City: Phoenix
Region: Arizona
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.160.0.0 - 20.175.255.255
CIDR: 20.160.0.0/12
NetName: MSFT
NetHandle: NET-20-160-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-02-22
Updated: 2017-02-22
Ref: https://rdap.arin.net/registry/ip/20.160.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.169.48.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62792
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.169.48.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025100501 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 06 08:03:02 CST 2025
;; MSG SIZE rcvd: 106140.48.169.20.in-addr.arpa domain name pointer azpdwsuskujp.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
140.48.169.20.in-addr.arpa name = azpdwsuskujp.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 194.190.110.239 | attack | Unauthorized connection attempt from IP address 194.190.110.239 on Port 445(SMB) |
2020-08-30 21:26:21 |
| 31.28.8.163 | attackbotsspam | Aug 30 13:58:39 h2646465 sshd[24380]: Invalid user admin from 31.28.8.163 Aug 30 13:58:39 h2646465 sshd[24380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.28.8.163 Aug 30 13:58:39 h2646465 sshd[24380]: Invalid user admin from 31.28.8.163 Aug 30 13:58:40 h2646465 sshd[24380]: Failed password for invalid user admin from 31.28.8.163 port 41328 ssh2 Aug 30 14:12:12 h2646465 sshd[27025]: Invalid user mary from 31.28.8.163 Aug 30 14:12:12 h2646465 sshd[27025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.28.8.163 Aug 30 14:12:12 h2646465 sshd[27025]: Invalid user mary from 31.28.8.163 Aug 30 14:12:14 h2646465 sshd[27025]: Failed password for invalid user mary from 31.28.8.163 port 56140 ssh2 Aug 30 14:16:04 h2646465 sshd[27703]: Invalid user rafael from 31.28.8.163 ... |
2020-08-30 20:54:47 |
| 118.69.71.82 | attackbots | Unauthorized connection attempt from IP address 118.69.71.82 on Port 445(SMB) |
2020-08-30 21:16:45 |
| 62.42.17.213 | attack | php WP PHPmyadamin ABUSE blocked for 12h |
2020-08-30 21:01:56 |
| 131.196.5.250 | attackspam | Unauthorized connection attempt from IP address 131.196.5.250 on Port 445(SMB) |
2020-08-30 21:10:13 |
| 41.165.88.132 | attackbotsspam | Aug 30 14:48:06 ns381471 sshd[18693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.165.88.132 Aug 30 14:48:08 ns381471 sshd[18693]: Failed password for invalid user jeronimo from 41.165.88.132 port 57262 ssh2 |
2020-08-30 20:57:22 |
| 42.113.189.213 | attack | Unauthorized connection attempt from IP address 42.113.189.213 on Port 445(SMB) |
2020-08-30 21:13:17 |
| 123.126.106.88 | attackbotsspam | Aug 30 02:48:56 web1 sshd\[22748\]: Invalid user web from 123.126.106.88 Aug 30 02:48:56 web1 sshd\[22748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.126.106.88 Aug 30 02:48:59 web1 sshd\[22748\]: Failed password for invalid user web from 123.126.106.88 port 52488 ssh2 Aug 30 02:51:03 web1 sshd\[22920\]: Invalid user teamspeak3 from 123.126.106.88 Aug 30 02:51:03 web1 sshd\[22920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.126.106.88 |
2020-08-30 21:21:20 |
| 193.112.163.159 | attackspam | Aug 30 13:54:57 ns308116 sshd[30094]: Invalid user user from 193.112.163.159 port 39276 Aug 30 13:54:57 ns308116 sshd[30094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.163.159 Aug 30 13:54:59 ns308116 sshd[30094]: Failed password for invalid user user from 193.112.163.159 port 39276 ssh2 Aug 30 14:00:26 ns308116 sshd[4424]: Invalid user cedric from 193.112.163.159 port 38864 Aug 30 14:00:26 ns308116 sshd[4424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.163.159 ... |
2020-08-30 21:05:02 |
| 49.232.162.235 | attackspam | $f2bV_matches |
2020-08-30 20:54:28 |
| 218.92.0.223 | attack | Aug 30 14:39:54 ip106 sshd[21954]: Failed password for root from 218.92.0.223 port 50818 ssh2 Aug 30 14:39:59 ip106 sshd[21954]: Failed password for root from 218.92.0.223 port 50818 ssh2 ... |
2020-08-30 20:51:22 |
| 181.164.132.26 | attackspambots | Aug 30 15:00:13 buvik sshd[6738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.164.132.26 Aug 30 15:00:16 buvik sshd[6738]: Failed password for invalid user masha from 181.164.132.26 port 42762 ssh2 Aug 30 15:04:09 buvik sshd[7471]: Invalid user platform from 181.164.132.26 ... |
2020-08-30 21:24:54 |
| 104.248.150.143 | attackspam | 2020-08-30T06:16:00.198114linuxbox-skyline sshd[34850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.150.143 user=root 2020-08-30T06:16:01.987366linuxbox-skyline sshd[34850]: Failed password for root from 104.248.150.143 port 10983 ssh2 ... |
2020-08-30 20:59:56 |
| 142.93.48.191 | attack | Aug 30 14:31:11 buvik sshd[1558]: Failed password for root from 142.93.48.191 port 43900 ssh2 Aug 30 14:34:52 buvik sshd[2031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 user=root Aug 30 14:34:54 buvik sshd[2031]: Failed password for root from 142.93.48.191 port 45650 ssh2 ... |
2020-08-30 21:03:12 |
| 123.30.149.34 | attackspambots | Failed password for invalid user butter from 123.30.149.34 port 43127 ssh2 |
2020-08-30 21:12:03 |