City: Des Moines
Region: Iowa
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 74.248.0.0 - 74.249.255.255
CIDR: 74.248.0.0/15
NetName: MSFT
NetHandle: NET-74-248-0-0-1
Parent: NET74 (NET-74-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2019-12-11
Updated: 2019-12-11
Ref: https://rdap.arin.net/registry/ip/74.248.0.0
OrgName: Microsoft Corporation
OrgId: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
RegDate: 1998-07-10
Updated: 2025-06-10
Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment: * https://cert.microsoft.com.
Comment:
Comment: For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment: * abuse@microsoft.com.
Comment:
Comment: To report security vulnerabilities in Microsoft products and services, please contact:
Comment: * secure@microsoft.com.
Comment:
Comment: For legal and law enforcement-related requests, please contact:
Comment: * msndcc@microsoft.com
Comment:
Comment: For routing, peering or DNS issues, please
Comment: contact:
Comment: * IOC@microsoft.com
Ref: https://rdap.arin.net/registry/entity/MSFT
OrgTechHandle: BEDAR6-ARIN
OrgTechName: Bedard, Dawn
OrgTechPhone: +1-425-538-6637
OrgTechEmail: dabedard@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/BEDAR6-ARIN
OrgTechHandle: MRPD-ARIN
OrgTechName: Microsoft Routing, Peering, and DNS
OrgTechPhone: +1-425-882-8080
OrgTechEmail: IOC@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MRPD-ARIN
OrgAbuseHandle: MAC74-ARIN
OrgAbuseName: Microsoft Abuse Contact
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MAC74-ARIN
OrgTechHandle: SINGH683-ARIN
OrgTechName: Singh, Prachi
OrgTechPhone: +1-425-707-5601
OrgTechEmail: pracsin@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/SINGH683-ARIN
OrgTechHandle: IPHOS5-ARIN
OrgTechName: IPHostmaster, IPHostmaster
OrgTechPhone: +1-425-538-6637
OrgTechEmail: iphostmaster@microsoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/IPHOS5-ARIN
OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName: Chaturmohta, Somesh
OrgRoutingPhone: +1-425-882-8080
OrgRoutingEmail: someshch@microsoft.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/CHATU3-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.249.179.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17321
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;74.249.179.141. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026093000 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 30 20:01:03 CST 2026
;; MSG SIZE rcvd: 107Host 141.179.249.74.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 141.179.249.74.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 171.221.230.220 | attackspam | $f2bV_matches |
2019-12-22 18:56:42 |
| 186.151.18.213 | attack | (sshd) Failed SSH login from 186.151.18.213 (213.18.151.186.static.intelnet.net.gt): 5 in the last 3600 secs |
2019-12-22 19:14:58 |
| 46.26.8.33 | attackspambots | Dec 22 11:35:31 sso sshd[12345]: Failed password for root from 46.26.8.33 port 56212 ssh2 ... |
2019-12-22 19:09:35 |
| 5.97.209.39 | attackspambots | Dec 22 08:49:26 legacy sshd[9936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.97.209.39 Dec 22 08:49:28 legacy sshd[9936]: Failed password for invalid user stepler from 5.97.209.39 port 36398 ssh2 Dec 22 08:54:58 legacy sshd[10104]: Failed password for root from 5.97.209.39 port 40574 ssh2 ... |
2019-12-22 19:25:51 |
| 152.136.203.208 | attackbots | Dec 22 09:23:43 server sshd\[27839\]: Invalid user sagar from 152.136.203.208 Dec 22 09:23:43 server sshd\[27839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.203.208 Dec 22 09:23:45 server sshd\[27839\]: Failed password for invalid user sagar from 152.136.203.208 port 39136 ssh2 Dec 22 09:38:30 server sshd\[31869\]: Invalid user tennis from 152.136.203.208 Dec 22 09:38:30 server sshd\[31869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.203.208 ... |
2019-12-22 18:51:38 |
| 167.172.165.46 | attack | Dec 22 00:49:18 php1 sshd\[17730\]: Invalid user !QAZ@5tgb from 167.172.165.46 Dec 22 00:49:18 php1 sshd\[17730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.165.46 Dec 22 00:49:20 php1 sshd\[17730\]: Failed password for invalid user !QAZ@5tgb from 167.172.165.46 port 38114 ssh2 Dec 22 00:54:19 php1 sshd\[18473\]: Invalid user trin from 167.172.165.46 Dec 22 00:54:19 php1 sshd\[18473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.165.46 |
2019-12-22 18:54:44 |
| 185.200.118.80 | attackspam | firewall-block, port(s): 1080/tcp |
2019-12-22 18:55:44 |
| 119.50.93.194 | attackspambots | Automatic report - Port Scan |
2019-12-22 19:23:20 |
| 185.184.79.36 | attack | Unauthorised access (Dec 22) SRC=185.184.79.36 LEN=40 TTL=248 ID=57205 TCP DPT=3389 WINDOW=1024 SYN |
2019-12-22 19:10:31 |
| 151.80.60.151 | attackbots | Dec 22 07:55:33 SilenceServices sshd[12847]: Failed password for root from 151.80.60.151 port 40544 ssh2 Dec 22 08:01:29 SilenceServices sshd[14455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.60.151 Dec 22 08:01:31 SilenceServices sshd[14455]: Failed password for invalid user boom from 151.80.60.151 port 49680 ssh2 |
2019-12-22 18:48:32 |
| 96.84.240.89 | attackspambots | Dec 22 00:26:03 home sshd[26731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.84.240.89 user=root Dec 22 00:26:05 home sshd[26731]: Failed password for root from 96.84.240.89 port 52140 ssh2 Dec 22 00:37:39 home sshd[26786]: Invalid user volkhart from 96.84.240.89 port 58321 Dec 22 00:37:39 home sshd[26786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.84.240.89 Dec 22 00:37:39 home sshd[26786]: Invalid user volkhart from 96.84.240.89 port 58321 Dec 22 00:37:41 home sshd[26786]: Failed password for invalid user volkhart from 96.84.240.89 port 58321 ssh2 Dec 22 00:42:49 home sshd[26844]: Invalid user cisco from 96.84.240.89 port 60627 Dec 22 00:42:49 home sshd[26844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.84.240.89 Dec 22 00:42:49 home sshd[26844]: Invalid user cisco from 96.84.240.89 port 60627 Dec 22 00:42:51 home sshd[26844]: Failed password for invalid user cisc |
2019-12-22 19:09:09 |
| 111.200.242.26 | attackbotsspam | Dec 22 07:25:52 MK-Soft-VM7 sshd[29438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.200.242.26 Dec 22 07:25:54 MK-Soft-VM7 sshd[29438]: Failed password for invalid user admin from 111.200.242.26 port 44104 ssh2 ... |
2019-12-22 19:05:24 |
| 190.15.203.50 | attack | Dec 22 09:32:03 XXX sshd[39088]: Invalid user test from 190.15.203.50 port 58800 |
2019-12-22 19:01:38 |
| 121.128.208.172 | attack | Scanning |
2019-12-22 19:16:11 |
| 61.223.136.52 | attack | 1576995937 - 12/22/2019 07:25:37 Host: 61.223.136.52/61.223.136.52 Port: 445 TCP Blocked |
2019-12-22 19:18:18 |