20.161.30.52
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
Abuse Reports
Total reports
80 from
63 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 LRob |
Wordlist path sweep | method: GET | path: /careers/, /careers-home/, /open-roles/ (+9 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
|
Port Scan Web App Attack | |
| 🇺🇸 mnsf |
Too many Status 40X (11)
|
Brute-Force Web App Attack | |
| 🇩🇪 www.fransveldman.world |
Fetched browser challenge page 6 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| 🇮🇹 VHosting |
Detected mail brute force attack from different servers
|
Brute-Force | |
| 🇩🇪 www.fransveldman.world |
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| 🇩🇪 kingjan1999 |
Blocked by UFW [443/tcp] | SPT: 39974 | TTL: 115 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| 🇺🇸 NXTwoThou |
/___proxy_subdomain_whm/login/%3Flogin_only=1
|
Web App Attack | |
| 🇸🇪 Esko |
20.161.30.52 - - [02/Jun/2026:03:26:27 +0000] "GET /.env.save HTTP/1.1" 488 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0"
|
Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 laotuo |
20.161.30.52 - - [02/Jun/2026:04:36:56 +0200] "GET /.env.production HTTP/1.1" 302 638 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
|
Bad Web Bot | |
| 🇺🇸 jkhorvath |
Request for URL /wp-config.php
|
Phishing Brute-Force Web App Attack | |
| Anonymous |
suspicious request in access.log
|
Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown