20.161.30.48

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
46 reports
35 reporters · latest 3 months ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Boydton, Virginia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.161.30.48 has been reported 46 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
46 from 35 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force
Anonymous
<jail> banned by fail2ban
Brute-Force Web App Attack
Anonymous
Portscan: TCP/2082, TCP/2095, TCP/2077, TCP/2087, TCP/2086, TCP/2083, TCP/2078, TCP/2096
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇧🇾 lns.bz
.env scanning [BY]
Web App Attack
🇺🇸 MPL
tcp port scan (10 or more attempts)
Port Scan
🇧🇾 lns.bz
Too many 404 requests [BY]
Web App Attack
🇫🇮 sonot
Blocked by UFW on mail [2082/tcp] | SPT: 2118 | TTL: 46 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
[dsaracingteam.gr] httpd-suspicious-path: sites=global; logs=/var/log/nginx/access.log; samples=/.git/HEAD | /.git/config | /.env
Hacking Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 2087 [75], 2086 [3], 2078 [1], 2095 [1], 2082 [1], 2077 [1] TCP
Port Scan
🇫🇷 JPPO
13 hits : Various web attacks ...
Hacking
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-06-02
Web App Attack SSH Hacking
🇩🇪 Hugopvigo
"2026-06-02 20:45:38+00:00 20.161.30.48 IP con score alto (100) detectada en el log."
Brute-Force SSH
🇫🇷 JPPO
Multiport scan 8 ports : 80(x12) 443(x46) 2082 2083 2086(x2) 2087(x2) 8080 8443
Port Scan
🇩🇪 Hugopvigo
20.161.30.48 - - [02/Jun/2026:16:09:55 +0200] "GET /.git/config HTTP/1.1" 403 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" ...
Hacking Brute-Force Web App Attack SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.176.31.212
🇷🇺 37.232.168.144
🇩🇪 34.159.31.147
🇳🇱 204.76.203.44
🇨🇳 182.92.204.91
🇫🇷 146.70.194.220
🇮🇳 122.160.221.219
🇨🇦 85.217.149.32
🇸🇪 83.209.248.110
🇧🇷 38.226.52.92
🇺🇸 209.85.160.198
🇧🇷 191.243.197.232
🇧🇷 177.126.132.44
🇺🇸 162.216.150.186
🇨🇦 85.217.149.49
🇫🇷 52.123.145.91
🇮🇩 202.155.157.113
🇹🇭 183.88.252.106
🇳🇬 165.154.11.225
🇺🇸 129.121.142.84
feedback