In multi-vodm devices you probably want to do this from the Global context if possible.
# di internet-service match MyVDOM 52.140.118.28 255.255.255.255
Internet Service: 327786(Microsoft-Azure), matched entry num: 2, matched num: 2
Internet Service: 327681(Microsoft-Web), matched entry num: 4, matched num: 4
Internet Service: 327682(Microsoft-ICMP), matched entry num: 2, matched num: 2
Internet Service: 327683(Microsoft-DNS), matched entry num: 2, matched num: 2
Internet Service: 327684(Microsoft-Outbound_Email), matched entry num: 4, matched num: 4
Internet Service: 327686(Microsoft-SSH), matched entry num: 1, matched num: 1
Internet Service: 327687(Microsoft-FTP), matched entry num: 2, matched num: 2
Internet Service: 327688(Microsoft-NTP), matched entry num: 2, matched num: 2
Internet Service: 327689(Microsoft-Inbound_Email), matched entry num: 4, matched num: 4
Internet Service: 327694(Microsoft-LDAP), matched entry num: 4, matched num: 4
Internet Service: 327695(Microsoft-NetBIOS.Session.Service), matched entry num: 2, matched num: 2
Internet Service: 327696(Microsoft-RTMP), matched entry num: 2, matched num: 2
Internet Service: 327704(Microsoft-NetBIOS.Name.Service), matched entry num: 1, matched num: 1
Internet Service: 327680(Microsoft-Other), matched entry num: 2, matched num: 2
Unauthorized == you don't have a Firmware And General Updates support contract.