20.161.30.49
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
Abuse Reports
Total reports
50 from
35 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/http-probing - events: 11
|
Web App Attack Hacking | |
| 🇩🇪 Hans Wurst |
Many 404-Error: Suspicion of URL-Fuzzing/Bot-Scan.
|
Web App Attack | |
| 🇳🇱 e.fierstra |
excessive HTTP 404 errors
|
Bad Web Bot | |
| 🇺🇸 mnsf |
Too many Status 40X (11)
|
Brute-Force Web App Attack | |
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:443
|
Open Proxy Port Scan | |
| Anonymous |
Aggressive web scan
|
Web App Attack | |
| 🇺🇸 Rayulcifer |
|
Brute-Force SSH | |
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: graph.vshield.pro:443
|
Open Proxy Port Scan | |
| 🇩🇪 www.fransveldman.world |
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| 🇬🇧 openstrike.co.uk |
4 attacks on PHP URLs, env grabbing URLs, VC URLs, password grabbing URLs:
GET /wp-config.php.bak HTTP/1.1
GET /.env.production HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /.aws/credentials HTTP/1.1
|
Web App Attack Hacking | |
| Anonymous |
Honeypot hit: Empty payload (likely service probe); 2087 [3], 2083 [1], 2082 [1], 2086 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| Anonymous |
RdpGuard detected brute-force attempt on HTTP
|
Brute-Force | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| 🇺🇸 RAP |
2026-06-03 04:26:31 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown