, 20.150.0.0/15
NetName: MSFT
NetHandle: NET-20-150-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-10-18
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/20.150.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.150.197.241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58553
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.150.197.241. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090201 1800 900 604800 86400
;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 03 11:31:30 CST 2026
;; MSG SIZE rcvd: 107Host 241.197.150.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 241.197.150.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 187.45.124.131 | attack | Sep 01 15:26:41 askasleikir sshd[16160]: Failed password for invalid user gary from 187.45.124.131 port 56735 ssh2 Sep 01 15:36:51 askasleikir sshd[16429]: Failed password for invalid user pluto from 187.45.124.131 port 61528 ssh2 Sep 01 15:41:46 askasleikir sshd[16588]: Failed password for invalid user rhine from 187.45.124.131 port 12467 ssh2 |
2019-09-02 06:39:19 |
| 92.222.216.71 | attack | Sep 1 15:36:10 ny01 sshd[32290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.216.71 Sep 1 15:36:12 ny01 sshd[32290]: Failed password for invalid user off from 92.222.216.71 port 52058 ssh2 Sep 1 15:40:15 ny01 sshd[447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.216.71 |
2019-09-02 06:27:01 |
| 190.186.170.83 | attackspam | Sep 1 22:19:44 server sshd[29554]: Failed password for invalid user jesse from 190.186.170.83 port 58904 ssh2 Sep 1 22:34:11 server sshd[32998]: Failed password for invalid user suresh from 190.186.170.83 port 35618 ssh2 Sep 1 22:38:53 server sshd[34165]: Failed password for root from 190.186.170.83 port 50572 ssh2 |
2019-09-02 06:11:46 |
| 222.233.53.132 | attack | Sep 1 12:30:36 hiderm sshd\[31609\]: Invalid user dovecot from 222.233.53.132 Sep 1 12:30:36 hiderm sshd\[31609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.233.53.132 Sep 1 12:30:39 hiderm sshd\[31609\]: Failed password for invalid user dovecot from 222.233.53.132 port 57140 ssh2 Sep 1 12:35:26 hiderm sshd\[32019\]: Invalid user ashton from 222.233.53.132 Sep 1 12:35:26 hiderm sshd\[32019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.233.53.132 |
2019-09-02 06:47:04 |
| 106.12.34.226 | attackbots | Sep 1 21:27:53 server sshd\[13213\]: Invalid user james from 106.12.34.226 port 47378 Sep 1 21:27:53 server sshd\[13213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.34.226 Sep 1 21:27:55 server sshd\[13213\]: Failed password for invalid user james from 106.12.34.226 port 47378 ssh2 Sep 1 21:31:40 server sshd\[6261\]: Invalid user Abcd1234 from 106.12.34.226 port 53086 Sep 1 21:31:40 server sshd\[6261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.34.226 |
2019-09-02 06:44:42 |
| 200.35.52.123 | attackbots | Automatic report - Port Scan Attack |
2019-09-02 06:57:53 |
| 193.188.22.188 | attack | 09/01/2019-18:08:54.108723 193.188.22.188 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 16 |
2019-09-02 06:30:27 |
| 222.186.15.101 | attack | Sep 2 00:34:31 tuxlinux sshd[22080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.101 user=root ... |
2019-09-02 06:49:51 |
| 185.35.139.72 | attackspambots | Sep 1 21:24:29 yabzik sshd[14341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.35.139.72 Sep 1 21:24:31 yabzik sshd[14341]: Failed password for invalid user debian from 185.35.139.72 port 35182 ssh2 Sep 1 21:28:03 yabzik sshd[15906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.35.139.72 |
2019-09-02 06:55:13 |
| 41.33.119.67 | attackbotsspam | Automatic report - Banned IP Access |
2019-09-02 06:16:35 |
| 136.228.161.66 | attackbots | Sep 1 15:10:44 *** sshd[2959]: Failed password for invalid user wh from 136.228.161.66 port 58896 ssh2 Sep 1 15:25:01 *** sshd[3191]: Failed password for invalid user hduser from 136.228.161.66 port 60174 ssh2 Sep 1 15:30:12 *** sshd[3251]: Failed password for invalid user jose from 136.228.161.66 port 49210 ssh2 Sep 1 15:35:16 *** sshd[3305]: Failed password for invalid user sheila from 136.228.161.66 port 38164 ssh2 Sep 1 15:40:22 *** sshd[3428]: Failed password for invalid user ama from 136.228.161.66 port 55360 ssh2 Sep 1 15:45:27 *** sshd[3567]: Failed password for invalid user coralyn from 136.228.161.66 port 44330 ssh2 Sep 1 15:50:24 *** sshd[3623]: Failed password for invalid user poliana from 136.228.161.66 port 33234 ssh2 Sep 1 15:55:19 *** sshd[3675]: Failed password for invalid user csgo from 136.228.161.66 port 50316 ssh2 Sep 1 16:00:21 *** sshd[3741]: Failed password for invalid user webuser from 136.228.161.66 port 39234 ssh2 Sep 1 16:05:26 *** sshd[3869]: Failed password for invalid |
2019-09-02 06:39:50 |
| 159.138.65.49 | attackbots | Sep 1 23:10:51 microserver sshd[21826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.65.49 user=root Sep 1 23:10:53 microserver sshd[21826]: Failed password for root from 159.138.65.49 port 35312 ssh2 Sep 1 23:15:37 microserver sshd[22435]: Invalid user spike from 159.138.65.49 port 52564 Sep 1 23:15:37 microserver sshd[22435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.65.49 Sep 1 23:15:39 microserver sshd[22435]: Failed password for invalid user spike from 159.138.65.49 port 52564 ssh2 Sep 1 23:29:25 microserver sshd[23852]: Invalid user b from 159.138.65.49 port 47860 Sep 1 23:29:25 microserver sshd[23852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.65.49 Sep 1 23:29:27 microserver sshd[23852]: Failed password for invalid user b from 159.138.65.49 port 47860 ssh2 Sep 1 23:34:08 microserver sshd[24460]: Invalid user gast. from 159.138.65.49 po |
2019-09-02 06:05:00 |
| 139.59.56.121 | attack | Sep 1 23:43:04 host sshd\[39302\]: Invalid user admin from 139.59.56.121 port 46416 Sep 1 23:43:04 host sshd\[39302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.121 ... |
2019-09-02 06:28:08 |
| 94.97.13.171 | attack | Unauthorized connection attempt from IP address 94.97.13.171 on Port 445(SMB) |
2019-09-02 06:32:17 |
| 93.159.238.240 | attackbots | Unauthorized connection attempt from IP address 93.159.238.240 on Port 445(SMB) |
2019-09-02 07:00:07 |