City: Phoenix
Region: Arizona
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.160.0.0 - 20.175.255.255
CIDR: 20.160.0.0/12
NetName: MSFT
NetHandle: NET-20-160-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-02-22
Updated: 2017-02-22
Ref: https://rdap.arin.net/registry/ip/20.160.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.168.116.153
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51139
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.168.116.153. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110100 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 01 16:01:07 CST 2026
;; MSG SIZE rcvd: 107153.116.168.20.in-addr.arpa domain name pointer azpdwsme6cp9.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
153.116.168.20.in-addr.arpa name = azpdwsme6cp9.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.207.49.186 | attackspam | Sep 1 22:28:11 pkdns2 sshd\[8430\]: Invalid user placrim from 111.207.49.186Sep 1 22:28:12 pkdns2 sshd\[8430\]: Failed password for invalid user placrim from 111.207.49.186 port 36002 ssh2Sep 1 22:32:07 pkdns2 sshd\[8611\]: Invalid user elsa from 111.207.49.186Sep 1 22:32:08 pkdns2 sshd\[8611\]: Failed password for invalid user elsa from 111.207.49.186 port 45720 ssh2Sep 1 22:36:17 pkdns2 sshd\[8824\]: Invalid user marketing from 111.207.49.186Sep 1 22:36:18 pkdns2 sshd\[8824\]: Failed password for invalid user marketing from 111.207.49.186 port 55442 ssh2 ... |
2019-09-02 03:40:23 |
| 87.67.209.81 | attackspambots | Sep 1 07:35:37 lcdev sshd\[6442\]: Invalid user pi from 87.67.209.81 Sep 1 07:35:37 lcdev sshd\[6444\]: Invalid user pi from 87.67.209.81 Sep 1 07:35:37 lcdev sshd\[6442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.209-67-87.adsl-dyn.isp.belgacom.be Sep 1 07:35:37 lcdev sshd\[6444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.209-67-87.adsl-dyn.isp.belgacom.be Sep 1 07:35:39 lcdev sshd\[6442\]: Failed password for invalid user pi from 87.67.209.81 port 51668 ssh2 |
2019-09-02 03:22:52 |
| 185.135.232.174 | attackspambots | Sep 1 12:35:22 aat-srv002 sshd[18402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.135.232.174 Sep 1 12:35:22 aat-srv002 sshd[18404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.135.232.174 Sep 1 12:35:24 aat-srv002 sshd[18402]: Failed password for invalid user pi from 185.135.232.174 port 39038 ssh2 Sep 1 12:35:24 aat-srv002 sshd[18404]: Failed password for invalid user pi from 185.135.232.174 port 39040 ssh2 ... |
2019-09-02 03:33:10 |
| 114.67.70.206 | attack | Sep 1 20:39:04 v22019058497090703 sshd[4882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.70.206 Sep 1 20:39:05 v22019058497090703 sshd[4882]: Failed password for invalid user cris from 114.67.70.206 port 49504 ssh2 Sep 1 20:43:43 v22019058497090703 sshd[5235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.70.206 ... |
2019-09-02 03:29:55 |
| 80.82.77.18 | attackspambots | Sep 1 21:16:45 webserver postfix/smtpd\[15035\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 21:17:21 webserver postfix/smtpd\[15035\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 21:18:00 webserver postfix/smtpd\[15035\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 21:18:34 webserver postfix/smtpd\[15035\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 21:19:12 webserver postfix/smtpd\[15035\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-02 03:27:30 |
| 206.189.156.198 | attackbots | Sep 1 21:22:26 pkdns2 sshd\[5445\]: Invalid user toro from 206.189.156.198Sep 1 21:22:28 pkdns2 sshd\[5445\]: Failed password for invalid user toro from 206.189.156.198 port 52750 ssh2Sep 1 21:27:02 pkdns2 sshd\[5647\]: Invalid user testmail from 206.189.156.198Sep 1 21:27:04 pkdns2 sshd\[5647\]: Failed password for invalid user testmail from 206.189.156.198 port 41026 ssh2Sep 1 21:31:41 pkdns2 sshd\[5885\]: Invalid user florian from 206.189.156.198Sep 1 21:31:43 pkdns2 sshd\[5885\]: Failed password for invalid user florian from 206.189.156.198 port 57548 ssh2 ... |
2019-09-02 03:43:30 |
| 78.38.190.63 | attackspambots | Caught in portsentry honeypot |
2019-09-02 03:28:17 |
| 45.55.225.152 | attackspambots | 2019-09-01T18:30:23.036639abusebot-7.cloudsearch.cf sshd\[14120\]: Invalid user git from 45.55.225.152 port 35832 |
2019-09-02 03:02:16 |
| 51.75.209.228 | attackspambots | Sep 1 19:34:39 relay postfix/smtpd\[1056\]: warning: ip228.ip-51-75-209.eu\[51.75.209.228\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 19:34:45 relay postfix/smtpd\[3804\]: warning: ip228.ip-51-75-209.eu\[51.75.209.228\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 19:34:55 relay postfix/smtpd\[3806\]: warning: ip228.ip-51-75-209.eu\[51.75.209.228\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 19:35:17 relay postfix/smtpd\[3808\]: warning: ip228.ip-51-75-209.eu\[51.75.209.228\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 19:35:23 relay postfix/smtpd\[3803\]: warning: ip228.ip-51-75-209.eu\[51.75.209.228\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-02 03:34:00 |
| 140.143.45.22 | attackspambots | Sep 1 20:25:36 vps691689 sshd[23825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.45.22 Sep 1 20:25:38 vps691689 sshd[23825]: Failed password for invalid user loki from 140.143.45.22 port 58494 ssh2 ... |
2019-09-02 03:05:19 |
| 218.92.0.204 | attack | 2019-09-01T18:39:01.880433abusebot-8.cloudsearch.cf sshd\[520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.204 user=root |
2019-09-02 03:07:28 |
| 18.218.175.179 | attackspambots | port scan and connect, tcp 443 (https) |
2019-09-02 03:44:21 |
| 51.75.23.242 | attack | Sep 1 20:31:50 SilenceServices sshd[10665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.23.242 Sep 1 20:31:52 SilenceServices sshd[10665]: Failed password for invalid user anna from 51.75.23.242 port 53420 ssh2 Sep 1 20:35:34 SilenceServices sshd[13555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.23.242 |
2019-09-02 03:42:57 |
| 118.179.228.195 | attackspambots | RDPBruteCAu24 |
2019-09-02 03:15:51 |
| 157.230.123.18 | attack | Sep 1 08:48:42 php1 sshd\[15217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.123.18 user=sync Sep 1 08:48:44 php1 sshd\[15217\]: Failed password for sync from 157.230.123.18 port 48780 ssh2 Sep 1 08:52:32 php1 sshd\[15554\]: Invalid user it from 157.230.123.18 Sep 1 08:52:32 php1 sshd\[15554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.123.18 Sep 1 08:52:34 php1 sshd\[15554\]: Failed password for invalid user it from 157.230.123.18 port 37354 ssh2 |
2019-09-02 03:05:04 |