City: Chicago
Region: Illinois
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 40.74.0.0 - 40.125.127.255
CIDR: 40.76.0.0/14, 40.124.0.0/16, 40.74.0.0/15, 40.120.0.0/14, 40.96.0.0/12, 40.80.0.0/12, 40.112.0.0/13, 40.125.0.0/17
NetName: MSFT
NetHandle: NET-40-74-0-0-1
Parent: NET40 (NET-40-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-02-23
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/40.74.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.116.110.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21784
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;40.116.110.38. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102402 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 25 12:31:02 CST 2026
;; MSG SIZE rcvd: 106Host 38.110.116.40.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 38.110.116.40.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.38.37.74 | attackbotsspam | Feb 26 18:26:48 MK-Soft-VM4 sshd[12395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.38.37.74 Feb 26 18:26:50 MK-Soft-VM4 sshd[12395]: Failed password for invalid user stephen from 61.38.37.74 port 47262 ssh2 ... |
2020-02-27 02:10:46 |
| 195.54.167.216 | attack | scans 15 times in preceeding hours on the ports (in chronological order) 40084 40378 40217 40040 40185 40469 40331 40141 40157 40370 40452 40082 40315 40329 40101 resulting in total of 85 scans from 195.54.167.0/24 block. |
2020-02-27 01:38:56 |
| 183.82.139.162 | attack | Brute forcing Wordpress login |
2020-02-27 02:11:52 |
| 71.6.199.23 | attack | 02/26/2020-11:53:19.719564 71.6.199.23 Protocol: 6 ET SCAN Suspicious inbound to PostgreSQL port 5432 |
2020-02-27 02:01:48 |
| 162.243.129.245 | attackbotsspam | RPC over 111. Denied@1142 |
2020-02-27 01:56:11 |
| 185.176.27.90 | attackbotsspam | firewall-block, port(s): 7910/tcp, 12910/tcp, 13310/tcp, 14810/tcp, 28610/tcp, 35510/tcp |
2020-02-27 01:44:14 |
| 193.32.163.102 | attackbotsspam | Port 3309 scan denied |
2020-02-27 01:39:34 |
| 184.105.247.251 | attack | Port 80 (HTTP) access denied |
2020-02-27 01:47:16 |
| 162.243.136.131 | attack | firewall-block, port(s): 465/tcp |
2020-02-27 01:49:05 |
| 92.118.37.86 | attack | Port 20002 scan denied |
2020-02-27 01:59:28 |
| 185.176.27.250 | attack | 02/26/2020-18:25:18.807690 185.176.27.250 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-02-27 01:41:21 |
| 185.176.27.162 | attackbots | 02/26/2020-18:33:13.221711 185.176.27.162 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-02-27 01:42:15 |
| 185.176.27.102 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 17887 proto: TCP cat: Misc Attack |
2020-02-27 01:43:18 |
| 92.119.160.52 | attackspambots | 02/26/2020-12:01:46.069364 92.119.160.52 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-02-27 01:58:03 |
| 80.82.65.74 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 70 - port: 1001 proto: TCP cat: Misc Attack |
2020-02-27 02:00:53 |