40.84.128.138
Classification: Whitelisted
40.84.128.138 is a whitelisted (trusted) IP address. Reported by 7 threat sources, last seen 2026-09-07. Network: AS8075 Microsoft Corporation.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2022-07-19 02:30:45 | 2026-09-07 09:03:45 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2022-06-10 04:55:43 | 2026-09-07 09:03:43 | attacker malicious-activity | |
| Matched whitelist source: Microsoft_asn | Maltiverse | 2026-09-06 19:15:12 | 2026-09-06 19:15:12 | benign | |
| Mail Spammer | Barracuda | 2022-06-01 02:14:46 | 2026-09-06 19:15:10 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-07-04 10:45:57 | 2026-09-06 16:00:17 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-07-04 09:57:09 | 2026-09-06 12:27:53 | anomalous-activity attacker malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-07-04 09:57:09 | 2026-09-05 08:04:41 | attacker malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-07-05 10:58:27 | 2026-09-05 00:53:10 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2022-06-01 02:14:46 | 2026-09-03 20:00:46 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-07-04 09:57:09 | 2026-08-31 07:54:42 | attacker compromised malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-07-05 10:58:27 | 2026-08-28 10:29:25 | anomalous-activity attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-07-05 10:58:27 | 2026-08-28 10:29:25 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-08-04 00:00:00 | 2026-08-27 00:00:00 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-08-10 00:04:31 | 2026-08-10 00:04:31 | iot malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-08-09 09:57:12 | 2026-08-09 09:57:12 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-07-08 15:45:07 | 2026-07-14 11:38:10 | attacker malicious-activity | |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2022-09-08 02:33:37 | 2022-11-24 02:08:05 | malicious-activity |
Tags
abuseWhois information
- AS name
- AS8075 Microsoft Corporation
- AS registry
- arin
- AS date
- 2015-02-23 00:00:00
- AS CIDR
- 40.80.0.0/12
- CIDR
- 40.120.0.0/14, 40.80.0.0/12, 40.125.0.0/17, 40.74.0.0/15, 40.124.0.0/16, 40.76.0.0/14, 40.112.0.0/13, 40.96.0.0/12
- Registrant
- Microsoft Corporation
- Address
- One Microsoft Way
- City
- San Antonio
- State
- TX
- Postal code
- 78204
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2022-06-01 02:14:46
- Last updated
- 2026-09-07 09:04:10