City: Dublin
Region: Leinster
Country: Ireland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.192.0.0 - 20.255.255.255
CIDR: 20.192.0.0/10
NetName: MSFT
NetHandle: NET-20-192-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-10-18
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/20.192.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.238.75.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14925
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.238.75.27. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041701 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 18 01:30:03 CST 2026
;; MSG SIZE rcvd: 105Host 27.75.238.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 27.75.238.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 176.79.135.185 | attackspam | Oct 9 05:57:22 ns37 sshd[12901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.79.135.185 |
2019-10-09 12:30:40 |
| 171.244.49.128 | attackbots | May 5 04:11:50 server sshd\[106072\]: Invalid user jonathan from 171.244.49.128 May 5 04:11:50 server sshd\[106072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.49.128 May 5 04:11:52 server sshd\[106072\]: Failed password for invalid user jonathan from 171.244.49.128 port 30520 ssh2 ... |
2019-10-09 12:21:20 |
| 185.101.69.177 | attackbots | B: Magento admin pass test (wrong country) |
2019-10-09 12:32:40 |
| 103.254.198.67 | attack | Oct 8 17:48:23 auw2 sshd\[21753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.254.198.67 user=root Oct 8 17:48:25 auw2 sshd\[21753\]: Failed password for root from 103.254.198.67 port 51758 ssh2 Oct 8 17:53:04 auw2 sshd\[22207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.254.198.67 user=root Oct 8 17:53:06 auw2 sshd\[22207\]: Failed password for root from 103.254.198.67 port 43943 ssh2 Oct 8 17:57:48 auw2 sshd\[22601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.254.198.67 user=root |
2019-10-09 12:05:46 |
| 119.29.224.141 | attackspambots | Oct 9 07:11:47 tuotantolaitos sshd[4626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.224.141 Oct 9 07:11:49 tuotantolaitos sshd[4626]: Failed password for invalid user 7ygv6tfc from 119.29.224.141 port 47144 ssh2 ... |
2019-10-09 12:16:10 |
| 171.25.193.20 | attack | Jul 4 14:39:14 server sshd\[83599\]: Invalid user admin from 171.25.193.20 Jul 4 14:39:14 server sshd\[83599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.25.193.20 Jul 4 14:39:16 server sshd\[83599\]: Failed password for invalid user admin from 171.25.193.20 port 61656 ssh2 ... |
2019-10-09 12:17:22 |
| 41.141.250.244 | attackspambots | Oct 9 05:49:23 nextcloud sshd\[9853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.141.250.244 user=root Oct 9 05:49:25 nextcloud sshd\[9853\]: Failed password for root from 41.141.250.244 port 46854 ssh2 Oct 9 05:57:46 nextcloud sshd\[21726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.141.250.244 user=root ... |
2019-10-09 12:06:51 |
| 171.25.193.25 | attack | Aug 16 14:53:57 server sshd\[56286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.25.193.25 user=root Aug 16 14:53:59 server sshd\[56286\]: Failed password for root from 171.25.193.25 port 15030 ssh2 Aug 16 14:54:01 server sshd\[56286\]: Failed password for root from 171.25.193.25 port 15030 ssh2 ... |
2019-10-09 12:15:33 |
| 138.197.195.52 | attackspambots | 2019-10-08T22:12:35.775987hub.schaetter.us sshd\[19409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52 user=root 2019-10-08T22:12:37.555684hub.schaetter.us sshd\[19409\]: Failed password for root from 138.197.195.52 port 52588 ssh2 2019-10-08T22:16:49.475111hub.schaetter.us sshd\[19467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52 user=root 2019-10-08T22:16:51.791673hub.schaetter.us sshd\[19467\]: Failed password for root from 138.197.195.52 port 36110 ssh2 2019-10-08T22:20:57.584189hub.schaetter.us sshd\[19492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52 user=root ... |
2019-10-09 08:06:09 |
| 43.242.125.185 | attackbotsspam | 2019-10-09T05:57:38.235927centos sshd\[11218\]: Invalid user www from 43.242.125.185 port 52382 2019-10-09T05:57:38.240574centos sshd\[11218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.242.125.185 2019-10-09T05:57:39.847139centos sshd\[11218\]: Failed password for invalid user www from 43.242.125.185 port 52382 ssh2 |
2019-10-09 12:13:57 |
| 130.255.99.197 | attackspambots | Oct 9 05:36:34 Ubuntu-1404-trusty-64-minimal sshd\[10783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.255.99.197 user=root Oct 9 05:36:36 Ubuntu-1404-trusty-64-minimal sshd\[10783\]: Failed password for root from 130.255.99.197 port 60865 ssh2 Oct 9 05:57:36 Ubuntu-1404-trusty-64-minimal sshd\[26572\]: Invalid user osmc from 130.255.99.197 Oct 9 05:57:36 Ubuntu-1404-trusty-64-minimal sshd\[26572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.255.99.197 Oct 9 05:57:38 Ubuntu-1404-trusty-64-minimal sshd\[26572\]: Failed password for invalid user osmc from 130.255.99.197 port 64909 ssh2 |
2019-10-09 12:15:54 |
| 5.39.67.154 | attackspambots | Oct 9 07:13:14 www sshd\[89347\]: Invalid user Atlantique2016 from 5.39.67.154 Oct 9 07:13:14 www sshd\[89347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.67.154 Oct 9 07:13:16 www sshd\[89347\]: Failed password for invalid user Atlantique2016 from 5.39.67.154 port 54646 ssh2 ... |
2019-10-09 12:23:15 |
| 81.22.45.65 | attackbots | Oct 9 05:53:13 mc1 kernel: \[1879589.597920\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.65 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=29146 PROTO=TCP SPT=50012 DPT=3777 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 9 05:55:51 mc1 kernel: \[1879747.407334\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.65 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=2163 PROTO=TCP SPT=50012 DPT=3847 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 9 05:57:51 mc1 kernel: \[1879867.310848\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.65 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=21877 PROTO=TCP SPT=50012 DPT=3542 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-09 12:02:00 |
| 185.176.27.178 | attackbots | Oct 9 01:43:17 mc1 kernel: \[1864593.980605\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=12985 PROTO=TCP SPT=50169 DPT=31765 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 9 01:47:53 mc1 kernel: \[1864870.114737\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=32374 PROTO=TCP SPT=50169 DPT=5519 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 9 01:49:04 mc1 kernel: \[1864940.494851\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=59897 PROTO=TCP SPT=50169 DPT=26097 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-09 08:05:46 |
| 173.167.200.227 | attackbotsspam | Jul 7 06:58:13 server sshd\[37744\]: Invalid user caja2 from 173.167.200.227 Jul 7 06:58:13 server sshd\[37744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.167.200.227 Jul 7 06:58:15 server sshd\[37744\]: Failed password for invalid user caja2 from 173.167.200.227 port 14301 ssh2 ... |
2019-10-09 12:00:15 |