City: San Antonio
Region: Texas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.33.0.0 - 20.128.255.255
CIDR: 20.36.0.0/14, 20.33.0.0/16, 20.48.0.0/12, 20.128.0.0/16, 20.40.0.0/13, 20.34.0.0/15, 20.64.0.0/10
NetName: MSFT
NetHandle: NET-20-33-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-10-18
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/20.33.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.65.171.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56610
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.65.171.66. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026092101 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 22 13:00:51 CST 2026
;; MSG SIZE rcvd: 105Host 66.171.65.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.171.65.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.72.218.188 | attackspam | Unauthorised access (Dec 3) SRC=36.72.218.188 LEN=52 TTL=248 ID=8937 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-03 22:29:47 |
| 58.219.156.83 | attackspambots | DATE:2019-12-03 09:10:13, IP:58.219.156.83, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2019-12-03 22:09:32 |
| 52.203.197.242 | attackbots | Dec 3 04:20:34 web9 sshd\[17195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.203.197.242 user=root Dec 3 04:20:36 web9 sshd\[17195\]: Failed password for root from 52.203.197.242 port 42381 ssh2 Dec 3 04:30:27 web9 sshd\[19119\]: Invalid user dehlia from 52.203.197.242 Dec 3 04:30:27 web9 sshd\[19119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.203.197.242 Dec 3 04:30:29 web9 sshd\[19119\]: Failed password for invalid user dehlia from 52.203.197.242 port 48333 ssh2 |
2019-12-03 22:41:03 |
| 2.188.33.130 | attackbots | Automatic report - Port Scan Attack |
2019-12-03 22:40:13 |
| 39.48.84.242 | attack | Dec 3 10:40:01 v22018076622670303 sshd\[25370\]: Invalid user admin from 39.48.84.242 port 49837 Dec 3 10:40:02 v22018076622670303 sshd\[25370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.48.84.242 Dec 3 10:40:03 v22018076622670303 sshd\[25370\]: Failed password for invalid user admin from 39.48.84.242 port 49837 ssh2 ... |
2019-12-03 22:11:56 |
| 159.89.126.252 | attack | B: /wp-login.php attack |
2019-12-03 22:08:40 |
| 165.22.112.45 | attackspam | Dec 3 04:24:54 hanapaa sshd\[19860\]: Invalid user krishnam from 165.22.112.45 Dec 3 04:24:54 hanapaa sshd\[19860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.112.45 Dec 3 04:24:56 hanapaa sshd\[19860\]: Failed password for invalid user krishnam from 165.22.112.45 port 42980 ssh2 Dec 3 04:30:26 hanapaa sshd\[20406\]: Invalid user password123 from 165.22.112.45 Dec 3 04:30:26 hanapaa sshd\[20406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.112.45 |
2019-12-03 22:46:42 |
| 156.195.68.12 | attack | $f2bV_matches |
2019-12-03 22:31:39 |
| 80.210.27.28 | attackspam | Unauthorized connection attempt from IP address 80.210.27.28 on Port 445(SMB) |
2019-12-03 22:44:19 |
| 112.85.42.179 | attackspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2019-12-03 22:06:58 |
| 106.12.27.46 | attackspambots | SSH bruteforce (Triggered fail2ban) |
2019-12-03 22:21:15 |
| 218.92.0.188 | attackspam | Dec 3 11:12:31 firewall sshd[20520]: Failed password for root from 218.92.0.188 port 29358 ssh2 Dec 3 11:12:45 firewall sshd[20520]: error: maximum authentication attempts exceeded for root from 218.92.0.188 port 29358 ssh2 [preauth] Dec 3 11:12:45 firewall sshd[20520]: Disconnecting: Too many authentication failures [preauth] ... |
2019-12-03 22:17:52 |
| 23.129.64.193 | attackspambots | 12/03/2019-07:22:18.732246 23.129.64.193 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 60 |
2019-12-03 22:13:43 |
| 182.253.184.20 | attack | Dec 3 13:02:33 server sshd\[20537\]: Invalid user Hellevi from 182.253.184.20 Dec 3 13:02:33 server sshd\[20537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.184.20 Dec 3 13:02:35 server sshd\[20537\]: Failed password for invalid user Hellevi from 182.253.184.20 port 52854 ssh2 Dec 3 13:10:22 server sshd\[22495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.184.20 user=operator Dec 3 13:10:25 server sshd\[22495\]: Failed password for operator from 182.253.184.20 port 52464 ssh2 ... |
2019-12-03 22:23:30 |
| 51.77.148.248 | attackspam | <6 unauthorized SSH connections |
2019-12-03 22:29:25 |