JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

130.131.227.119

Activity Trending Down

Abuse Confidence Score

100% Critical

598 reports

319 reporters · latest 1 week ago

ISP: Microsoft Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

598 from 319 distinct reporters

First reported

September 28th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 141 🇺🇸 United States of America 115 🇫🇷 France 55

Most common categories Web App Attack 470 Bad Web Bot 154 Brute-Force 137 Hacking 119 Port Scan 61

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-24 13:39:52 (1 week ago)	fail2ban jail apache-scanner: 130.131.227.119 - - [28/Sep/2026:08:12:40 -0700] "GET /randkeyword.PhP7 HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.22 ... show more fail2ban jail apache-scanner: 130.131.227.119 - - [28/Sep/2026:08:12:40 -0700] "GET /randkeyword.PhP7 HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /ws.php HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /404.php HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /wp-admin/user/index.php HTTP/1.1" 403 2797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /wp-conf.php HTTP/1 show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:43:01 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
Anonymous	2026-10-21 13:13:57 (1 week ago)	fail2ban jail apache-scanner: 130.131.227.119 - - [28/Sep/2026:08:12:40 -0700] "GET /randkeyword.PhP7 HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.22 ... show more fail2ban jail apache-scanner: 130.131.227.119 - - [28/Sep/2026:08:12:40 -0700] "GET /randkeyword.PhP7 HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /ws.php HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /404.php HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /wp-admin/user/index.php HTTP/1.1" 403 2797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /wp-conf.php HTTP/1 show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-21 12:20:39 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-10-17 00:20:43 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-10-15 12:06:49 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
Anonymous	2026-10-10 02:51:17 (3 weeks ago)	fail2ban jail apache-scanner: 130.131.227.119 - - [28/Sep/2026:08:12:40 -0700] "GET /randkeyword.PhP7 HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.22 ... show more fail2ban jail apache-scanner: 130.131.227.119 - - [28/Sep/2026:08:12:40 -0700] "GET /randkeyword.PhP7 HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /ws.php HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /404.php HTTP/1.1" 404 65544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /wp-admin/user/index.php HTTP/1.1" 403 2797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.131.227.119 - - [28/Sep/2026:08:12:41 -0700] "GET /wp-conf.php HTTP/1 show less	Web App Attack Port Scan
🇩🇪 rh24	2026-10-08 14:30:02 (3 weeks ago)	HTTP flood or excessive requests, blocked by host firewall.	DDoS Attack Web App Attack
🇩🇪 rh24	2026-10-06 14:30:03 (4 weeks ago)	HTTP flood or excessive requests, blocked by host firewall.	DDoS Attack Web App Attack
🇩🇪 rh24	2026-10-05 14:30:02 (4 weeks ago)	HTTP flood or excessive requests, blocked by host firewall.	DDoS Attack Web App Attack
Anonymous	2026-10-04 19:47:33 (4 weeks ago)	$f2bV_matches	Brute-Force
🇩🇪 rh24	2026-10-04 14:00:03 (4 weeks ago)	Blacklisted for CAPTCHA_DOS_ALERT after 101 captcha requests	DDoS Attack Web App Attack
🇸🇬 fazar	2026-10-03 16:00:10 (1 month ago)	wp-login-scan: 3 attempts from 130.131.227.119 on node: sgp01	Exploited Host Web App Attack
🇩🇪 rh24	2026-10-03 14:00:02 (1 month ago)	Blacklisted for CAPTCHA_DOS_ALERT after 101 captcha requests	DDoS Attack Web App Attack
🇫🇮 ☠\|ʂɧąɖơῳ\|☠	2026-10-03 06:52:52 (1 month ago)	[2026-10-03 06:52:52 UTC] Vulnerability/exploit scanning detected from 130.131.227.119 () PATHS: unknown	Bad Web Bot Web App Attack

Showing 1 to 15 of 598 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 138.99.196.73

🇺🇸 66.132.224.93

🇺🇸 216.25.90.86

🇺🇸 192.169.226.3

🇲🇽 187.161.141.44

🇳🇱 185.223.235.17

🇨🇳 183.222.230.188

🇷🇸 178.220.136.225

🇸🇬 167.172.79.117

🇺🇸 147.185.132.62

🇸🇬 146.190.89.248

🇵🇰 118.107.139.224

🇳🇱 77.239.124.160

🇩🇪 69.5.169.226

🇧🇪 34.78.224.61

🇦🇷 181.174.142.191

🇺🇸 136.116.228.221

🇺🇸 100.53.185.193

🇺🇸 70.140.83.249

🇺🇸 69.46.46.145