CF1757725501212-tsm20250912070358

IPLIST.NET - step.sh

Search for IP or hostnames:

step.sh checked at 2025-09-13T01:05:01.133Z 1002ms 148/148/148 100% R:12

step.sh

NSns1.markmonitor.com
A2620:10a:80a8::1 🇨🇦 CIRA-CLOUD1
A149.112.160.1🇨🇦 CIRA-CLOUD1
NSns2.markmonitor.com
A2001:67c:10b8::1 🇨🇭 RCODEZERO-ANYCAST-SEC2
PTRns2.markmonitor.com
A176.97.158.1🇦🇹 RCODEZERO-ANYCAST-SEC2
PTRns2.markmonitor.com
NSns3.markmonitor.com
A2620:10a:80a9::1 🇨🇦 CIRA-CLOUD2
A149.112.161.1🇨🇦 CIRA-CLOUD2
NSns4.markmonitor.com
A2001:67c:1bc::1 🇦🇹 RcodeZero Anycast DNS
PTRns1.markmonitor.com
A192.174.68.1🇦🇹 RcodeZero Anycast DNS
PTRns1.markmonitor.com
NSns5.markmonitor.com
A2620:10a:80a8::2 🇨🇦 CIRA-CLOUD1
A149.112.160.2🇨🇦 CIRA-CLOUD1
NSns6.markmonitor.com
A2001:67c:10b8::3 🇨🇭 RCODEZERO-ANYCAST-SEC2
PTRns6.markmonitor.com
A176.97.158.3🇦🇹 RCODEZERO-ANYCAST-SEC2
PTRns6.markmonitor.com
NSns7.markmonitor.com
A2620:10a:80a9::2 🇨🇦 CIRA-CLOUD2
A149.112.161.2🇨🇦 CIRA-CLOUD2
MXstep-sh.mail.protection.outlook.com
A2a01:111:f403:c936:: 🇺🇸 Microsoft
PTRmail-cy1pr05cu00400.inbound.protection.outlook.com
A2a01:111:f403:f804::1 🇺🇸 Microsoft
PTRmail-co1pr05cu00301.inbound.protection.outlook.com
A2a01:111:f403:f901:: 🇺🇸 Microsoft
PTRmail-mn2pr04cu00200.inbound.protection.outlook.com
A2a01:111:f403:f907::1 🇺🇸 Microsoft
PTRmail-dm1pr04cu00201.inbound.protection.outlook.com
A52.101.8.34🇺🇸 Microsoft
PTRmail-dm2pr04cu00102.inbound.protection.outlook.com
A52.101.9.2🇺🇸 Microsoft
PTRmail-mn2pr02cu00202.inbound.protection.outlook.com
A52.101.9.14🇺🇸 Microsoft
PTRmail-bl0pr03cu00206.inbound.protection.outlook.com
A52.101.11.19🇺🇸 Microsoft
PTRmail-sa9pr04cu00203.inbound.protection.outlook.com
A13.248.148.104🇺🇸 Amazon
PTRa1234d40bd56b6907.awsglobalaccelerator.com
A76.223.20.46🇺🇸 Amazon
PTRa1234d40bd56b6907.awsglobalaccelerator.com

sh

NSa0.nic.sh
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh

Starts with same word

Starts similarily

AI analysis

step.sh points to two IP numbers: 13.248.148.104 and 76.223.20.46.

IP numbers are shared between step.sh and other host names like arrio.dev, clicks.tinypulse.com, afracing.co.uk, mccomas.us, and www.lds.co.

Seven name servers, ns1.markmonitor.com, ns2.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns5.markmonitor.com, ns6.markmonitor.com, and ns7.markmonitor.com, are delegated to step.sh.

The domain step.sh shares its name servers, at least partially, with other domains such as whisperject.net, infantfanatics.com, gymboree.net, umiessentials.com, and lettuce-apps.biz.

ns1.markmonitor.com, ns2.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns5.markmonitor.com, ns6.markmonitor.com, and ns7.markmonitor.com all point to two IP numbers each: 2620:10a:80a8::1 and 149.112.160.1, 2001:67c:10b8::1 and 176.97.158.1, 2620:10a:80a9::1 and 149.112.161.1, 2001:67c:1bc::1 and 192.174.68.1, 2620:10a:80a8::2 and 149.112.160.2, 2001:67c:10b8::3 and 176.97.158.3, 2620:10a:80a9::2 and 149.112.161.2 respectively.

The mail server, step-sh.mail.protection.outlook.com, manages step.sh.

Eight IP numbers, 2a01:111:f403:c936::, 2a01:111:f403:f804::1, 2a01:111:f403:f901::, 2a01:111:f403:f907::1, 52.101.8.34, 52.101.9.2, 52.101.9.14, and 52.101.11.19, are pointed to by step-sh.mail.protection.outlook.com.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

qyuREHU CF johedugfp 2025-09-13