City: San Antonio
Region: Texas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 52.224.0.0 - 52.255.255.255
CIDR: 52.224.0.0/11
NetName: MSFT
NetHandle: NET-52-224-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-11-24
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/52.224.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.248.43.126
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10078
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.248.43.126. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101701 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 18 03:30:15 CST 2026
;; MSG SIZE rcvd: 106126.43.248.52.in-addr.arpa domain name pointer azpdsg3y5skc.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
126.43.248.52.in-addr.arpa name = azpdsg3y5skc.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 180.168.198.142 | attack | 2019-12-04T15:57:08.830770abusebot-7.cloudsearch.cf sshd\[14395\]: Invalid user cannabis from 180.168.198.142 port 60050 |
2019-12-04 23:57:12 |
| 180.252.25.175 | attackspam | Unauthorized connection attempt from IP address 180.252.25.175 on Port 445(SMB) |
2019-12-05 00:06:27 |
| 185.22.142.146 | attackspambots | Dec 4 14:33:14 wh01 sshd[28733]: Failed password for root from 185.22.142.146 port 52414 ssh2 Dec 4 14:33:14 wh01 sshd[28733]: Received disconnect from 185.22.142.146 port 52414:11: Bye Bye [preauth] Dec 4 14:33:14 wh01 sshd[28733]: Disconnected from 185.22.142.146 port 52414 [preauth] Dec 4 14:40:42 wh01 sshd[29366]: Invalid user nvidia from 185.22.142.146 port 51188 Dec 4 14:40:42 wh01 sshd[29366]: Failed password for invalid user nvidia from 185.22.142.146 port 51188 ssh2 Dec 4 14:40:42 wh01 sshd[29366]: Received disconnect from 185.22.142.146 port 51188:11: Bye Bye [preauth] Dec 4 14:40:42 wh01 sshd[29366]: Disconnected from 185.22.142.146 port 51188 [preauth] Dec 4 15:05:51 wh01 sshd[2370]: Invalid user toni from 185.22.142.146 port 36466 Dec 4 15:05:51 wh01 sshd[2370]: Failed password for invalid user toni from 185.22.142.146 port 36466 ssh2 Dec 4 15:05:51 wh01 sshd[2370]: Received disconnect from 185.22.142.146 port 36466:11: Bye Bye [preauth] Dec 4 15:05:51 wh01 sshd |
2019-12-04 23:37:39 |
| 188.131.238.91 | attack | Dec 4 14:44:46 vps691689 sshd[21099]: Failed password for nobody from 188.131.238.91 port 44754 ssh2 Dec 4 14:52:28 vps691689 sshd[21315]: Failed password for uucp from 188.131.238.91 port 44026 ssh2 ... |
2019-12-05 00:04:32 |
| 163.172.191.192 | attack | Dec 4 04:26:32 eddieflores sshd\[18620\]: Invalid user oper from 163.172.191.192 Dec 4 04:26:32 eddieflores sshd\[18620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.191.192 Dec 4 04:26:34 eddieflores sshd\[18620\]: Failed password for invalid user oper from 163.172.191.192 port 52038 ssh2 Dec 4 04:32:28 eddieflores sshd\[19151\]: Invalid user abc123 from 163.172.191.192 Dec 4 04:32:28 eddieflores sshd\[19151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.191.192 |
2019-12-04 23:59:00 |
| 118.25.63.57 | attack | 2019-12-04T15:50:59.358939abusebot-8.cloudsearch.cf sshd\[29131\]: Invalid user felice from 118.25.63.57 port 60998 |
2019-12-05 00:03:14 |
| 159.65.26.61 | attackbotsspam | Dec 4 16:31:23 srv01 sshd[9679]: Invalid user allirot from 159.65.26.61 port 48374 Dec 4 16:31:23 srv01 sshd[9679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.26.61 Dec 4 16:31:23 srv01 sshd[9679]: Invalid user allirot from 159.65.26.61 port 48374 Dec 4 16:31:25 srv01 sshd[9679]: Failed password for invalid user allirot from 159.65.26.61 port 48374 ssh2 Dec 4 16:36:53 srv01 sshd[10175]: Invalid user abderraouf from 159.65.26.61 port 58296 ... |
2019-12-04 23:47:45 |
| 71.45.196.114 | attackbotsspam | Unauthorized connection attempt from IP address 71.45.196.114 on Port 445(SMB) |
2019-12-04 23:44:42 |
| 62.234.146.45 | attackspambots | Dec 4 15:16:39 hcbbdb sshd\[31760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.146.45 user=backup Dec 4 15:16:41 hcbbdb sshd\[31760\]: Failed password for backup from 62.234.146.45 port 60858 ssh2 Dec 4 15:24:44 hcbbdb sshd\[32707\]: Invalid user litfin from 62.234.146.45 Dec 4 15:24:44 hcbbdb sshd\[32707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.146.45 Dec 4 15:24:46 hcbbdb sshd\[32707\]: Failed password for invalid user litfin from 62.234.146.45 port 59834 ssh2 |
2019-12-04 23:28:13 |
| 140.143.222.95 | attack | Dec 4 12:08:28 game-panel sshd[13674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.222.95 Dec 4 12:08:30 game-panel sshd[13674]: Failed password for invalid user net1580@!%*) from 140.143.222.95 port 34384 ssh2 Dec 4 12:15:18 game-panel sshd[13985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.222.95 |
2019-12-04 23:26:01 |
| 202.137.15.193 | attack | Unauthorized connection attempt from IP address 202.137.15.193 on Port 445(SMB) |
2019-12-04 23:39:39 |
| 62.113.241.59 | attackbots | Lines containing failures of 62.113.241.59 Dec 2 07:05:14 home sshd[609]: Invalid user chowfla from 62.113.241.59 port 55256 Dec 2 07:05:14 home sshd[609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.113.241.59 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=62.113.241.59 |
2019-12-04 23:46:24 |
| 112.64.170.178 | attackbotsspam | Dec 4 16:30:17 vpn01 sshd[23062]: Failed password for root from 112.64.170.178 port 13801 ssh2 Dec 4 16:43:02 vpn01 sshd[23401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.178 ... |
2019-12-04 23:44:17 |
| 76.164.201.206 | attackspambots | SSHScan |
2019-12-04 23:46:00 |
| 106.12.102.143 | attack | Dec 4 15:44:22 sbg01 sshd[4447]: Failed password for root from 106.12.102.143 port 38974 ssh2 Dec 4 15:52:44 sbg01 sshd[4550]: Failed password for root from 106.12.102.143 port 42958 ssh2 Dec 4 16:00:50 sbg01 sshd[4601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.102.143 |
2019-12-05 00:00:17 |