City: Zürich
Region: Zurich
Country: Switzerland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.192.0.0 - 20.255.255.255
CIDR: 20.192.0.0/10
NetName: MSFT
NetHandle: NET-20-192-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-10-18
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/20.192.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 20.203.200.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13405
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;20.203.200.218. IN A
;; Query time: 2 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Tue Jul 28 10:14:19 CST 2026
;; MSG SIZE rcvd: 43
'Host 218.200.203.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 218.200.203.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 18.208.208.97 | attack | Port scan on 1 port(s): 53 |
2019-07-25 00:13:36 |
| 223.215.100.179 | attackspam | 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x 2019-07-24 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=223.215.100.179 |
2019-07-25 00:39:50 |
| 184.154.47.5 | attack | 3389BruteforceFW21 |
2019-07-25 00:42:02 |
| 71.6.199.23 | attack | Honeypot attack, port: 81, PTR: ubuntu1619923.aspadmin.com. |
2019-07-25 01:24:01 |
| 116.196.122.54 | attackbotsspam | port scan and connect, tcp 6379 (redis) |
2019-07-25 00:15:48 |
| 186.159.114.227 | attackspam | 445/tcp 445/tcp 445/tcp... [2019-05-29/07-24]10pkt,1pt.(tcp) |
2019-07-25 01:26:39 |
| 109.227.196.32 | attackspambots | 445/tcp 445/tcp [2019-06-04/07-24]2pkt |
2019-07-25 01:44:11 |
| 103.245.181.2 | attack | Jul 24 11:48:38 xtremcommunity sshd\[20272\]: Invalid user nicoleta from 103.245.181.2 port 46016 Jul 24 11:48:38 xtremcommunity sshd\[20272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.245.181.2 Jul 24 11:48:40 xtremcommunity sshd\[20272\]: Failed password for invalid user nicoleta from 103.245.181.2 port 46016 ssh2 Jul 24 11:53:33 xtremcommunity sshd\[20326\]: Invalid user test from 103.245.181.2 port 39499 Jul 24 11:53:33 xtremcommunity sshd\[20326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.245.181.2 ... |
2019-07-25 00:33:50 |
| 103.214.229.236 | attackbots | 445/tcp 445/tcp 445/tcp... [2019-05-26/07-24]20pkt,1pt.(tcp) |
2019-07-25 01:28:19 |
| 93.66.164.197 | attackspambots | php WP PHPmyadamin ABUSE blocked for 12h |
2019-07-25 00:51:13 |
| 61.177.38.66 | attack | Jul 24 11:37:24 mail sshd[23005]: Invalid user yckim from 61.177.38.66 Jul 24 11:37:24 mail sshd[23005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.38.66 Jul 24 11:37:24 mail sshd[23005]: Invalid user yckim from 61.177.38.66 Jul 24 11:37:25 mail sshd[23005]: Failed password for invalid user yckim from 61.177.38.66 port 41252 ssh2 Jul 24 11:50:42 mail sshd[27817]: Invalid user test1 from 61.177.38.66 ... |
2019-07-25 00:31:12 |
| 210.217.24.230 | attackspam | Jul 24 19:18:12 ubuntu-2gb-nbg1-dc3-1 sshd[17470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.217.24.230 Jul 24 19:18:15 ubuntu-2gb-nbg1-dc3-1 sshd[17470]: Failed password for invalid user redis from 210.217.24.230 port 60178 ssh2 ... |
2019-07-25 01:27:45 |
| 212.232.25.224 | attack | Jul 24 10:22:14 ArkNodeAT sshd\[28787\]: Invalid user admin from 212.232.25.224 Jul 24 10:22:14 ArkNodeAT sshd\[28787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.232.25.224 Jul 24 10:22:16 ArkNodeAT sshd\[28787\]: Failed password for invalid user admin from 212.232.25.224 port 44267 ssh2 |
2019-07-25 00:29:02 |
| 90.92.210.64 | attackbots | (sshd) Failed SSH login from 90.92.210.64 (FR/France/lfbn-1-12158-64.w90-92.abo.wanadoo.fr): 5 in the last 3600 secs |
2019-07-25 01:14:32 |
| 186.206.129.160 | attackspam | Unauthorized SSH login attempts |
2019-07-25 00:48:49 |