20.161.30.232
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
No reports in the last 60 days
20.161.30.232 has been reported 14 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
14 from
9 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 44112
TTL: 49
Packet length: 60
TOS: 0x00
This report (for 20.161.30.232) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:44112 dst:23
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 44112
TTL: 47
Packet length: 60
TOS: 0x00
This report (for 20.161.30.232) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp/23 (6 or more attempts)
|
Port Scan | |
| 🇭🇺 kollanyit |
20.161.30.232 - - [03/Sep/2026:14:47:04 +0000] "GET /.git/HEAD HTTP/1.1" 404 179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-"
...
|
Web App Attack | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 2082.
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2078)
Source port: 33864
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 20.161.30.232) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇯🇵 demonsword |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: fapi.binance.com:443
|
Open Proxy Port Scan | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 Rayulcifer |
20.161.30.232 - - [05/Dec/2025:23:33:10 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 584 "-" "-"
20.161.30.232 - - [05/Dec/2025:23:33:10 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 591 "-" "-"
...
|
Open Proxy Port Scan Hacking Web App Attack SSH | |
| 🇩🇪 bontekoe.technology |
Port scan or Brute-Force detected. (src_port=48128, dst_port=443)
|
Brute-Force | |
| 🇺🇸 Rayulcifer |
20.161.30.232 - - [18/Sep/2025:09:30:23 -0500] "CONNECT www.mit.gov.tr:443 HTTP/1.1" 502 585 "-" "-"
20.161.30.232 - - [18/Sep/2025:09:30:23 -0500] "\x16\x03\x01" 400 491 "-" "-"
...
|
Open Proxy Port Scan Hacking Web App Attack SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown