Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Phoenix

Region: Arizona

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       20.160.0.0 - 20.175.255.255
CIDR:           20.160.0.0/12
NetName:        MSFT
NetHandle:      NET-20-160-0-0-1
Parent:         NET20 (NET-20-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Microsoft Corporation (MSFT)
RegDate:        2017-02-22
Updated:        2017-02-22
Ref:            https://rdap.arin.net/registry/ip/20.160.0.0



OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2025-06-10
Comment:        To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment:        * https://cert.microsoft.com.  
Comment:        
Comment:        For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment:        * abuse@microsoft.com.  
Comment:        
Comment:        To report security vulnerabilities in Microsoft products and services, please contact:
Comment:        * secure@microsoft.com.  
Comment:        
Comment:        For legal and law enforcement-related requests, please contact:
Comment:        * msndcc@microsoft.com
Comment:        
Comment:        For routing, peering or DNS issues, please 
Comment:        contact:
Comment:        * IOC@microsoft.com
Ref:            https://rdap.arin.net/registry/entity/MSFT


OrgTechHandle: BEDAR6-ARIN
OrgTechName:   Bedard, Dawn 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  dabedard@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/BEDAR6-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName:   Microsoft Routing, Peering, and DNS
OrgTechPhone:  +1-425-882-8080 
OrgTechEmail:  IOC@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/MRPD-ARIN

OrgTechHandle: SINGH683-ARIN
OrgTechName:   Singh, Prachi 
OrgTechPhone:  +1-425-707-5601 
OrgTechEmail:  pracsin@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/SINGH683-ARIN

OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName:   Chaturmohta, Somesh 
OrgRoutingPhone:  +1-425-882-8080 
OrgRoutingEmail:  someshch@microsoft.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/CHATU3-ARIN

OrgTechHandle: IPHOS5-ARIN
OrgTechName:   IPHostmaster, IPHostmaster 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  iphostmaster@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPHOS5-ARIN

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName:   Microsoft Abuse Contact
OrgAbusePhone:  +1-425-882-8080 
OrgAbuseEmail:  abuse@microsoft.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MAC74-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.168.123.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46353
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;20.168.123.59.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026111002 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 11 12:01:27 CST 2026
;; MSG SIZE  rcvd: 106
Host info
59.123.168.20.in-addr.arpa domain name pointer azpdwsnfnxee.stretchoid.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
59.123.168.20.in-addr.arpa	name = azpdwsnfnxee.stretchoid.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
123.207.92.254 attack
Invalid user amavisd from 123.207.92.254 port 49808
2020-09-30 04:45:37
200.170.250.54 attackspam
Invalid user monitoring from 200.170.250.54 port 60844
2020-09-30 04:39:57
49.235.199.42 attackspambots
Found on   CINS badguys     / proto=6  .  srcport=49960  .  dstport=17572  .     (3772)
2020-09-30 04:32:39
106.3.130.99 attack
SSH Honeypot -> SSH Bruteforce / Login
2020-09-30 04:32:21
83.240.242.218 attackbotsspam
2020-09-29 17:01:14,004 fail2ban.actions        [937]: NOTICE  [sshd] Ban 83.240.242.218
2020-09-29 17:35:21,560 fail2ban.actions        [937]: NOTICE  [sshd] Ban 83.240.242.218
2020-09-29 18:09:23,123 fail2ban.actions        [937]: NOTICE  [sshd] Ban 83.240.242.218
2020-09-29 18:43:25,564 fail2ban.actions        [937]: NOTICE  [sshd] Ban 83.240.242.218
2020-09-29 19:19:27,541 fail2ban.actions        [937]: NOTICE  [sshd] Ban 83.240.242.218
...
2020-09-30 04:45:08
222.186.42.213 attackspambots
Sep 29 20:37:37 game-panel sshd[15920]: Failed password for root from 222.186.42.213 port 23967 ssh2
Sep 29 20:37:45 game-panel sshd[15922]: Failed password for root from 222.186.42.213 port 10073 ssh2
Sep 29 20:37:47 game-panel sshd[15922]: Failed password for root from 222.186.42.213 port 10073 ssh2
2020-09-30 04:41:16
172.67.181.174 attack
http://cyntekey.shop/Wyv7nYOdREZBzhfM8Ml3CgpUbbl1-q9GhGz0KY3DCT_Si2IZ
2020-09-30 04:40:16
192.254.74.22 attackspambots
192.254.74.22 - - [29/Sep/2020:15:43:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
192.254.74.22 - - [29/Sep/2020:15:43:22 +0100] "POST /wp-login.php HTTP/1.1" 200 1839 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
192.254.74.22 - - [29/Sep/2020:15:43:23 +0100] "POST /wp-login.php HTTP/1.1" 200 1845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-30 05:03:48
212.133.233.23 attack
Sep 28 22:40:01 mellenthin postfix/smtpd[9741]: NOQUEUE: reject: RCPT from unknown[212.133.233.23]: 554 5.7.1 Service unavailable; Client host [212.133.233.23] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/212.133.233.23 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[212.133.233.23]>
2020-09-30 05:01:18
104.131.84.225 attackspambots
20 attempts against mh-ssh on cloud
2020-09-30 04:42:26
116.85.56.252 attackbotsspam
Sep 29 11:25:29 ns382633 sshd\[3701\]: Invalid user cssserver from 116.85.56.252 port 43828
Sep 29 11:25:29 ns382633 sshd\[3701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.56.252
Sep 29 11:25:32 ns382633 sshd\[3701\]: Failed password for invalid user cssserver from 116.85.56.252 port 43828 ssh2
Sep 29 11:36:22 ns382633 sshd\[5965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.56.252  user=root
Sep 29 11:36:24 ns382633 sshd\[5965\]: Failed password for root from 116.85.56.252 port 38268 ssh2
2020-09-30 04:59:37
114.67.80.134 attack
 TCP (SYN) 114.67.80.134:48123 -> port 30669, len 44
2020-09-30 04:53:20
151.80.149.223 attackspambots
Sep 29 11:43:30 mail sshd[25696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.149.223 
Sep 29 11:43:33 mail sshd[25696]: Failed password for invalid user cvsroot from 151.80.149.223 port 47094 ssh2
...
2020-09-30 04:59:21
203.150.54.36 attackbotsspam
2020-09-28T23:39:59.478133afi-git.jinr.ru sshd[23015]: Invalid user yanmeng from 203.150.54.36 port 38898
2020-09-28T23:39:59.481666afi-git.jinr.ru sshd[23015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.150.54.36
2020-09-28T23:39:59.478133afi-git.jinr.ru sshd[23015]: Invalid user yanmeng from 203.150.54.36 port 38898
2020-09-28T23:40:01.797565afi-git.jinr.ru sshd[23015]: Failed password for invalid user yanmeng from 203.150.54.36 port 38898 ssh2
2020-09-28T23:40:03.628241afi-git.jinr.ru sshd[23114]: Invalid user hacy from 203.150.54.36 port 39665
...
2020-09-30 04:59:05
103.18.242.34 attackspam
$f2bV_matches
2020-09-30 04:53:49

Recently Reported IPs

20.80.76.6 38.80.191.40 159.89.85.160 211.161.118.27
27.219.57.217 221.215.8.7 15.204.87.212 143.244.53.219
124.207.169.3 35.210.176.64 86.38.187.56 35.210.39.84
200.138.46.70 200.138.46.69 200.138.46.25 66.132.159.102
34.151.154.26 20.127.191.36 175.107.228.197 172.241.38.116