4.148.240.228 - IPInfo

Basic Info

City: Phoenix

Region: Arizona

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       4.144.0.0 - 4.159.255.255
CIDR:           4.144.0.0/12
NetName:        MSFT
NetHandle:      NET-4-144-0-0-2
Parent:         NET4 (NET-4-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Microsoft Corporation (MSFT)
RegDate:        2019-10-04
Updated:        2019-10-04
Ref:            https://rdap.arin.net/registry/ip/4.144.0.0



OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2025-06-10
Comment:        To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment:        * https://cert.microsoft.com.  
Comment:        
Comment:        For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment:        * abuse@microsoft.com.  
Comment:        
Comment:        To report security vulnerabilities in Microsoft products and services, please contact:
Comment:        * secure@microsoft.com.  
Comment:        
Comment:        For legal and law enforcement-related requests, please contact:
Comment:        * msndcc@microsoft.com
Comment:        
Comment:        For routing, peering or DNS issues, please 
Comment:        contact:
Comment:        * IOC@microsoft.com
Ref:            https://rdap.arin.net/registry/entity/MSFT


OrgTechHandle: BEDAR6-ARIN
OrgTechName:   Bedard, Dawn 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  dabedard@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/BEDAR6-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName:   Microsoft Routing, Peering, and DNS
OrgTechPhone:  +1-425-882-8080 
OrgTechEmail:  IOC@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/MRPD-ARIN

OrgTechHandle: SINGH683-ARIN
OrgTechName:   Singh, Prachi 
OrgTechPhone:  +1-425-707-5601 
OrgTechEmail:  pracsin@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/SINGH683-ARIN

OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName:   Chaturmohta, Somesh 
OrgRoutingPhone:  +1-425-882-8080 
OrgRoutingEmail:  someshch@microsoft.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/CHATU3-ARIN

OrgTechHandle: IPHOS5-ARIN
OrgTechName:   IPHostmaster, IPHostmaster 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  iphostmaster@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPHOS5-ARIN

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName:   Microsoft Abuse Contact
OrgAbusePhone:  +1-425-882-8080 
OrgAbuseEmail:  abuse@microsoft.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MAC74-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 4.148.240.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64898
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;4.148.240.228.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026101001 1800 900 604800 86400

;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 11 02:00:07 CST 2026
;; MSG SIZE  rcvd: 106

Host info

Host 228.240.148.4.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 228.240.148.4.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.110.17.69	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2019-10-25 23:53:37
122.199.25.147	attackbotsspam	Oct 25 02:23:09 euve59663 sshd[10409]: reveeclipse mapping checking getaddr= info for dyn-122-199-25-147.home.superloop.com [122.199.25.147] failed = - POSSIBLE BREAK-IN ATTEMPT! Oct 25 02:23:09 euve59663 sshd[10409]: Invalid user pi from 122.199.25.= 147 Oct 25 02:23:09 euve59663 sshd[10410]: reveeclipse mapping checking getaddr= info for dyn-122-199-25-147.home.superloop.com [122.199.25.147] failed = - POSSIBLE BREAK-IN ATTEMPT! Oct 25 02:23:09 euve59663 sshd[10410]: Invalid user pi from 122.199.25.= 147 Oct 25 02:23:09 euve59663 sshd[10410]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D122= .199.25.147=20 Oct 25 02:23:09 euve59663 sshd[10409]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D122= .199.25.147=20 Oct 25 02:23:11 euve59663 sshd[10409]: Failed password for invalid user= pi from 122.199.25.147 port 58154 ssh2 Oct 25 02:23:11 euve59663 sshd[10410]........ -------------------------------	2019-10-25 23:48:56
51.254.205.6	attack	Oct 25 04:58:04 web9 sshd\[8534\]: Invalid user telefon from 51.254.205.6 Oct 25 04:58:04 web9 sshd\[8534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.205.6 Oct 25 04:58:06 web9 sshd\[8534\]: Failed password for invalid user telefon from 51.254.205.6 port 38804 ssh2 Oct 25 05:02:17 web9 sshd\[9051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.205.6 user=root Oct 25 05:02:19 web9 sshd\[9051\]: Failed password for root from 51.254.205.6 port 49304 ssh2	2019-10-25 23:49:38
221.10.230.228	attack	Oct 25 11:57:37 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=221.10.230.228, lip=10.140.194.78, TLS, session= Oct 25 12:00:16 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=221.10.230.228, lip=10.140.194.78, TLS, session= Oct 25 12:06:20 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=221.10.230.228, lip=10.140.194.78, TLS, session=	2019-10-25 23:38:34
45.141.84.38	attack	Oct 25 08:06:43 web1 postfix/smtpd[19660]: warning: unknown[45.141.84.38]: SASL LOGIN authentication failed: authentication failure ...	2019-10-25 23:28:18
182.214.170.72	attack	Oct 25 17:17:52 vps691689 sshd[24596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.214.170.72 Oct 25 17:17:54 vps691689 sshd[24596]: Failed password for invalid user wenzhoutbc2007 from 182.214.170.72 port 58990 ssh2 ...	2019-10-25 23:43:29
61.133.232.250	attack	Oct 25 14:06:05 MK-Soft-Root1 sshd[22945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.250 Oct 25 14:06:08 MK-Soft-Root1 sshd[22945]: Failed password for invalid user webadm from 61.133.232.250 port 49767 ssh2 ...	2019-10-25 23:45:34
217.218.83.23	attackbots	F2B jail: sshd. Time: 2019-10-25 16:56:57, Reported by: VKReport	2019-10-25 23:15:20
222.186.180.223	attackspam	2019-10-25T22:38:36.755705enmeeting.mahidol.ac.th sshd\[13705\]: User root from 222.186.180.223 not allowed because not listed in AllowUsers 2019-10-25T22:38:38.042827enmeeting.mahidol.ac.th sshd\[13705\]: Failed none for invalid user root from 222.186.180.223 port 54166 ssh2 2019-10-25T22:38:39.437219enmeeting.mahidol.ac.th sshd\[13705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root ...	2019-10-25 23:47:56
212.92.120.248	attackspam	Multiple failed RDP login attempts	2019-10-25 23:48:23
202.73.9.76	attack	Oct 25 17:07:01 mail sshd[7456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.73.9.76 user=root Oct 25 17:07:03 mail sshd[7456]: Failed password for root from 202.73.9.76 port 34468 ssh2 ...	2019-10-25 23:23:42
157.55.39.3	attackspam	Automatic report - Banned IP Access	2019-10-25 23:37:58
58.85.108.82	attackbotsspam	Unauthorised access (Oct 25) SRC=58.85.108.82 LEN=40 TTL=47 ID=65413 TCP DPT=8080 WINDOW=27670 SYN Unauthorised access (Oct 25) SRC=58.85.108.82 LEN=40 TTL=47 ID=64293 TCP DPT=8080 WINDOW=27670 SYN Unauthorised access (Oct 24) SRC=58.85.108.82 LEN=40 TTL=47 ID=56064 TCP DPT=8080 WINDOW=27670 SYN	2019-10-25 23:52:53
107.170.65.115	attack	Oct 25 17:19:33 eventyay sshd[15259]: Failed password for root from 107.170.65.115 port 56294 ssh2 Oct 25 17:23:22 eventyay sshd[15311]: Failed password for root from 107.170.65.115 port 38910 ssh2 Oct 25 17:27:08 eventyay sshd[15362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.65.115 ...	2019-10-25 23:30:47
94.177.254.67	attackbotsspam	Oct 23 11:45:36 zimbra sshd[17425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.254.67 user=r.r Oct 23 11:45:37 zimbra sshd[17425]: Failed password for r.r from 94.177.254.67 port 34662 ssh2 Oct 23 11:45:37 zimbra sshd[17425]: Received disconnect from 94.177.254.67 port 34662:11: Bye Bye [preauth] Oct 23 11:45:37 zimbra sshd[17425]: Disconnected from 94.177.254.67 port 34662 [preauth] Oct 23 12:13:16 zimbra sshd[4781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.254.67 user=r.r Oct 23 12:13:18 zimbra sshd[4781]: Failed password for r.r from 94.177.254.67 port 42266 ssh2 Oct 23 12:13:18 zimbra sshd[4781]: Received disconnect from 94.177.254.67 port 42266:11: Bye Bye [preauth] Oct 23 12:13:18 zimbra sshd[4781]: Disconnected from 94.177.254.67 port 42266 [preauth] Oct 23 12:17:12 zimbra sshd[7818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss........ -------------------------------	2019-10-25 23:29:41

Recently Reported IPs

34.77.91.206	174.253.12.115	52.146.19.226	245.47.214.104
159.65.207.41	24.177.34.61	24.176.53.166	188.245.193.111
134.122.80.75	2606:4700:10::6814:9179	40.74.77.37	160.236.58.97
10.154.231.125	64.205.72.114	64.205.72.207	251.0.254.87
225.121.189.25	156.225.1.111	57.141.18.12	180.178.36.162