Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Phoenix

Region: Arizona

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       20.160.0.0 - 20.175.255.255
CIDR:           20.160.0.0/12
NetName:        MSFT
NetHandle:      NET-20-160-0-0-1
Parent:         NET20 (NET-20-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Microsoft Corporation (MSFT)
RegDate:        2017-02-22
Updated:        2017-02-22
Ref:            https://rdap.arin.net/registry/ip/20.160.0.0



OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2025-06-10
Comment:        To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment:        * https://cert.microsoft.com.  
Comment:        
Comment:        For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment:        * abuse@microsoft.com.  
Comment:        
Comment:        To report security vulnerabilities in Microsoft products and services, please contact:
Comment:        * secure@microsoft.com.  
Comment:        
Comment:        For legal and law enforcement-related requests, please contact:
Comment:        * msndcc@microsoft.com
Comment:        
Comment:        For routing, peering or DNS issues, please 
Comment:        contact:
Comment:        * IOC@microsoft.com
Ref:            https://rdap.arin.net/registry/entity/MSFT


OrgTechHandle: BEDAR6-ARIN
OrgTechName:   Bedard, Dawn 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  dabedard@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/BEDAR6-ARIN

OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName:   Chaturmohta, Somesh 
OrgRoutingPhone:  +1-425-882-8080 
OrgRoutingEmail:  someshch@microsoft.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/CHATU3-ARIN

OrgTechHandle: SINGH683-ARIN
OrgTechName:   Singh, Prachi 
OrgTechPhone:  +1-425-707-5601 
OrgTechEmail:  pracsin@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/SINGH683-ARIN

OrgTechHandle: IPHOS5-ARIN
OrgTechName:   IPHostmaster, IPHostmaster 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  iphostmaster@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPHOS5-ARIN

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName:   Microsoft Abuse Contact
OrgAbusePhone:  +1-425-882-8080 
OrgAbuseEmail:  abuse@microsoft.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MAC74-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName:   Microsoft Routing, Peering, and DNS
OrgTechPhone:  +1-425-882-8080 
OrgTechEmail:  IOC@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/MRPD-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.168.103.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36360
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;20.168.103.49.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026072300 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 23 10:30:20 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 49.103.168.20.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.103.168.20.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.31.83 attackspambots
Sep  5 19:56:17 markkoudstaal sshd[12525]: Failed password for root from 222.186.31.83 port 15572 ssh2
Sep  5 19:56:19 markkoudstaal sshd[12525]: Failed password for root from 222.186.31.83 port 15572 ssh2
Sep  5 19:56:22 markkoudstaal sshd[12525]: Failed password for root from 222.186.31.83 port 15572 ssh2
...
2020-09-06 02:00:11
183.230.248.82 attack
Scanned 3 times in the last 24 hours on port 22
2020-09-06 01:51:52
45.142.120.53 attack
2020-09-05 14:18:53 dovecot_login authenticator failed for \(User\) \[45.142.120.53\]: 535 Incorrect authentication data \(set_id=janette@org.ua\)2020-09-05 14:19:29 dovecot_login authenticator failed for \(User\) \[45.142.120.53\]: 535 Incorrect authentication data \(set_id=lovers@org.ua\)2020-09-05 14:20:04 dovecot_login authenticator failed for \(User\) \[45.142.120.53\]: 535 Incorrect authentication data \(set_id=cel@org.ua\)
...
2020-09-06 01:52:22
157.55.39.244 attack
Automatic report - Banned IP Access
2020-09-06 02:25:43
180.166.228.228 attack
2020-09-05T10:51:45.793156abusebot-7.cloudsearch.cf sshd[17979]: Invalid user qyw from 180.166.228.228 port 44284
2020-09-05T10:51:45.797368abusebot-7.cloudsearch.cf sshd[17979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.228.228
2020-09-05T10:51:45.793156abusebot-7.cloudsearch.cf sshd[17979]: Invalid user qyw from 180.166.228.228 port 44284
2020-09-05T10:51:47.576515abusebot-7.cloudsearch.cf sshd[17979]: Failed password for invalid user qyw from 180.166.228.228 port 44284 ssh2
2020-09-05T10:55:12.741299abusebot-7.cloudsearch.cf sshd[17981]: Invalid user user from 180.166.228.228 port 46692
2020-09-05T10:55:12.747345abusebot-7.cloudsearch.cf sshd[17981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.228.228
2020-09-05T10:55:12.741299abusebot-7.cloudsearch.cf sshd[17981]: Invalid user user from 180.166.228.228 port 46692
2020-09-05T10:55:14.613390abusebot-7.cloudsearch.cf sshd[17981]: 
...
2020-09-06 02:06:13
202.137.155.160 attack
Brute force attempt
2020-09-06 01:41:01
221.179.103.2 attackbots
Automatic report BANNED IP
2020-09-06 02:20:00
82.165.253.73 attackbots
Port Scan: TCP/80
2020-09-06 01:44:24
31.192.111.248 attackbotsspam
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-06 02:11:40
36.92.109.147 attackbots
Sep  5 17:46:23 rancher-0 sshd[1450670]: Invalid user pi from 36.92.109.147 port 50428
Sep  5 17:46:23 rancher-0 sshd[1450671]: Invalid user pi from 36.92.109.147 port 50432
...
2020-09-06 01:46:24
47.111.19.40 attackbots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-06 02:17:03
102.39.125.142 attack
Sep  4 18:46:44 mellenthin postfix/smtpd[30907]: NOQUEUE: reject: RCPT from unknown[102.39.125.142]: 554 5.7.1 Service unavailable; Client host [102.39.125.142] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/102.39.125.142; from= to= proto=ESMTP helo=<[102.39.125.142]>
2020-09-06 02:23:25
68.183.156.140 attackbotsspam
Lines containing failures of 68.183.156.140 (max 1000)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=68.183.156.140
2020-09-06 02:20:28
222.186.180.223 attackbotsspam
Sep  5 18:05:35 marvibiene sshd[7325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
Sep  5 18:05:37 marvibiene sshd[7325]: Failed password for root from 222.186.180.223 port 54046 ssh2
Sep  5 18:05:41 marvibiene sshd[7325]: Failed password for root from 222.186.180.223 port 54046 ssh2
Sep  5 18:05:35 marvibiene sshd[7325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
Sep  5 18:05:37 marvibiene sshd[7325]: Failed password for root from 222.186.180.223 port 54046 ssh2
Sep  5 18:05:41 marvibiene sshd[7325]: Failed password for root from 222.186.180.223 port 54046 ssh2
2020-09-06 02:09:14
184.105.247.236 attackspambots
Hit honeypot r.
2020-09-06 02:01:09

Recently Reported IPs

50.16.30.200 44.203.139.246 34.228.60.106 148.227.67.31
91.231.89.61 2606:4700:10::ac43:1711 2606:4700:10::6814:9929 2606:4700:10::6816:4231
2606:4700:10::6814:5822 2606:4700:10::6814:4583 208.84.100.249 80.87.206.19
8.212.124.35 59.52.30.171 2606:4700:10::6814:8767 94.74.114.58
216.180.246.69 23.159.100.71 172.237.120.254 45.91.227.229