City: Phoenix
Region: Arizona
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 4.240.0.0 - 4.255.255.255
CIDR: 4.240.0.0/12
NetName: MSFT
NetHandle: NET-4-240-0-0-2
Parent: NET4 (NET-4-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2021-04-06
Updated: 2021-04-06
Ref: https://rdap.arin.net/registry/ip/4.240.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 4.249.17.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47515
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;4.249.17.9. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026083001 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 14:01:28 CST 2026
;; MSG SIZE rcvd: 1039.17.249.4.in-addr.arpa domain name pointer azpdwgnk27ee.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
9.17.249.4.in-addr.arpa name = azpdwgnk27ee.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.63.194.90 | attack | 2019-08-28T15:31:18.477853enmeeting.mahidol.ac.th sshd\[5371\]: Invalid user admin from 92.63.194.90 port 56268 2019-08-28T15:31:18.495998enmeeting.mahidol.ac.th sshd\[5371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 2019-08-28T15:31:20.911896enmeeting.mahidol.ac.th sshd\[5371\]: Failed password for invalid user admin from 92.63.194.90 port 56268 ssh2 ... |
2019-08-28 16:42:16 |
| 200.100.176.92 | attack | Lines containing failures of 200.100.176.92 Aug 28 05:07:56 mellenthin sshd[11636]: Invalid user control from 200.100.176.92 port 54185 Aug 28 05:07:56 mellenthin sshd[11636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.100.176.92 Aug 28 05:07:59 mellenthin sshd[11636]: Failed password for invalid user control from 200.100.176.92 port 54185 ssh2 Aug 28 05:07:59 mellenthin sshd[11636]: Received disconnect from 200.100.176.92 port 54185:11: Bye Bye [preauth] Aug 28 05:07:59 mellenthin sshd[11636]: Disconnected from invalid user control 200.100.176.92 port 54185 [preauth] Aug 28 05:23:34 mellenthin sshd[11917]: Invalid user fee from 200.100.176.92 port 34730 Aug 28 05:23:34 mellenthin sshd[11917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.100.176.92 Aug 28 05:23:36 mellenthin sshd[11917]: Failed password for invalid user fee from 200.100.176.92 port 34730 ssh2 Aug 28 05:23:36 m........ ------------------------------ |
2019-08-28 17:24:03 |
| 219.155.103.86 | attack | Unauthorised access (Aug 28) SRC=219.155.103.86 LEN=40 TTL=49 ID=62197 TCP DPT=8080 WINDOW=58682 SYN Unauthorised access (Aug 27) SRC=219.155.103.86 LEN=40 TTL=49 ID=47020 TCP DPT=8080 WINDOW=58682 SYN |
2019-08-28 17:03:49 |
| 59.45.99.99 | attack | Aug 27 22:30:28 hcbb sshd\[12760\]: Invalid user zr from 59.45.99.99 Aug 27 22:30:28 hcbb sshd\[12760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99 Aug 27 22:30:30 hcbb sshd\[12760\]: Failed password for invalid user zr from 59.45.99.99 port 37874 ssh2 Aug 27 22:36:50 hcbb sshd\[13278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99 user=root Aug 27 22:36:52 hcbb sshd\[13278\]: Failed password for root from 59.45.99.99 port 60450 ssh2 |
2019-08-28 16:45:10 |
| 164.132.42.32 | attack | Aug 28 00:19:52 vps200512 sshd\[15881\]: Invalid user soporte from 164.132.42.32 Aug 28 00:19:52 vps200512 sshd\[15881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.42.32 Aug 28 00:19:53 vps200512 sshd\[15881\]: Failed password for invalid user soporte from 164.132.42.32 port 41752 ssh2 Aug 28 00:23:39 vps200512 sshd\[15958\]: Invalid user info1 from 164.132.42.32 Aug 28 00:23:39 vps200512 sshd\[15958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.42.32 |
