Known Attacker
DetectedThis IP has been seen in attacks such as brute force, scanning or exploits.
Associated location
Arizona, United States (US)
Powered byIP Geolocation API
United States
33.44825, -112.07580
Threat score
Powered byIP Security API
Flags detected
This IP has been seen in attacks such as brute force, scanning or exploits.
Abuse contact
Powered byIP Abuse Contact API
Autonomous system
Microsoft Corporation
Powered byIP to ASN Database
Organization
Microsoft Corporation
Associated company
BUSINESS · mckesson.com
Powered byIP to Company Database
Network route
Powered byIP Geolocation API
Time zone
2026-10-24 13:37
Powered byTime Zone API
America/Phoenix
UTC-7.0
User agent string
Powered byUser Agent API
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
{
"ip" : "206.203.91.22",
"hostname" : "206.203.91.22",
"location" : {
"district" : "Maricopa",
"city" : "Phoenix",
"locality" : "Phoenix",
"zipcode" : "85003",
"latitude" : "33.44825",
"longitude" : "-112.07580",
"continent_code" : "NA",
"continent_name" : "North America",
"country_code2" : "US",
"country_code3" : "USA",
"country_name" : "United States",
"country_name_official" : "United States of America",
"country_capital" : "Washington, D.C.",
"state_prov" : "Arizona",
"state_code" : "US-AZ",
"accuracy_radius" : "7.883",
"confidence" : "high",
"dma_code" : "753",
"is_eu" : false,
"country_flag" : "https://ipgeolocation.io/static/flags/us_64.png",
"geoname_id" : "10340258",
"country_emoji" : "🇺🇸"
},
"country_metadata" : {
"tld" : ".us",
"languages" : [ "en-US", "es-US", "haw", "fr" ],
"calling_code" : "+1"
},
"network" : {
"route" : "206.203.91.0/24",
"connection_type" : "",
"is_anycast" : false,
"is_cdn" : false,
"cdn_provider_name" : ""
},
"currency" : {
"code" : "USD",
"name" : "US Dollar",
"symbol" : "$"
},
"asn" : {
"organization" : "Microsoft Corporation",
"country" : "US",
"type" : "HOSTING",
"domain" : "microsoft.com",
"rir" : "ARIN",
"as_number" : "AS8075",
"date_allocated" : "1997-03-31"
},
"company" : {
"name" : "McKesson Corp.",
"type" : "BUSINESS",
"domain" : "mckesson.com"
},
"security" : {
"threat_score" : 35,
"is_tor" : false,
"is_proxy" : false,
"proxy_provider_names" : [ ],
"proxy_confidence_score" : 0,
"proxy_last_seen" : "",
"is_residential_proxy" : false,
"is_vpn" : false,
"vpn_provider_names" : [ ],
"vpn_confidence_score" : 0,
"vpn_last_seen" : "",
"is_relay" : false,
"relay_provider_name" : "",
"is_anonymous" : false,
"is_known_attacker" : true,
"is_bot" : false,
"bot_confidence_score" : 0,
"bot_operator_name" : "",
"bot_type" : "",
"is_known_good_bot" : false,
"bot_last_seen" : "",
"is_spam" : false,
"is_cloud_provider" : true,
"cloud_provider_name" : "Microsoft Corporation",
"is_corporate_gateway" : false,
"corporate_gateway_type" : "",
"corporate_gateway_provider_name" : ""
},
"abuse" : {
"route" : "206.203.91.0/24",
"country" : "US",
"name" : "Network Infrastructure Team",
"organization" : "McKesson Corporation",
"kind" : "group",
"address" : "6555 State Highway 161, Irving, TX, 75039, United States",
"emails" : [ "NetworkInfrastructureTeam2@mckesson.com" ],
"phone_numbers" : [ "+19724464800" ]
},
"time_zone" : {
"name" : "America/Phoenix",
"offset" : -7.0,
"offset_with_dst" : -7.0,
"current_time" : "2026-10-24 13:37:16.112-0700",
"current_time_unix" : 1.792874236112E9,
"current_tz_abbreviation" : "MST",
"current_tz_full_name" : "Mountain Standard Time",
"standard_tz_abbreviation" : "MST",
"standard_tz_full_name" : "Mountain Standard Time",
"is_dst" : false,
"dst_savings" : 0,
"dst_exists" : false,
"dst_tz_abbreviation" : "",
"dst_tz_full_name" : "",
"dst_start" : { },
"dst_end" : { }
},
"user_agent" : {
"user_agent_string" : "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"name" : "ClaudeBot",
"type" : "Robot",
"version" : "1.0",
"version_major" : "1",
"device" : {
"name" : "Anthropic ClaudeBot",
"type" : "Robot",
"brand" : "Anthropic",
"cpu" : "Unknown"
},
"engine" : {
"name" : "ClaudeBot",
"type" : "Robot",
"version" : "1.0",
"version_major" : "1"
},
"operating_system" : {
"name" : "Cloud",
"type" : "Cloud",
"version" : "??",
"build" : "??",
"version_major" : "??"
}
}
}
Evaluation Checklist
What the data tells you about 206.203.91.22.
Microsoft Corporation operates AS8075, the autonomous system announcing this address. The associated company is McKesson Corp.; the reported network is 206.203.91.0/24.
View ASN APIIP location comes from routing, registry and measurement data. It can shift when Microsoft Corporation reassigns the block, so treat Phoenix as an estimate, not a fixed point.
View IP Location APIThe listed abuse contact is Network Infrastructure Team. Include the source IP, timestamps with a timezone, and relevant logs so the contact can investigate.
View Abuse Contact APIFor developers
Add IP location, network, and security data to your application.
curl --get 'https://api.ipgeolocation.io/v3/ipgeo' \
--data-urlencode 'apiKey=YOUR_API_KEY' \
--data-urlencode 'ip=206.203.91.22' \
--data-urlencode 'include=*'{ "ip": "206.203.91.22" }Location, ASN, and time zone in one request. Get city, country, and currency data for any IPv4 or IPv6 address, backed by a 99.99% uptime SLA. No credit card required.