City: Campinas
Region: Sao Paulo
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.192.0.0 - 20.255.255.255
CIDR: 20.192.0.0/10
NetName: MSFT
NetHandle: NET-20-192-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-10-18
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/20.192.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.195.192.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35245
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.195.192.35. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026052400 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 24 20:30:03 CST 2026
;; MSG SIZE rcvd: 106Host 35.192.195.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 35.192.195.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.112.244.170 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/190.112.244.170/ US - 1H : (1518) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN52233 IP : 190.112.244.170 CIDR : 190.112.244.0/23 PREFIX COUNT : 38 UNIQUE IP COUNT : 19968 WYKRYTE ATAKI Z ASN52233 : 1H - 1 3H - 1 6H - 2 12H - 3 24H - 3 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery |
2019-09-30 03:36:22 |
| 60.220.230.21 | attackbotsspam | Automated report - ssh fail2ban: Sep 29 18:33:14 authentication failure Sep 29 18:33:17 wrong password, user=steam, port=46649, ssh2 Sep 29 18:38:44 authentication failure |
2019-09-30 04:01:36 |
| 151.228.10.65 | attack | Automatic report - Port Scan Attack |
2019-09-30 04:06:18 |
| 58.27.207.166 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-09-30 03:55:10 |
| 180.116.56.102 | attack | Sep 29 07:56:22 esmtp postfix/smtpd[12563]: lost connection after AUTH from unknown[180.116.56.102] Sep 29 07:56:29 esmtp postfix/smtpd[12563]: lost connection after AUTH from unknown[180.116.56.102] Sep 29 07:56:40 esmtp postfix/smtpd[12675]: lost connection after AUTH from unknown[180.116.56.102] Sep 29 07:56:43 esmtp postfix/smtpd[12563]: lost connection after AUTH from unknown[180.116.56.102] Sep 29 07:56:44 esmtp postfix/smtpd[12675]: lost connection after AUTH from unknown[180.116.56.102] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.116.56.102 |
2019-09-30 03:57:03 |
| 86.202.115.52 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/86.202.115.52/ FR - 1H : (134) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FR NAME ASN : ASN3215 IP : 86.202.115.52 CIDR : 86.202.0.0/16 PREFIX COUNT : 1458 UNIQUE IP COUNT : 20128512 WYKRYTE ATAKI Z ASN3215 : 1H - 2 3H - 5 6H - 8 12H - 14 24H - 27 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery |
2019-09-30 03:36:40 |
| 220.134.168.152 | attackbots | 23/tcp 23/tcp [2019-09-29]2pkt |
2019-09-30 03:30:42 |
| 45.195.31.158 | attack | 445/tcp 445/tcp [2019-09-16/29]2pkt |
2019-09-30 04:08:50 |
| 78.189.92.117 | attack | Unauthorized connection attempt from IP address 78.189.92.117 on Port 445(SMB) |
2019-09-30 03:48:18 |
| 27.67.3.204 | attackbots | Unauthorized connection attempt from IP address 27.67.3.204 on Port 445(SMB) |
2019-09-30 04:07:53 |
| 66.185.210.121 | attackbots | Sep 29 14:09:04 apollo sshd\[22437\]: Invalid user satish from 66.185.210.121Sep 29 14:09:06 apollo sshd\[22437\]: Failed password for invalid user satish from 66.185.210.121 port 53866 ssh2Sep 29 14:28:58 apollo sshd\[22545\]: Invalid user chris from 66.185.210.121 ... |
2019-09-30 03:53:46 |
| 112.216.39.29 | attackbots | Sep 29 21:08:52 MK-Soft-VM7 sshd[3654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.39.29 Sep 29 21:08:54 MK-Soft-VM7 sshd[3654]: Failed password for invalid user test from 112.216.39.29 port 53256 ssh2 ... |
2019-09-30 04:06:39 |
| 23.249.164.140 | attack | Bad Postfix AUTH attempts ... |
2019-09-30 03:49:33 |
| 129.211.24.187 | attackbotsspam | Sep 29 11:19:13 aat-srv002 sshd[30823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.24.187 Sep 29 11:19:15 aat-srv002 sshd[30823]: Failed password for invalid user cav123456 from 129.211.24.187 port 54671 ssh2 Sep 29 11:23:21 aat-srv002 sshd[30991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.24.187 Sep 29 11:23:23 aat-srv002 sshd[30991]: Failed password for invalid user qwedcxz from 129.211.24.187 port 43337 ssh2 ... |
2019-09-30 03:45:18 |
| 182.171.245.130 | attack | Sep 29 07:31:24 tdfoods sshd\[2977\]: Invalid user webadmin from 182.171.245.130 Sep 29 07:31:24 tdfoods sshd\[2977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pb6abf582.tokyff01.ap.so-net.ne.jp Sep 29 07:31:26 tdfoods sshd\[2977\]: Failed password for invalid user webadmin from 182.171.245.130 port 59013 ssh2 Sep 29 07:36:49 tdfoods sshd\[3435\]: Invalid user ace from 182.171.245.130 Sep 29 07:36:49 tdfoods sshd\[3435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pb6abf582.tokyff01.ap.so-net.ne.jp |
2019-09-30 04:05:49 |