City: Dulles Town Center
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 52.145.0.0 - 52.191.255.255
CIDR: 52.145.0.0/16, 52.148.0.0/14, 52.160.0.0/11, 52.146.0.0/15, 52.152.0.0/13
NetName: MSFT
NetHandle: NET-52-145-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-11-24
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/52.145.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.188.225.226
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33345
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.188.225.226. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110700 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 07 22:31:27 CST 2026
;; MSG SIZE rcvd: 107226.225.188.52.in-addr.arpa domain name pointer azpdesng1p08.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
226.225.188.52.in-addr.arpa name = azpdesng1p08.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.143.72.25 | attack | Jun 26 15:23:05 relay postfix/smtpd\[29426\]: warning: unknown\[185.143.72.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 26 15:23:38 relay postfix/smtpd\[26643\]: warning: unknown\[185.143.72.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 26 15:23:55 relay postfix/smtpd\[1744\]: warning: unknown\[185.143.72.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 26 15:24:31 relay postfix/smtpd\[26697\]: warning: unknown\[185.143.72.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 26 15:24:51 relay postfix/smtpd\[6211\]: warning: unknown\[185.143.72.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-06-26 21:29:00 |
| 182.148.12.7 | attackspam | Jun 26 13:29:30 host sshd[5221]: Invalid user vero from 182.148.12.7 port 40296 ... |
2020-06-26 21:09:58 |
| 111.229.110.107 | attack | sshd |
2020-06-26 21:22:50 |
| 118.24.89.243 | attack | Jun 26 09:30:17 firewall sshd[5574]: Failed password for invalid user gpadmin from 118.24.89.243 port 49278 ssh2 Jun 26 09:32:45 firewall sshd[5621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.89.243 user=root Jun 26 09:32:47 firewall sshd[5621]: Failed password for root from 118.24.89.243 port 49064 ssh2 ... |
2020-06-26 21:21:40 |
| 106.54.91.157 | attackbotsspam | Jun 26 18:29:27 webhost01 sshd[7853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.91.157 Jun 26 18:29:29 webhost01 sshd[7853]: Failed password for invalid user alimov from 106.54.91.157 port 60896 ssh2 ... |
2020-06-26 21:10:23 |
| 110.35.80.82 | attackspambots | Invalid user vbox from 110.35.80.82 port 23540 |
2020-06-26 21:25:16 |
| 46.101.80.192 | attackbotsspam | [Fri Jun 26 05:29:23.993674 2020] [ssl:error] [pid 5308:tid 140175409653504] [client 46.101.80.192:53874] AH02032: Hostname macrocentral.com provided via SNI and hostname www.vestibulartechnologies.com provided via HTTP have no compatible SSL setup [Fri Jun 26 05:29:24.810595 2020] [ssl:error] [pid 4079:tid 140175564420864] [client 46.101.80.192:54398] AH02032: Hostname www.redebristol.com.br provided via SNI and hostname www.vestibulartechnologies.com provided via HTTP have no compatible SSL setup ... |
2020-06-26 21:15:25 |
| 46.38.150.193 | attackspambots | 2020-06-26 13:37:21 dovecot_login authenticator failed for \(User\) \[46.38.150.193\]: 535 Incorrect authentication data \(set_id=formname@no-server.de\) 2020-06-26 13:37:23 dovecot_login authenticator failed for \(User\) \[46.38.150.193\]: 535 Incorrect authentication data \(set_id=formname@no-server.de\) 2020-06-26 13:37:28 dovecot_login authenticator failed for \(User\) \[46.38.150.193\]: 535 Incorrect authentication data \(set_id=works@no-server.de\) 2020-06-26 13:37:33 dovecot_login authenticator failed for \(User\) \[46.38.150.193\]: 535 Incorrect authentication data \(set_id=works@no-server.de\) 2020-06-26 13:37:53 dovecot_login authenticator failed for \(User\) \[46.38.150.193\]: 535 Incorrect authentication data \(set_id=works@no-server.de\) 2020-06-26 13:37:54 dovecot_login authenticator failed for \(User\) \[46.38.150.193\]: 535 Incorrect authentication data \(set_id=works@no-server.de\) 2020-06-26 13:37:59 dovecot_login authenticator failed for \(User\) \[46.38.150.193\]: 5 ... |
2020-06-26 20:53:40 |
| 141.98.81.208 | attackbots | Jun 26 09:43:56 firewall sshd[5866]: Failed password for invalid user Administrator from 141.98.81.208 port 25909 ssh2 Jun 26 09:44:18 firewall sshd[5907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.208 user=root Jun 26 09:44:19 firewall sshd[5907]: Failed password for root from 141.98.81.208 port 17133 ssh2 ... |
2020-06-26 20:54:30 |
| 171.244.51.114 | attackbots | Jun 26 14:19:49 mout sshd[7453]: Invalid user im from 171.244.51.114 port 44826 |
2020-06-26 20:58:19 |
| 141.98.81.207 | attackbotsspam | Jun 26 09:43:50 firewall sshd[5864]: Invalid user admin from 141.98.81.207 Jun 26 09:43:51 firewall sshd[5864]: Failed password for invalid user admin from 141.98.81.207 port 27101 ssh2 Jun 26 09:44:14 firewall sshd[5896]: Invalid user Admin from 141.98.81.207 ... |
2020-06-26 20:58:53 |
| 60.167.177.121 | attackbotsspam | Invalid user dd from 60.167.177.121 port 36508 |
2020-06-26 21:20:58 |
| 218.92.0.172 | attackspam | Jun 26 15:33:01 server sshd[30303]: Failed none for root from 218.92.0.172 port 52674 ssh2 Jun 26 15:33:02 server sshd[30303]: Failed password for root from 218.92.0.172 port 52674 ssh2 Jun 26 15:33:06 server sshd[30303]: Failed password for root from 218.92.0.172 port 52674 ssh2 |
2020-06-26 21:34:23 |
| 179.97.57.41 | attack | From send-julio-1618-alkosa.com.br-8@opered.com.br Fri Jun 26 08:29:01 2020 Received: from mm57-41.opered.com.br ([179.97.57.41]:58971) |
2020-06-26 21:36:37 |
| 180.76.181.47 | attackbotsspam | Jun 26 14:21:11 rocket sshd[17571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.181.47 Jun 26 14:21:14 rocket sshd[17571]: Failed password for invalid user wanglj from 180.76.181.47 port 49998 ssh2 ... |
2020-06-26 21:31:44 |