City: Dulles Town Center
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 20.33.0.0 - 20.128.255.255
CIDR: 20.48.0.0/12, 20.36.0.0/14, 20.128.0.0/16, 20.64.0.0/10, 20.40.0.0/13, 20.33.0.0/16, 20.34.0.0/15
NetName: MSFT
NetHandle: NET-20-33-0-0-1
Parent: NET20 (NET-20-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2017-10-18
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/20.33.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.42.116.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63036
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.42.116.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110500 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 05 15:01:28 CST 2026
;; MSG SIZE rcvd: 10542.116.42.20.in-addr.arpa domain name pointer azpdes3xcl7t.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.116.42.20.in-addr.arpa name = azpdes3xcl7t.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.197.152.148 | attackspam |
|
2020-07-27 01:33:47 |
| 101.71.3.53 | attackspam | k+ssh-bruteforce |
2020-07-27 01:29:16 |
| 92.116.51.254 | attack | SSH/22 MH Probe, BF, Hack - |
2020-07-27 01:18:45 |
| 85.105.64.3 | attack | [portscan] tcp/23 [TELNET] [scan/connect: 8 time(s)] *(RWIN=61724)(07261449) |
2020-07-27 01:03:52 |
| 88.132.66.26 | attack | Bruteforce detected by fail2ban |
2020-07-27 01:26:14 |
| 185.156.73.67 | attackbots | Portscan or hack attempt detected by psad/fwsnort |
2020-07-27 00:56:05 |
| 178.33.12.237 | attackbotsspam | Jul 26 13:36:20 ws12vmsma01 sshd[19695]: Invalid user adil from 178.33.12.237 Jul 26 13:36:23 ws12vmsma01 sshd[19695]: Failed password for invalid user adil from 178.33.12.237 port 59410 ssh2 Jul 26 13:46:20 ws12vmsma01 sshd[21137]: Invalid user support from 178.33.12.237 ... |
2020-07-27 01:13:00 |
| 111.229.78.120 | attackbots | Jul 26 13:53:51 ip-172-31-62-245 sshd\[16630\]: Invalid user bic from 111.229.78.120\ Jul 26 13:53:54 ip-172-31-62-245 sshd\[16630\]: Failed password for invalid user bic from 111.229.78.120 port 46084 ssh2\ Jul 26 13:58:57 ip-172-31-62-245 sshd\[16648\]: Invalid user openvpn from 111.229.78.120\ Jul 26 13:58:59 ip-172-31-62-245 sshd\[16648\]: Failed password for invalid user openvpn from 111.229.78.120 port 39688 ssh2\ Jul 26 14:03:45 ip-172-31-62-245 sshd\[16666\]: Invalid user job from 111.229.78.120\ |
2020-07-27 01:34:27 |
| 212.83.188.158 | attackspam | 5060/udp 5060/udp 5060/udp... [2020-07-10/25]4pkt,1pt.(udp) |
2020-07-27 01:04:48 |
| 88.214.26.13 | attackspam | 10 attempts against mh-misc-ban on bolt |
2020-07-27 01:31:47 |
| 45.143.223.167 | attackspam | Jul 26 14:02:23 v22019058497090703 postfix/smtpd[14937]: warning: unknown[45.143.223.167]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 26 14:02:29 v22019058497090703 postfix/smtpd[14944]: warning: unknown[45.143.223.167]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 26 14:02:50 v22019058497090703 postfix/smtpd[14995]: warning: unknown[45.143.223.167]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-27 01:22:09 |
| 189.39.102.67 | attack | Invalid user git from 189.39.102.67 port 44326 |
2020-07-27 01:32:43 |
| 152.136.137.62 | attackbotsspam | (sshd) Failed SSH login from 152.136.137.62 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 26 17:03:33 amsweb01 sshd[23379]: Invalid user adalberto from 152.136.137.62 port 56724 Jul 26 17:03:35 amsweb01 sshd[23379]: Failed password for invalid user adalberto from 152.136.137.62 port 56724 ssh2 Jul 26 17:12:34 amsweb01 sshd[24846]: Invalid user ubuntu from 152.136.137.62 port 57936 Jul 26 17:12:35 amsweb01 sshd[24846]: Failed password for invalid user ubuntu from 152.136.137.62 port 57936 ssh2 Jul 26 17:17:22 amsweb01 sshd[25520]: Invalid user demouser from 152.136.137.62 port 51586 |
2020-07-27 01:23:53 |
| 113.53.238.195 | attack | 2020-07-25 20:01:55 server sshd[85016]: Failed password for invalid user lingna from 113.53.238.195 port 50064 ssh2 |
2020-07-27 01:24:15 |
| 164.163.25.213 | attackspam | DATE:2020-07-26 14:02:45, IP:164.163.25.213, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-07-27 01:28:01 |