JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.254.30.159

Neutral Activity

Abuse confidence score ?

0% Low Risk

23 reports

11 reporters · latest 3 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.254.30.159 has been reported 23 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.254.30.159

This IP address has been reported a total of 23 times from 11 distinct sources. 20.254.30.159 was first reported on May 17th 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Inaxas AG	2023-04-10 02:19:56 (3 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 955 times between: 18/05/2022 - 03:48 and 18/05/2022 - 03:49. Unauthorized dial attempt: 900 times between: 18/05/2022 - 03:49 and 18/05/2022 - 03:49. show less	Fraud VoIP Port Scan Brute-Force
🇨🇭 Inaxas AG	2023-03-10 01:10:34 (3 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 955 times between: 18/05/2022 - 03:48 and 18/05/2022 - 03:49. Unauthorized dial attempt: 900 times between: 18/05/2022 - 03:49 and 18/05/2022 - 03:49. show less	Fraud VoIP Port Scan Brute-Force
🇨🇭 Inaxas AG	2023-01-21 01:31:23 (3 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 955 times between: 18/05/2022 - 03:48 and 18/05/2022 - 03:49. Unauthorized dial attempt: 900 times between: 18/05/2022 - 03:49 and 18/05/2022 - 03:49. show less	Fraud VoIP Port Scan Brute-Force
🇨🇭 Inaxas AG	2022-10-29 21:21:01 (3 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 955 times between: 18/05/2022 - 03:48 and 18/05/2022 - 03:49. Unauthorized dial attempt: 900 times between: 18/05/2022 - 03:49 and 18/05/2022 - 03:49. show less	Fraud VoIP Port Scan Brute-Force
🇨🇭 Inaxas AG	2022-08-26 21:17:57 (4 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 955 times between: 18/05/2022 - 03:48 and 18/05/2022 - 03:49. Unauthorized dial attempt: 900 times between: 18/05/2022 - 03:49 and 18/05/2022 - 03:49. show less	Fraud VoIP Port Scan Brute-Force
🇵🇱 6GNet.pl	2022-05-19 13:56:40 (4 years ago)	[2022-05-19 19:56:40] SECURITY[3681] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-05-19 19:56:40] SECURITY[3681] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-05-19T19:56:40.074+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1229",SessionID="0x7fad402be4b0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/20.254.30.159/5265",Challenge="5fab5fbe",ReceivedChallenge="5fab5fbe",ReceivedHash="45245e7e690268c7993ec8dc5c30c764" [2022-05-19 19:56:40] SECURITY[3681] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-05-19T19:56:40.117+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1229",SessionID="0x7fad402c5f30",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/20.254.30.159/5265",Challenge="59db51c7",ReceivedChallenge="59db51c7",ReceivedHash="2ab7113063fb60c2f687e47ddd942854" [2022-05-19 19:56:40] SECURITY[3681] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-05-19T19:56:40.123+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1229" ... show less	Fraud VoIP Brute-Force
🇳🇱 ipoac.nl	2022-05-19 10:54:18 (4 years ago)	[May 19 16:54:16] NOTICE[3837734] res_pjsip_session.c: anonymous: Call (UDP:20.254.30.159:56265) to ... show more [May 19 16:54:16] NOTICE[3837734] res_pjsip_session.c: anonymous: Call (UDP:20.254.30.159:56265) to extension '1229' rejected because extension not found in context 'default'. show less	Fraud VoIP Brute-Force
🇪🇸 www.rentelwifi.com	2022-05-19 09:35:37 (4 years ago)	SIP Brute Force (SUA)	Fraud VoIP Brute-Force
