JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.131.220.154

130.131.220.154 was found in our database!

This IP was reported 351 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.131.220.154

Whois 130.131.220.154

IP Abuse Reports for 130.131.220.154:

This IP address has been reported a total of 351 times from 308 distinct sources. 130.131.220.154 was first reported on June 12th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2026-06-13 07:36:00 (2 hours ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Jun 12. 21:33:28 Source IP: 130.13 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Jun 12. 21:33:28 Source IP: 130.131.220.154 Portion of the log(s): 130.131.220.154 - [12/Jun/2026:21:33:26 +0200] "GET /s.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:26 +0200] "GET /class-cc.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:26 +0200] "GET /ahutr.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:25 +0200] "GET /classc.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:24 +0200] "GET /f2.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:24 +0200] "GET /class-bda.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:24 +0200] "GET /classwithtostring.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:23 +0200] "GET /ftde.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:22 +0200] "GET /less.php HTTP/1.1" 404 153 "-" "-" 130.131.220.154 - [12/Jun/2026:21:33:22 +0200] "GET /wp-Blogs.php show less	Web App Attack
Anonymous	2026-06-13 06:15:03 (4 hours ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇪🇸 Gem	2026-06-13 05:59:38 (4 hours ago)	Unauthorized web scan.	Web App Attack
🇬🇧 openstrike.co.uk	2026-06-13 05:14:18 (5 hours ago)	259 attacks on PHP URLs: GET /invisi.php HTTP/1.1	Web App Attack
🇵🇱 dzpk	2026-06-13 04:29:48 (6 hours ago)	130.131.220.154 - - [13/Jun/2026:01:38:13 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager. ... show more 130.131.220.154 - - [13/Jun/2026:01:38:13 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 848 "-" "-" show less	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-06-13 03:11:34 (7 hours ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 130.131.220.154 172.68.26.160 - - [12/Jun/2026:16:01:03 ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 130.131.220.154 172.68.26.160 - - [12/Jun/2026:16:01:03 -0300] "GET /Ov-Simple1.php HTTP/1.1" 404 18149 130.131.220.154 172.68.27.160 - - [12/Jun/2026:16:01:04 -0300] "GET /atomlib.php HTTP/1.1" 404 18149 130.131.220.154 172.68.26.160 - - [12/Jun/2026:16:01:04 -0300] "GET /loxico93.php HTTP/1.1" 404 18149 130.131.220.154 172.68.26.160 - - [12/Jun/2026:16:01:05 -0300] "GET /momo.php HTTP/1.1" 404 18149 130.131.220.154 172.68.27.160 - - [12/Jun/2026:16:01:13 -0300] "GET /asu.php HTTP/1.1" 404 18149 show less	Bad Web Bot Web App Attack
🇩🇪 SiyCah	2026-06-13 03:00:02 (7 hours ago)	IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
Anonymous	2026-06-13 01:05:05 (9 hours ago)	Automatic report - Vulnerability scan /yoy123.php	Web App Attack
🇬🇧 andypiper	2026-06-13 01:01:55 (9 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 webanyone	2026-06-13 01:00:29 (9 hours ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇳🇱 0xffffffff	2026-06-13 01:00:11 (9 hours ago)	[2026-06-13 04:00:09.299298] [authz_core:error] [pid 294686:tid 136825024796352] [client 130.131.220 ... show more [2026-06-13 04:00:09.299298] [authz_core:error] [pid 294686:tid 136825024796352] [client 130.131.220.154:38099] AH01630: client denied by server configuration: /var/www//wp-content/plugins/hellopress , error_notes:wp:include-files , URI:'/wp-content/plugins/hellopress/wp_filemanager.php' [2026-06-13 04:00:09.634122] [authz_core:error] [pid 294686:tid 136825122047680] [client 130.131.220.154:38099] AH01630: client denied by server configuration: /var/www//this_is_a_new_hello_world.php , error_notes:missing-php , URI:'/this_is_a_new_hello_world.php' [2026-06-13 04:00:09.634122] [authz_core:error] [pid 294686:tid 136825122047680] [client 130.131.220.154:38099] AH01630: client denied by server configuration: /var/www//this_is_a_new_hello_world.php , error_notes:missing-php , URI:'/this_is_a_new_hello_world.php' [2026-06-13 04:00:09.881660] [authz_core:error] [pid 294686:tid 136824982832832] [client 130.131.220.154:38099] AH01630: client denied by server configuration: /var/www//wpconf.php , error_notes:missin show less	Web App Attack Bad Web Bot
🇩🇪 larse99	2026-06-13 00:58:43 (9 hours ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇺🇸 jkhorvath.com	2026-06-13 00:44:53 (9 hours ago)	Request for URL /wp-content/plugins/hellopress/wp_filemanager.php	Phishing Brute-Force Web App Attack
🇳🇱 ParaBug	2026-06-13 00:37:21 (9 hours ago)	130.131.220.154 - - [13/Jun/2026:02:37:21 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager. ... show more 130.131.220.154 - - [13/Jun/2026:02:37:21 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 565 "-" "-" ... show less	Phishing Brute-Force Web App Attack
🇺🇸 MPL	2026-06-13 00:34:58 (9 hours ago)	tcp/80 (5 or more attempts)	Port Scan

Showing 1 to 15 of 351 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:18c:0:192::e0:218

🇺🇸 147.185.132.225

🇨🇦 138.197.148.194

🇹🇭 118.193.57.62

🇲🇦 105.155.157.253

🇻🇳 103.138.113.149

🇳🇱 91.92.40.35

🇮🇹 83.229.8.197

🇲🇾 47.250.190.232

🇸🇬 20.212.251.69

🇻🇳 14.225.23.94

🇺🇿 213.230.127.104

🇩🇪 213.209.159.11

🇬🇧 193.163.125.155

🇺🇦 176.39.34.211

🇮🇳 139.59.6.237

🇰🇷 121.188.237.139

🇰🇷 118.37.214.187

🇫🇷 104.23.225.138

🇮🇳 103.255.75.252