20.15.166.16 - IPInfo

Basic Info

City: Des Moines

Region: Iowa

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       20.0.0.0 - 20.31.255.255
CIDR:           20.0.0.0/11
NetName:        MSFT
NetHandle:      NET-20-0-0-0-1
Parent:         NET20 (NET-20-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Microsoft Corporation (MSFT)
RegDate:        2017-10-18
Updated:        2021-12-14
Ref:            https://rdap.arin.net/registry/ip/20.0.0.0



OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2025-06-10
Comment:        To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment:        * https://cert.microsoft.com.  
Comment:        
Comment:        For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment:        * abuse@microsoft.com.  
Comment:        
Comment:        To report security vulnerabilities in Microsoft products and services, please contact:
Comment:        * secure@microsoft.com.  
Comment:        
Comment:        For legal and law enforcement-related requests, please contact:
Comment:        * msndcc@microsoft.com
Comment:        
Comment:        For routing, peering or DNS issues, please 
Comment:        contact:
Comment:        * IOC@microsoft.com
Ref:            https://rdap.arin.net/registry/entity/MSFT


OrgTechHandle: BEDAR6-ARIN
OrgTechName:   Bedard, Dawn 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  dabedard@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/BEDAR6-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName:   Microsoft Routing, Peering, and DNS
OrgTechPhone:  +1-425-882-8080 
OrgTechEmail:  IOC@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/MRPD-ARIN

OrgTechHandle: SINGH683-ARIN
OrgTechName:   Singh, Prachi 
OrgTechPhone:  +1-425-707-5601 
OrgTechEmail:  pracsin@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/SINGH683-ARIN

OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName:   Chaturmohta, Somesh 
OrgRoutingPhone:  +1-425-882-8080 
OrgRoutingEmail:  someshch@microsoft.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/CHATU3-ARIN

OrgTechHandle: IPHOS5-ARIN
OrgTechName:   IPHostmaster, IPHostmaster 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  iphostmaster@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPHOS5-ARIN

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName:   Microsoft Abuse Contact
OrgAbusePhone:  +1-425-882-8080 
OrgAbuseEmail:  abuse@microsoft.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MAC74-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.15.166.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30540
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;20.15.166.16.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026102902 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 30 10:01:38 CST 2026
;; MSG SIZE  rcvd: 105

Host info

Host 16.166.15.20.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 16.166.15.20.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
171.212.178.52	attackbots	Port 1433 Scan	2019-12-06 06:26:17
148.72.206.225	attackbots	Dec 6 00:27:29 server sshd\[6044\]: Invalid user guest from 148.72.206.225 Dec 6 00:27:29 server sshd\[6044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-206-225.ip.secureserver.net Dec 6 00:27:31 server sshd\[6044\]: Failed password for invalid user guest from 148.72.206.225 port 54248 ssh2 Dec 6 00:36:15 server sshd\[8529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-206-225.ip.secureserver.net user=sshd Dec 6 00:36:17 server sshd\[8529\]: Failed password for sshd from 148.72.206.225 port 41304 ssh2 ...	2019-12-06 06:30:24
49.234.131.75	attackbotsspam	Dec 5 17:11:54 ny01 sshd[22459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.131.75 Dec 5 17:11:55 ny01 sshd[22459]: Failed password for invalid user sandwich1 from 49.234.131.75 port 53136 ssh2 Dec 5 17:18:04 ny01 sshd[23065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.131.75	2019-12-06 06:21:10
180.101.125.76	attackspam	Tried sshing with brute force.	2019-12-06 06:46:22
222.186.180.17	attack	Dec 5 23:35:33 sd-53420 sshd\[21128\]: User root from 222.186.180.17 not allowed because none of user's groups are listed in AllowGroups Dec 5 23:35:33 sd-53420 sshd\[21128\]: Failed none for invalid user root from 222.186.180.17 port 31846 ssh2 Dec 5 23:35:33 sd-53420 sshd\[21128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Dec 5 23:35:35 sd-53420 sshd\[21128\]: Failed password for invalid user root from 222.186.180.17 port 31846 ssh2 Dec 5 23:35:39 sd-53420 sshd\[21128\]: Failed password for invalid user root from 222.186.180.17 port 31846 ssh2 ...	2019-12-06 06:38:41
181.41.216.136	attackbotsspam	Dec 5 23:23:36 webserver postfix/smtpd\[13744\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.136\]: 450 4.1.8 \: Sender address rejected: Domain not found\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 5 23:23:36 webserver postfix/smtpd\[13744\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.136\]: 450 4.1.8 \: Sender address rejected: Domain not found\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 5 23:23:36 webserver postfix/smtpd\[13744\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.136\]: 450 4.1.8 \: Sender address rejected: Domain not found\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 5 23:23:36 webserver postfix/smtpd\[13744\]: NOQUEUE: reject: RCPT from unknown\[181.41.216 ...	2019-12-06 06:44:57
107.6.182.209	attack	abuseConfidenceScore blocked for 12h	2019-12-06 06:41:11
165.227.53.38	attackbotsspam	Dec 5 21:57:38 srv01 sshd[9874]: Invalid user emilie from 165.227.53.38 port 33742 Dec 5 21:57:38 srv01 sshd[9874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.53.38 Dec 5 21:57:38 srv01 sshd[9874]: Invalid user emilie from 165.227.53.38 port 33742 Dec 5 21:57:40 srv01 sshd[9874]: Failed password for invalid user emilie from 165.227.53.38 port 33742 ssh2 Dec 5 22:02:58 srv01 sshd[10249]: Invalid user gg from 165.227.53.38 port 43012 ...	2019-12-06 06:45:20
193.105.24.95	attackspambots	detected by Fail2Ban	2019-12-06 06:24:48
103.125.191.70	attack	it tried to break my email	2019-12-06 06:29:14
103.86.200.5	attackbots	port scan and connect, tcp 23 (telnet)	2019-12-06 06:23:33
170.79.115.80	attack	Telnet/23 MH Probe, BF, Hack -	2019-12-06 06:15:08
180.153.46.170	attack	Dec 5 22:03:06 MK-Soft-VM7 sshd[27268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.153.46.170 Dec 5 22:03:09 MK-Soft-VM7 sshd[27268]: Failed password for invalid user admin from 180.153.46.170 port 52678 ssh2 ...	2019-12-06 06:29:55
94.191.50.57	attack	2019-12-05T22:53:24.290488vps751288.ovh.net sshd\[13535\]: Invalid user radio from 94.191.50.57 port 41414 2019-12-05T22:53:24.299579vps751288.ovh.net sshd\[13535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57 2019-12-05T22:53:26.549039vps751288.ovh.net sshd\[13535\]: Failed password for invalid user radio from 94.191.50.57 port 41414 ssh2 2019-12-05T23:01:06.569177vps751288.ovh.net sshd\[13619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57 user=root 2019-12-05T23:01:08.909060vps751288.ovh.net sshd\[13619\]: Failed password for root from 94.191.50.57 port 51292 ssh2	2019-12-06 06:13:30
171.103.140.110	attack	Brute force attempt	2019-12-06 06:30:11

Recently Reported IPs

120.239.31.27	120.212.73.148	86.38.187.39	86.38.187.28
77.67.26.87	77.67.26.102	64.205.72.120	60.255.208.189
36.34.142.135	200.138.46.46	115.49.73.224	111.208.41.173
192.168.10.71	104.248.241.5	143.110.134.103	20.65.202.85
103.215.74.112	164.90.186.143	91.231.89.119	40.124.115.253