🇮🇩 daru ittek	2022-05-19 07:45:54 (4 years ago)	[May 18 08:22:18] SECURITY[2417408] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-05-1 ... show more [May 18 08:22:18] SECURITY[2417408] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-05-18T08:22:18.365+0700",Severity="Error",Service="SIP",EventVersion="1",AccountID="1214",SessionID="0x7fcca4040960",LocalAddress="IPV4/UDP/202.10.57.3/5060",RemoteAddress="IPV4/UDP/20.254.30.159/48066",ACLName="no_extension_match" [May 19 02:07:30] NOTICE[2417392][C-0000034b] chan_sip.c: Call from '' (20.254.30.159:39820) to extension '1217' rejected because extension not found in context 'default'. [May 19 02:07:30] SECURITY[2417408] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-05-19T02:07:30.345+0700",Severity="Error",Service="SIP",EventVersion="1",AccountID="1217",SessionID="0x7fcca4077400",LocalAddress="IPV4/UDP/202.10.57.3/5060",RemoteAddress="IPV4/UDP/20.254.30.159/39820",ACLName="no_extension_match" [May 19 18:45:53] NOTICE[2417392][C-0000055f] chan_sip.c: Call from '' (20.254.30.159:41905) to extension '1229' rejected because extension not found in context 'default'. ... show less	Brute-Force SSH
🇳🇱 ipoac.nl	2022-05-18 18:18:03 (4 years ago)	[May 19 00:18:01] NOTICE[3682722] res_pjsip_session.c: anonymous: Call (UDP:20.254.30.159:40411) to ... show more [May 19 00:18:01] NOTICE[3682722] res_pjsip_session.c: anonymous: Call (UDP:20.254.30.159:40411) to extension '1217' rejected because extension not found in context 'default'. show less	Fraud VoIP Brute-Force
Anonymous	2022-05-18 13:23:42 (4 years ago)	sip attack	Fraud VoIP Port Scan Hacking
🇪🇸 www.rentelwifi.com	2022-05-18 13:02:52 (4 years ago)	SIP Brute Force (FSC)	Fraud VoIP Brute-Force
🇨🇴 ingentar	2022-05-18 11:10:31 (4 years ago)	\[2022-05-18 10:10:30\] NOTICE\[11733\] chan_sip.c: Registration from \'"1214" \<sip:[email protected] ... show more \[2022-05-18 10:10:30\] NOTICE\[11733\] chan_sip.c: Registration from \'"1214" \<sip:[email protected]\>\' failed for \'20.254.30.159:5212\' - Wrong password\[2022-05-18 10:10:30\] SECURITY\[11758\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-05-18T10:10:30.300-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1214",SessionID="0x7f23c401a958",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/20.254.30.159/5212",Challenge="3faf978a",ReceivedChallenge="3faf978a",ReceivedHash="8731cb32c32ea1c32e023d6566fafa3d"\[2022-05-18 10:10:30\] NOTICE\[11733\] chan_sip.c: Registration from \'"1214" \<sip:[email protected]\>\' failed for \'20.254.30.159:5212\' - Wrong password\[2022-05-18 10:10:30\] SECURITY\[11758\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-05-18T10:10:30.459-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1214",SessionID="0x7f23c401c8a8",LocalAddress="IPV4/UDP/181.143.117.59/5060",Rem ... show less	Fraud VoIP Brute-Force
🇮🇳 Virus Buster	2022-05-18 07:51:24 (4 years ago)	sip brute-force attacks	Hacking Brute-Force
🇪🇸 www.rentelwifi.com	2022-05-18 07:18:22 (4 years ago)	SIP Brute Force (VIE)	Fraud VoIP Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.109

🇲🇽 187.170.74.244

🇬🇪 185.228.135.170

🇨🇳 175.30.48.208

🇭🇰 156.225.14.74

🇨🇳 111.113.88.215

🇧🇬 91.191.209.98

🇷🇺 78.138.168.46

🇬🇧 35.203.211.207

🇺🇸 34.75.25.115

🇳🇱 20.229.185.186

🇧🇬 5.188.206.34

🇰🇷 220.124.224.150

🇳🇱 213.93.0.116

🇺🇸 195.184.76.163

🇬🇧 172.71.241.13

🇩🇪 167.94.146.59

🇩🇪 167.94.146.53

🇺🇸 147.135.11.133

🇻🇳 101.99.37.80