City: Des Moines
Region: Iowa
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 74.248.0.0 - 74.249.255.255
CIDR: 74.248.0.0/15
NetName: MSFT
NetHandle: NET-74-248-0-0-1
Parent: NET74 (NET-74-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2019-12-11
Updated: 2019-12-11
Ref: https://rdap.arin.net/registry/ip/74.248.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.249.130.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43979
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;74.249.130.208. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102601 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 27 04:30:22 CST 2026
;; MSG SIZE rcvd: 107Host 208.130.249.74.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 208.130.249.74.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.53.21.199 | attackbots | trying to access non-authorized port |
2020-05-02 15:24:48 |
| 106.54.4.106 | attack | May 2 08:05:51 MainVPS sshd[11190]: Invalid user jonathan from 106.54.4.106 port 60474 May 2 08:05:51 MainVPS sshd[11190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.4.106 May 2 08:05:51 MainVPS sshd[11190]: Invalid user jonathan from 106.54.4.106 port 60474 May 2 08:05:52 MainVPS sshd[11190]: Failed password for invalid user jonathan from 106.54.4.106 port 60474 ssh2 May 2 08:10:21 MainVPS sshd[15081]: Invalid user oracle from 106.54.4.106 port 55538 ... |
2020-05-02 14:57:01 |
| 106.12.69.35 | attackbots | SSH Login Bruteforce |
2020-05-02 15:38:04 |
| 152.136.139.129 | attackspambots | Lines containing failures of 152.136.139.129 May 2 05:35:07 kmh-vmh-002-fsn07 sshd[1632]: Invalid user moodle from 152.136.139.129 port 37256 May 2 05:35:07 kmh-vmh-002-fsn07 sshd[1632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.139.129 May 2 05:35:09 kmh-vmh-002-fsn07 sshd[1632]: Failed password for invalid user moodle from 152.136.139.129 port 37256 ssh2 May 2 05:35:10 kmh-vmh-002-fsn07 sshd[1632]: Received disconnect from 152.136.139.129 port 37256:11: Bye Bye [preauth] May 2 05:35:10 kmh-vmh-002-fsn07 sshd[1632]: Disconnected from invalid user moodle 152.136.139.129 port 37256 [preauth] May 2 05:49:13 kmh-vmh-002-fsn07 sshd[23622]: Invalid user mg from 152.136.139.129 port 40168 May 2 05:49:13 kmh-vmh-002-fsn07 sshd[23622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.139.129 May 2 05:49:15 kmh-vmh-002-fsn07 sshd[23622]: Failed password for invalid user ........ ------------------------------ |
2020-05-02 14:51:27 |
| 119.203.63.29 | attackspam | 20/5/1@23:53:47: FAIL: Alarm-Telnet address from=119.203.63.29 ... |
2020-05-02 15:36:11 |
| 134.209.7.179 | attack | May 2 09:20:48 markkoudstaal sshd[21245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.7.179 May 2 09:20:49 markkoudstaal sshd[21245]: Failed password for invalid user philippe from 134.209.7.179 port 34976 ssh2 May 2 09:24:51 markkoudstaal sshd[21998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.7.179 |
2020-05-02 15:32:48 |
| 86.61.66.59 | attackspambots | 2020-05-02T05:49:48.740556abusebot-4.cloudsearch.cf sshd[29409]: Invalid user insp from 86.61.66.59 port 39230 2020-05-02T05:49:48.746815abusebot-4.cloudsearch.cf sshd[29409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bsn-61-66-59.static.siol.net 2020-05-02T05:49:48.740556abusebot-4.cloudsearch.cf sshd[29409]: Invalid user insp from 86.61.66.59 port 39230 2020-05-02T05:49:50.598071abusebot-4.cloudsearch.cf sshd[29409]: Failed password for invalid user insp from 86.61.66.59 port 39230 ssh2 2020-05-02T05:57:52.681354abusebot-4.cloudsearch.cf sshd[29868]: Invalid user ftpuser from 86.61.66.59 port 41351 2020-05-02T05:57:52.694239abusebot-4.cloudsearch.cf sshd[29868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bsn-61-66-59.static.siol.net 2020-05-02T05:57:52.681354abusebot-4.cloudsearch.cf sshd[29868]: Invalid user ftpuser from 86.61.66.59 port 41351 2020-05-02T05:57:54.660531abusebot-4.cloudsearch.c ... |
2020-05-02 15:08:47 |
| 171.248.58.180 | attackbots | Unauthorised access (May 2) SRC=171.248.58.180 LEN=52 TTL=110 ID=4484 DF TCP DPT=445 WINDOW=8192 SYN |
2020-05-02 14:49:38 |
| 110.8.67.146 | attackbotsspam | May 2 05:46:08 rotator sshd\[2406\]: Invalid user scpuser from 110.8.67.146May 2 05:46:11 rotator sshd\[2406\]: Failed password for invalid user scpuser from 110.8.67.146 port 58206 ssh2May 2 05:50:22 rotator sshd\[3210\]: Invalid user recepcja from 110.8.67.146May 2 05:50:24 rotator sshd\[3210\]: Failed password for invalid user recepcja from 110.8.67.146 port 41308 ssh2May 2 05:54:42 rotator sshd\[3259\]: Invalid user notebook from 110.8.67.146May 2 05:54:44 rotator sshd\[3259\]: Failed password for invalid user notebook from 110.8.67.146 port 52642 ssh2 ... |
2020-05-02 15:01:18 |
| 80.211.23.64 | attackbots | Port scan(s) denied |
2020-05-02 15:17:16 |
| 67.205.138.198 | attack | <6 unauthorized SSH connections |
2020-05-02 15:36:58 |
| 101.207.113.73 | attackbots | Invalid user dm from 101.207.113.73 port 57176 |
2020-05-02 15:16:38 |
| 222.186.175.151 | attackbots | May 2 09:10:58 eventyay sshd[14375]: Failed password for root from 222.186.175.151 port 8364 ssh2 May 2 09:11:01 eventyay sshd[14375]: Failed password for root from 222.186.175.151 port 8364 ssh2 May 2 09:11:10 eventyay sshd[14375]: error: maximum authentication attempts exceeded for root from 222.186.175.151 port 8364 ssh2 [preauth] ... |
2020-05-02 15:23:48 |
| 121.6.107.224 | attackspam | port scan and connect, tcp 23 (telnet) |
2020-05-02 15:10:36 |
| 111.229.136.177 | attack | May 2 06:23:06 home sshd[8899]: Failed password for mail from 111.229.136.177 port 46778 ssh2 May 2 06:28:28 home sshd[9752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.136.177 May 2 06:28:30 home sshd[9752]: Failed password for invalid user sshuser from 111.229.136.177 port 49168 ssh2 ... |
2020-05-02 14:52:42 |