Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Amsterdam

Region: Noord Holland

Country: The Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       20.0.0.0 - 20.31.255.255
CIDR:           20.0.0.0/11
NetName:        MSFT
NetHandle:      NET-20-0-0-0-1
Parent:         NET20 (NET-20-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Microsoft Corporation (MSFT)
RegDate:        2017-10-18
Updated:        2021-12-14
Ref:            https://rdap.arin.net/registry/ip/20.0.0.0



OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2025-06-10
Comment:        To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment:        * https://cert.microsoft.com.  
Comment:        
Comment:        For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment:        * abuse@microsoft.com.  
Comment:        
Comment:        To report security vulnerabilities in Microsoft products and services, please contact:
Comment:        * secure@microsoft.com.  
Comment:        
Comment:        For legal and law enforcement-related requests, please contact:
Comment:        * msndcc@microsoft.com
Comment:        
Comment:        For routing, peering or DNS issues, please 
Comment:        contact:
Comment:        * IOC@microsoft.com
Ref:            https://rdap.arin.net/registry/entity/MSFT


OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName:   Chaturmohta, Somesh 
OrgRoutingPhone:  +1-425-882-8080 
OrgRoutingEmail:  someshch@microsoft.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/CHATU3-ARIN

OrgTechHandle: BEDAR6-ARIN
OrgTechName:   Bedard, Dawn 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  dabedard@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/BEDAR6-ARIN

OrgTechHandle: IPHOS5-ARIN
OrgTechName:   IPHostmaster, IPHostmaster 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  iphostmaster@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPHOS5-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName:   Microsoft Routing, Peering, and DNS
OrgTechPhone:  +1-425-882-8080 
OrgTechEmail:  IOC@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/MRPD-ARIN

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName:   Microsoft Abuse Contact
OrgAbusePhone:  +1-425-882-8080 
OrgAbuseEmail:  abuse@microsoft.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MAC74-ARIN

OrgTechHandle: SINGH683-ARIN
OrgTechName:   Singh, Prachi 
OrgTechPhone:  +1-425-707-5601 
OrgTechEmail:  pracsin@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/SINGH683-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.23.9.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64015
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;20.23.9.218.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026031200 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 12 17:31:19 CST 2026
;; MSG SIZE  rcvd: 104
Host info
Host 218.9.23.20.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 218.9.23.20.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.91.210.9 attack
2020-09-20T17:58:53.173493morrigan.ad5gb.com sshd[1042569]: Disconnected from invalid user sftp 103.91.210.9 port 34436 [preauth]
2020-09-21 12:46:27
157.245.211.180 attack
Sep 21 03:52:19 xeon sshd[12726]: Failed password for root from 157.245.211.180 port 56454 ssh2
2020-09-21 12:29:32
2.57.122.214 attackbotsspam
SP-Scan 53551:23 detected 2020.09.20 01:41:02
blocked until 2020.11.08 17:43:49
2020-09-21 12:24:16
118.100.175.154 attackspambots
Automatic report - Port Scan Attack
2020-09-21 12:17:20
117.252.222.164 attackbots
Sep 20 18:49:25 lvps5-35-247-183 sshd[19298]: Invalid user admin from 117.252.222.164
Sep 20 18:49:26 lvps5-35-247-183 sshd[19298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.222.164 
Sep 20 18:49:28 lvps5-35-247-183 sshd[19298]: Failed password for invalid user admin from 117.252.222.164 port 37729 ssh2
Sep 20 18:49:33 lvps5-35-247-183 sshd[19302]: Invalid user admin from 117.252.222.164
Sep 20 18:49:34 lvps5-35-247-183 sshd[19302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.222.164 
Sep 20 18:49:36 lvps5-35-247-183 sshd[19302]: Failed password for invalid user admin from 117.252.222.164 port 37868 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.252.222.164
2020-09-21 12:49:12
27.6.246.167 attackspam
DATE:2020-09-20 19:04:05, IP:27.6.246.167, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)
2020-09-21 12:14:12
39.36.44.112 attack
Automatic report - Port Scan Attack
2020-09-21 12:32:26
106.12.185.102 attackspam
Sep 21 03:42:07 gitlab sshd[251885]: Invalid user deploy from 106.12.185.102 port 40376
Sep 21 03:42:07 gitlab sshd[251885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.185.102 
Sep 21 03:42:07 gitlab sshd[251885]: Invalid user deploy from 106.12.185.102 port 40376
Sep 21 03:42:10 gitlab sshd[251885]: Failed password for invalid user deploy from 106.12.185.102 port 40376 ssh2
Sep 21 03:44:18 gitlab sshd[252020]: Invalid user admin from 106.12.185.102 port 43160
...
2020-09-21 12:15:47
187.111.1.57 attack
Sep 20 19:03:25 mellenthin postfix/smtpd[12072]: NOQUEUE: reject: RCPT from unknown[187.111.1.57]: 554 5.7.1 Service unavailable; Client host [187.111.1.57] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/187.111.1.57; from= to= proto=ESMTP helo=<57.1.111.187.flexseg.com.br>
2020-09-21 12:48:00
67.205.138.198 attackspambots
Automatic report - Banned IP Access
2020-09-21 12:29:05
112.85.42.74 attackspambots
Sep 21 03:03:32 v2202009116398126984 sshd[346474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.74  user=root
Sep 21 03:03:34 v2202009116398126984 sshd[346474]: Failed password for root from 112.85.42.74 port 25385 ssh2
...
2020-09-21 12:21:11
27.7.148.115 attackbots
Tried our host z.
2020-09-21 12:42:15
123.180.59.165 attackbotsspam
Sep 20 18:37:34 nirvana postfix/smtpd[7276]: connect from unknown[123.180.59.165]
Sep 20 18:37:36 nirvana postfix/smtpd[7276]: lost connection after EHLO from unknown[123.180.59.165]
Sep 20 18:37:36 nirvana postfix/smtpd[7276]: disconnect from unknown[123.180.59.165]
Sep 20 18:41:01 nirvana postfix/smtpd[7276]: connect from unknown[123.180.59.165]
Sep 20 18:41:05 nirvana postfix/smtpd[7276]: warning: unknown[123.180.59.165]: SASL LOGIN authentication failed: authentication failure
Sep 20 18:41:06 nirvana postfix/smtpd[7276]: warning: unknown[123.180.59.165]: SASL LOGIN authentication failed: authentication failure
Sep 20 18:41:07 nirvana postfix/smtpd[7276]: warning: unknown[123.180.59.165]: SASL LOGIN authentication failed: authentication failure
Sep 20 18:41:08 nirvana postfix/smtpd[7276]: warning: unknown[123.180.59.165]: SASL LOGIN authentication failed: authentication failure
Sep 20 18:41:09 nirvana postfix/smtpd[7276]: warning: unknown[123.180.59.165]: SASL LOGIN ........
-------------------------------
2020-09-21 12:29:50
190.64.68.178 attackbots
$f2bV_matches
2020-09-21 12:40:06
182.116.116.215 attack
Icarus honeypot on github
2020-09-21 12:15:32

Recently Reported IPs

2.249.142.165 185.231.33.46 10.36.198.186 254.238.12.218
178.16.53.90 74.7.241.51 74.7.175.142 149.52.71.138
80.174.222.112 122.162.151.75 192.71.224.103 37.24.235.170
45.142.154.32 178.62.29.13 220.103.92.112 91.231.89.68
91.231.89.2 58.240.69.164 62.33.26.212 115.45.42.36