2019-08-28 17:40:10 |
| 23.129.64.154 | attackbotsspam | Aug 28 11:09:02 rotator sshd\[1246\]: Failed password for root from 23.129.64.154 port 43464 ssh2Aug 28 11:09:05 rotator sshd\[1246\]: Failed password for root from 23.129.64.154 port 43464 ssh2Aug 28 11:09:08 rotator sshd\[1246\]: Failed password for root from 23.129.64.154 port 43464 ssh2Aug 28 11:09:10 rotator sshd\[1246\]: Failed password for root from 23.129.64.154 port 43464 ssh2Aug 28 11:09:14 rotator sshd\[1246\]: Failed password for root from 23.129.64.154 port 43464 ssh2Aug 28 11:09:16 rotator sshd\[1246\]: Failed password for root from 23.129.64.154 port 43464 ssh2 ... |
2019-08-28 17:11:28 |
| 157.230.57.112 | attackbots | Aug 28 08:30:48 localhost sshd\[59894\]: Invalid user alka from 157.230.57.112 port 49158 Aug 28 08:30:48 localhost sshd\[59894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.57.112 Aug 28 08:30:51 localhost sshd\[59894\]: Failed password for invalid user alka from 157.230.57.112 port 49158 ssh2 Aug 28 08:35:06 localhost sshd\[60018\]: Invalid user pulse from 157.230.57.112 port 36436 Aug 28 08:35:06 localhost sshd\[60018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.57.112 ... |
2019-08-28 16:46:18 |
| 125.16.97.246 | attackspam | Aug 28 11:20:25 lcl-usvr-01 sshd[14783]: Invalid user files from 125.16.97.246 Aug 28 11:20:25 lcl-usvr-01 sshd[14783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.16.97.246 Aug 28 11:20:25 lcl-usvr-01 sshd[14783]: Invalid user files from 125.16.97.246 Aug 28 11:20:26 lcl-usvr-01 sshd[14783]: Failed password for invalid user files from 125.16.97.246 port 36428 ssh2 Aug 28 11:25:01 lcl-usvr-01 sshd[16705]: Invalid user fer from 125.16.97.246 |
2019-08-28 16:41:30 |
| 109.236.49.90 | attackspambots | SMTP PORT:25, HELO:agendahunter.pro, FROM:minority@agendahunter.pro Reason:Blocked by local spam rules |
2019-08-28 17:25:44 |
| 193.32.160.135 | attackbots | $f2bV_matches |
2019-08-28 17:13:03 |
| 67.205.135.127 | attackspambots | Aug 27 20:44:37 php1 sshd\[24843\]: Invalid user gamma from 67.205.135.127 Aug 27 20:44:37 php1 sshd\[24843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.135.127 Aug 27 20:44:39 php1 sshd\[24843\]: Failed password for invalid user gamma from 67.205.135.127 port 41058 ssh2 Aug 27 20:48:32 php1 sshd\[25162\]: Invalid user kettle from 67.205.135.127 Aug 27 20:48:32 php1 sshd\[25162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.135.127 |
2019-08-28 17:23:34 |
| 24.203.245.226 | attackspam | $f2bV_matches |
2019-08-28 17:28:11 |
| 189.91.3.51 | attackspam | Excessive failed login attempts on port 587 |
2019-08-28 16:47:43 |
| 182.31.65.31 | attackbotsspam | Telnet Server BruteForce Attack |
2019-08-28 17:39:43 |
| 202.77.114.34 | attack | Aug 27 22:45:11 sachi sshd\[26274\]: Invalid user ancel from 202.77.114.34 Aug 27 22:45:11 sachi sshd\[26274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.77.114.34 Aug 27 22:45:14 sachi sshd\[26274\]: Failed password for invalid user ancel from 202.77.114.34 port 43508 ssh2 Aug 27 22:49:54 sachi sshd\[26655\]: Invalid user prueba from 202.77.114.34 Aug 27 22:49:54 sachi sshd\[26655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.77.114.34 |
2019-08-28 16:58:21 |