20.161.30.53

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
125 reports
68 reporters · latest 2 months ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Boydton, Virginia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

20.161.30.53 has been reported 125 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
125 from 68 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 ipblock.com
IPBlock protected site ID [3192-af][s=02]. Exploit request, vulnerability scanner.
Hacking Bad Web Bot Web App Attack
🇯🇵 SentinalX by uzumaru
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.google.com:443
Open Proxy Port Scan
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: discord.com:443
Open Proxy Port Scan
🇩🇪 KPS
PortscanM
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 2082.
Port Scan Hacking
🇮🇹 LTM
WebServer - Attempts to exploit
Hacking Brute-Force Web App Attack
🇩🇪 www.fransveldman.world
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
Bad Web Bot
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸 RAP
2026-06-11 01:41:08 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
🇺🇸 Matthew Ping
ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.
Web App Attack Hacking
🇳🇵 Nanak011
Information Disclosure: Attempt to access AWS credential files, which could lead to cloud resource compromise.
Web App Attack Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇮🇩 hermawan
1781125640.313274 20.161.30.53 103.166.156.58 64240_2-4-8-1-3_1440_10 2026-06-11 04:07:20 WIB ...
Email Spam Hacking
🇫🇷 Donovan
Web scan/exploit blocked by fail2ban on commitshift.fr - jail: npm-scan - 1 attempt(s)
Web App Attack
🇺🇸 Mark--
Unauthorized connection attempt detected port 8080
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 213.209.159.226
🇵🇱 162.158.102.211
🇵🇱 162.158.102.113
🇫🇮 147.185.133.157
🇺🇸 136.144.42.75
🇰🇷 115.160.76.23
🇳🇬 102.88.110.73
🇮🇹 88.51.148.23
🇬🇧 35.203.210.203
🇧🇷 201.3.129.114
🇨🇳 183.23.70.48
🇳🇱 151.245.151.80
🇨🇳 52.80.122.42
🇦🇷 45.189.184.105
🇺🇸 205.210.31.18
🇧🇪 198.235.24.165
🇺🇸 192.253.209.163
🇦🇷 179.51.239.36
🇦🇺 168.144.162.30
🇨🇳 125.68.191.175
feedback