JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.131.228.125

130.131.228.125 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.131.228.125

Whois 130.131.228.125

IP Abuse Reports for 130.131.228.125:

This IP address has been reported a total of 67 times from 47 distinct sources. 130.131.228.125 was first reported on August 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 largo-it.net	2026-08-29 09:29:16 (2 days ago)	[29/Aug/2026:11:29:13.450] HTTP 404 - GET /administrator/manifests/packages/pkg_sppagebuilder.xml [2 ... show more [29/Aug/2026:11:29:13.450] HTTP 404 - GET /administrator/manifests/packages/pkg_sppagebuilder.xml [29/Aug/2026:11:29:13.804] HTTP 404 - GET /administrator/components/com_sppagebuilder/sppagebuilder.xml [29/Aug/2026:11:29:14.178] HTTP 404 - GET /media/com_sppagebuilder/changelog.xml [29/Aug/2026:11:29:14.636] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon [29/Aug/2026:11:29:15.006] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon [29/Aug/2026:11:29:15.379] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon [29/Aug/2026:11:29:15.862] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon [29/Aug/2026:11:29:16.545] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-08-29 07:30:02 (2 days ago)	suspicious request in access.log	Web App Attack
🇩🇪 netclix.gr	2026-08-29 05:24:39 (2 days ago)	(c5_web_scan) Custom5 Aggressive Web Scan 130.131.228.125 (US/United States/-): 3 in the last 4600 s ... show more (c5_web_scan) Custom5 Aggressive Web Scan 130.131.228.125 (US/United States/-): 3 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 130.131.228.125 - - [29/Aug/2026:08:24:01 +0300] "POST /index.php?option=com_jce HTTP/1.1" 404 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" default:80 130.131.228.125 - - [29/Aug/2026:08:24:20 +0300] "POST /index.php?option=com_jce HTTP/1.1" 404 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" default:80 130.131.228.125 - - [29/Aug/2026:08:24:38 +0300] "POST /index.php?option=com_jce HTTP/1.1" 404 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Port Scan
🇫🇷 LoneRider	2026-08-29 04:58:40 (2 days ago)	[29/Aug/2026:06:58:08.887162 +0200] apJm4ESxnTXdik0haJpHeQAAAAI 130.131.228.125 45382 127.0.0.1 7081 ... show more [29/Aug/2026:06:58:08.887162 +0200] apJm4ESxnTXdik0haJpHeQAAAAI 130.131.228.125 45382 127.0.0.1 7081 [29/Aug/2026:06:58:11.134348 +0200] apJm44dQqzIhkXQMbD6hjgAAAAA 130.131.228.125 49048 127.0.0.1 7081 [29/Aug/2026:06:58:39.885160 +0200] apJm_xAGX1vrZ3vEmRlFZwAAAAQ 130.131.228.125 40760 127.0.0.1 7081 ... show less	Hacking
🇳🇱 Site.eu	2026-08-29 04:35:54 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇪🇸 elcruzado.es	2026-08-29 04:08:23 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 130.131.228.125 (US/United States/-)	SQL Injection
🇩🇪 Hazzard	2026-08-29 03:58:36 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
Anonymous	2026-08-29 03:10:31 (2 days ago)	[Sat Aug 29 03:10:21.448173 2026] [security2:error] [pid 319047:tid 319047] [client 130.131.228.125: ... show more [Sat Aug 29 03:10:21.448173 2026] [security2:error] [pid 319047:tid 319047] [client 130.131.228.125:42308] [client 130.131.228.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "lithomessiniaki.gr"] [uri "/.env.staging"] [unique_id "apJNnTxouceDLbhRChMXgwAAAAU"] [Sat Aug 29 03:10:23.552326 2026] [security2:error] [pid 317717:tid 317717] [client 130.131.228.125:4936] [client 130.131.228.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total ... show less	Web App Attack
🇩🇪 Didier Lagaert	2026-08-29 02:40:02 (2 days ago)	lie-21 : Rogue PHP files=>/configuration.php~	Hacking
🇺🇸 webgobe	2026-08-29 02:03:52 (2 days ago)	lee-1 : Trying access unauthorized files=>/administrator/manifests/packages/pkg_sppagebuilder.xml	Hacking
🇫🇷 largo-it.net	2026-08-29 01:35:37 (2 days ago)	[29/Aug/2026:03:35:27.646] HTTP 404 - GET /administrator/manifests/packages/pkg_sppagebuilder.xml [2 ... show more [29/Aug/2026:03:35:27.646] HTTP 404 - GET /administrator/manifests/packages/pkg_sppagebuilder.xml [29/Aug/2026:03:35:28.926] HTTP 404 - GET /administrator/components/com_sppagebuilder/sppagebuilder.xml [29/Aug/2026:03:35:30.294] HTTP 404 - GET /media/com_sppagebuilder/changelog.xml [29/Aug/2026:03:35:31.422] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon [29/Aug/2026:03:35:32.816] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon [29/Aug/2026:03:35:33.989] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon [29/Aug/2026:03:35:35.570] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon [29/Aug/2026:03:35:36.932] HTTP 404 - POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Hacking Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-08-29 01:27:06 (2 days ago)	lae- 404 : Too many 404 errors	Brute-Force
Anonymous	2026-08-29 00:05:10 (2 days ago)	Web attack blocked by Wordfence on 1valkenburg.nl (1 hit). Reported by CRMON.	Web App Attack
🇩🇪 marten_o	2026-08-28 22:52:44 (2 days ago)	130.131.228.125 - - [29/Aug/2026:00:52:44 +0200] "POST /tmp/cache410c1a.php HTTP/1.1" 500 573 "-" "M ... show more 130.131.228.125 - - [29/Aug/2026:00:52:44 +0200] "POST /tmp/cache410c1a.php HTTP/1.1" 500 573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 1932 7139 ... show less	Web App Attack
🇳🇱 Roderic	2026-08-28 22:18:02 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.166

🇹🇷 88.249.195.23

🇪🇹 196.188.63.222

🇧🇷 179.80.68.17

🇩🇪 155.117.13.160

🇦🇹 146.70.116.176

🇺🇸 52.159.139.249

🇨🇱 34.176.76.151

🇨🇳 27.21.30.251

🇧🇷 179.182.83.145

🇺🇸 91.230.168.236

🇫🇷 85.217.140.37

🇩🇪 69.5.169.57

🇺🇸 195.184.76.191

🇺🇸 189.81.235.141

🇺🇸 189.81.235.116

🇮🇳 182.95.119.30

🇺🇸 173.207.70.42

🇸🇬 159.65.14.196

🇫🇷 91.196.152.191