20.168.5.42 - IPInfo

Basic Info

City: Phoenix

Region: Arizona

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       20.160.0.0 - 20.175.255.255
CIDR:           20.160.0.0/12
NetName:        MSFT
NetHandle:      NET-20-160-0-0-1
Parent:         NET20 (NET-20-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Microsoft Corporation (MSFT)
RegDate:        2017-02-22
Updated:        2017-02-22
Ref:            https://rdap.arin.net/registry/ip/20.160.0.0



OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2025-06-10
Comment:        To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment:        * https://cert.microsoft.com.  
Comment:        
Comment:        For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment:        * abuse@microsoft.com.  
Comment:        
Comment:        To report security vulnerabilities in Microsoft products and services, please contact:
Comment:        * secure@microsoft.com.  
Comment:        
Comment:        For legal and law enforcement-related requests, please contact:
Comment:        * msndcc@microsoft.com
Comment:        
Comment:        For routing, peering or DNS issues, please 
Comment:        contact:
Comment:        * IOC@microsoft.com
Ref:            https://rdap.arin.net/registry/entity/MSFT


OrgTechHandle: BEDAR6-ARIN
OrgTechName:   Bedard, Dawn 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  dabedard@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/BEDAR6-ARIN

OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName:   Chaturmohta, Somesh 
OrgRoutingPhone:  +1-425-882-8080 
OrgRoutingEmail:  someshch@microsoft.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/CHATU3-ARIN

OrgTechHandle: SINGH683-ARIN
OrgTechName:   Singh, Prachi 
OrgTechPhone:  +1-425-707-5601 
OrgTechEmail:  pracsin@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/SINGH683-ARIN

OrgTechHandle: IPHOS5-ARIN
OrgTechName:   IPHostmaster, IPHostmaster 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  iphostmaster@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPHOS5-ARIN

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName:   Microsoft Abuse Contact
OrgAbusePhone:  +1-425-882-8080 
OrgAbuseEmail:  abuse@microsoft.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MAC74-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName:   Microsoft Routing, Peering, and DNS
OrgTechPhone:  +1-425-882-8080 
OrgTechEmail:  IOC@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/MRPD-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.168.5.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63751
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;20.168.5.42.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026071900 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 19 14:30:56 CST 2026
;; MSG SIZE  rcvd: 104

Host info

42.5.168.20.in-addr.arpa domain name pointer azpdwg18zs19.stretchoid.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.5.168.20.in-addr.arpa	name = azpdwg18zs19.stretchoid.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
91.225.208.84	attack	Jun 18 23:21:27 our-server-hostname postfix/smtpd[23838]: connect from unknown[91.225.208.84] Jun 18 23:21:27 our-server-hostname postfix/smtpd[23838]: lost connection after CONNECT from unknown[91.225.208.84] Jun 18 23:21:27 our-server-hostname postfix/smtpd[23838]: disconnect from unknown[91.225.208.84] Jun 19 00:05:36 our-server-hostname postfix/smtpd[13985]: connect from unknown[91.225.208.84] Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 00:05:39 our-server-hostname postfix/smtpd[13985]: lost connection after RCPT from unknown[91.225.208.84] Jun 19 00:05:39 our-server-hostname postfix/smtpd[13985]: disconnect from unknown[91.225.208.84] Jun 19 01:22:55 our-server-hostname postfix/smtpd[9829]: connect from unknown[91.225.208.84] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 01:23:02 our-server-hostname postfix/smtpd[9829]: lost connection after RCPT from unknown[91.225.208.84] Jun 19 0........ -------------------------------	2019-06-23 07:01:30
209.17.97.114	attackbotsspam	Port scan attempt detected by AWS-CCS, CTS, India	2019-06-23 07:41:14
61.57.242.90	attack	https://pastebin.com/wceFNTDb	2019-06-23 07:24:05
37.113.130.218	attackbots	Wordpress attack	2019-06-23 07:39:44
185.40.4.67	attackspam	\[2019-06-22 18:47:45\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '185.40.4.67:55623' - Wrong password \[2019-06-22 18:47:45\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-22T18:47:45.568-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="702",SessionID="0x7fc4240635e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.67/55623",Challenge="349c1894",ReceivedChallenge="349c1894",ReceivedHash="6e36c93d91a86bdcbff4c2fa092054df" \[2019-06-22 18:49:07\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '185.40.4.67:49666' - Wrong password \[2019-06-22 18:49:07\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-22T18:49:07.945-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="702",SessionID="0x7fc424272ac8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.67/49666",	2019-06-23 07:07:01
146.66.89.2	attack	xmlrpc attack	2019-06-23 07:31:04
200.9.67.2	attack	Jun 21 01:01:30 mail01 postfix/postscreen[12133]: CONNECT from [200.9.67.2]:34633 to [94.130.181.95]:25 Jun 21 01:01:30 mail01 postfix/dnsblog[12136]: addr 200.9.67.2 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 21 01:01:31 mail01 postfix/dnsblog[12468]: addr 200.9.67.2 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 21 01:01:31 mail01 postfix/dnsblog[12468]: addr 200.9.67.2 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 21 01:01:31 mail01 postfix/postscreen[12133]: PREGREET 15 after 0.57 from [200.9.67.2]:34633: EHLO 1930.com Jun 21 01:01:31 mail01 postfix/postscreen[12133]: DNSBL rank 4 for [200.9.67.2]:34633 Jun x@x Jun x@x Jun 21 01:01:35 mail01 postfix/postscreen[12133]: HANGUP after 3.8 from [200.9.67.2]:34633 in tests after SMTP handshake Jun 21 01:01:35 mail01 postfix/postscreen[12133]: DISCONNECT [200.9.67.2]:34633 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=200.9.67.2	2019-06-23 07:37:46
202.142.81.150	attackbots	Attempt to run wp-login.php	2019-06-23 07:11:36
104.43.19.108	attackbotsspam	xmlrpc attack	2019-06-23 07:35:13
78.186.184.231	attackbots	Invalid user admin from 78.186.184.231 port 38033	2019-06-23 07:44:24
111.231.88.23	attackbotsspam	ssh failed login	2019-06-23 07:06:16
54.38.226.197	attack	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	2019-06-23 07:02:02
209.17.97.26	attackspambots	IP: 209.17.97.26 ASN: AS174 Cogent Communications Port: World Wide Web HTTP 80 Found in one or more Blacklists Date: 22/06/2019 3:31:44 PM UTC	2019-06-23 07:40:27
178.46.165.190	attack	Jun 22 16:28:40 mail sshd\[2355\]: Invalid user admin from 178.46.165.190 Jun 22 16:28:40 mail sshd\[2355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.46.165.190 Jun 22 16:28:43 mail sshd\[2355\]: Failed password for invalid user admin from 178.46.165.190 port 57634 ssh2 ...	2019-06-23 07:31:23
187.11.99.134	attackbots	port scan and connect, tcp 80 (http)	2019-06-23 07:08:04

Recently Reported IPs

57.129.48.19	39.188.198.16	194.126.202.194	113.14.96.22
172.105.196.91	183.208.3.68	165.245.252.174	119.28.102.162
130.211.209.5	47.95.212.119	47.95.202.159	64.188.4.200
103.151.234.129	107.150.2.121	222.186.134.119	107.150.117.127
216.180.246.90	62.201.210.86	79.124.62.39	79.124.62.103