20.161.30.243
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
Abuse Reports
Total reports
45 from
41 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇯🇵 demonsword |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: admin-pc.tail712579.ts.net:443
|
Open Proxy Port Scan | |
| 🇫🇷 Entalpi.net |
Known exploit / shellcode injection attempt / network protocol violation, may be port scanning false positive
|
Hacking | |
| 🇫🇷 service Informatique |
/___proxy_subdomain_whm/login
|
Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.git/config | seen at 2026-08-22 21:42:48.678 |
|
Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 wteiken |
|
Port Scan | |
| 🇬🇧 essinghigh |
IPS Detection: 20.161.30.243 -> DPT: 80
|
Port Scan | |
| 🇬🇧 djboddington |
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack Hacking | |
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| 🇹🇷 neron |
CrowdSec blocked: tcp:scan detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇨🇭 backslash |
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
|
Bad Web Bot | |
| 🇩🇪 cloudmax |
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
|
Port Scan | |
| 🇩🇪 Trapper67 |
*Port Scan* detected from 20.161.30.243 (Unknown). 11 hits in the last 230 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Aug 1 06:47:12 kernel: Firewa
|
Port Scan | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown