City: San Antonio
Region: Texas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 40.74.0.0 - 40.125.127.255
CIDR: 40.76.0.0/14, 40.80.0.0/12, 40.112.0.0/13, 40.96.0.0/12, 40.120.0.0/14, 40.125.0.0/17, 40.124.0.0/16, 40.74.0.0/15
NetName: MSFT
NetHandle: NET-40-74-0-0-1
Parent: NET40 (NET-40-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-02-23
Updated: 2021-12-14
Ref: https://rdap.arin.net/registry/ip/40.74.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.124.82.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60419
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;40.124.82.37. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026111000 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 10 21:31:19 CST 2026
;; MSG SIZE rcvd: 10537.82.124.40.in-addr.arpa domain name pointer azpdssd8jql7.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
37.82.124.40.in-addr.arpa name = azpdssd8jql7.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 159.65.59.41 | attack | Jun 21 12:00:28 onepixel sshd[4144064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.59.41 Jun 21 12:00:28 onepixel sshd[4144064]: Invalid user guest from 159.65.59.41 port 57592 Jun 21 12:00:31 onepixel sshd[4144064]: Failed password for invalid user guest from 159.65.59.41 port 57592 ssh2 Jun 21 12:03:49 onepixel sshd[4145693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.59.41 user=root Jun 21 12:03:51 onepixel sshd[4145693]: Failed password for root from 159.65.59.41 port 58728 ssh2 |
2020-06-21 20:07:51 |
| 134.17.94.69 | attackspambots | Invalid user abhijeet from 134.17.94.69 port 6453 |
2020-06-21 20:00:48 |
| 209.141.40.12 | attack | 2020-06-21T11:55:09.036988shield sshd\[32763\]: Invalid user jenkins from 209.141.40.12 port 53852 2020-06-21T11:55:09.062247shield sshd\[32767\]: Invalid user guest from 209.141.40.12 port 53840 2020-06-21T11:55:09.083918shield sshd\[300\]: Invalid user ec2-user from 209.141.40.12 port 53832 2020-06-21T11:55:09.085140shield sshd\[303\]: Invalid user hadoop from 209.141.40.12 port 53850 2020-06-21T11:55:09.087384shield sshd\[32766\]: Invalid user test from 209.141.40.12 port 53842 2020-06-21T11:55:09.094642shield sshd\[32761\]: Invalid user vagrant from 209.141.40.12 port 53846 2020-06-21T11:55:09.095262shield sshd\[302\]: Invalid user ubuntu from 209.141.40.12 port 53834 2020-06-21T11:55:09.095966shield sshd\[32762\]: Invalid user postgres from 209.141.40.12 port 53848 2020-06-21T11:55:09.096580shield sshd\[301\]: Invalid user user from 209.141.40.12 port 53844 2020-06-21T11:55:09.097705shield sshd\[32764\]: Invalid user oracle from 209.141.40.12 port 53838 |
2020-06-21 19:56:04 |
| 49.232.145.201 | attackspam | 2020-06-21T10:16:48.589096abusebot-8.cloudsearch.cf sshd[3840]: Invalid user sftp from 49.232.145.201 port 34810 2020-06-21T10:16:48.600014abusebot-8.cloudsearch.cf sshd[3840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.145.201 2020-06-21T10:16:48.589096abusebot-8.cloudsearch.cf sshd[3840]: Invalid user sftp from 49.232.145.201 port 34810 2020-06-21T10:16:50.478374abusebot-8.cloudsearch.cf sshd[3840]: Failed password for invalid user sftp from 49.232.145.201 port 34810 ssh2 2020-06-21T10:20:11.780319abusebot-8.cloudsearch.cf sshd[4008]: Invalid user tomcat from 49.232.145.201 port 41492 2020-06-21T10:20:11.793126abusebot-8.cloudsearch.cf sshd[4008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.145.201 2020-06-21T10:20:11.780319abusebot-8.cloudsearch.cf sshd[4008]: Invalid user tomcat from 49.232.145.201 port 41492 2020-06-21T10:20:13.205114abusebot-8.cloudsearch.cf sshd[4008]: Failed p ... |
2020-06-21 20:12:41 |
| 104.248.63.105 | attackbots | scans once in preceeding hours on the ports (in chronological order) 8000 resulting in total of 3 scans from 104.248.0.0/16 block. |
2020-06-21 20:31:03 |
| 64.225.102.53 | attackspambots | scans once in preceeding hours on the ports (in chronological order) 5422 resulting in total of 5 scans from 64.225.0.0/17 block. |
2020-06-21 20:37:41 |
| 5.152.159.31 | attackspambots | 2020-06-21T12:14:49.914819shield sshd\[1704\]: Invalid user 123 from 5.152.159.31 port 34942 2020-06-21T12:14:49.918311shield sshd\[1704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31 2020-06-21T12:14:51.561220shield sshd\[1704\]: Failed password for invalid user 123 from 5.152.159.31 port 34942 ssh2 2020-06-21T12:16:34.785033shield sshd\[1855\]: Invalid user renato from 5.152.159.31 port 43020 2020-06-21T12:16:34.788981shield sshd\[1855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31 |
2020-06-21 20:26:53 |
| 223.243.5.48 | attackspambots | Unauthorized IMAP connection attempt |
2020-06-21 20:06:37 |
| 64.227.23.68 | attackspambots | scans once in preceeding hours on the ports (in chronological order) 5335 resulting in total of 2 scans from 64.227.0.0/17 block. |
2020-06-21 20:37:24 |
| 46.36.40.143 | attackspambots | 2020-06-21T07:48:34.288422vps773228.ovh.net sshd[4837]: Failed password for invalid user cisco from 46.36.40.143 port 60062 ssh2 2020-06-21T07:51:47.579896vps773228.ovh.net sshd[4887]: Invalid user lisa from 46.36.40.143 port 47044 2020-06-21T07:51:47.598318vps773228.ovh.net sshd[4887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.36.40.143 2020-06-21T07:51:47.579896vps773228.ovh.net sshd[4887]: Invalid user lisa from 46.36.40.143 port 47044 2020-06-21T07:51:49.880253vps773228.ovh.net sshd[4887]: Failed password for invalid user lisa from 46.36.40.143 port 47044 ssh2 ... |
2020-06-21 20:03:35 |
| 45.143.220.151 | attack | Jun 21 13:51:12 debian-2gb-nbg1-2 kernel: \[14998952.927776\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.143.220.151 DST=195.201.40.59 LEN=444 TOS=0x00 PREC=0x00 TTL=55 ID=15759 DF PROTO=UDP SPT=5236 DPT=5060 LEN=424 |
2020-06-21 19:58:24 |
| 64.225.115.188 | attack | scans once in preceeding hours on the ports (in chronological order) 22982 resulting in total of 5 scans from 64.225.0.0/17 block. |
2020-06-21 20:32:09 |
| 59.144.139.18 | attackbotsspam | Jun 21 12:41:53 ns3164893 sshd[17006]: Failed password for root from 59.144.139.18 port 59744 ssh2 Jun 21 12:44:42 ns3164893 sshd[17056]: Invalid user test from 59.144.139.18 port 59560 ... |
2020-06-21 20:06:15 |
| 106.13.118.102 | attack | 2020-06-21T13:05:54.123421vps773228.ovh.net sshd[7977]: Invalid user shared from 106.13.118.102 port 38596 2020-06-21T13:05:54.138337vps773228.ovh.net sshd[7977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.118.102 2020-06-21T13:05:54.123421vps773228.ovh.net sshd[7977]: Invalid user shared from 106.13.118.102 port 38596 2020-06-21T13:05:56.116944vps773228.ovh.net sshd[7977]: Failed password for invalid user shared from 106.13.118.102 port 38596 ssh2 2020-06-21T13:10:07.499531vps773228.ovh.net sshd[8028]: Invalid user inssserver from 106.13.118.102 port 57902 ... |
2020-06-21 19:59:42 |
| 62.234.153.213 | attack | Jun 21 13:07:57 gestao sshd[21284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.153.213 Jun 21 13:07:59 gestao sshd[21284]: Failed password for invalid user serveur from 62.234.153.213 port 43508 ssh2 Jun 21 13:16:31 gestao sshd[21493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.153.213 ... |
2020-06-21 20:38:28 |