JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.19.168.131

20.19.168.131 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.19.168.131

Whois 20.19.168.131

IP Abuse Reports for 20.19.168.131:

This IP address has been reported a total of 56 times from 35 distinct sources. 20.19.168.131 was first reported on September 19th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gu-alvareza	2026-09-20 05:05:10 (12 hours ago)	AndroxGh0st.Malware	Hacking Exploited Host
🇩🇪 iNetWorker	2026-09-20 03:01:06 (14 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇷 ✨	2026-09-20 02:50:10 (15 hours ago)	Domain : pinkuk.com Rule : env 2026-09-20 02:49:04 *hidden-privacy* GET /.env - 443 - 20.19.168. ... show more Domain : pinkuk.com Rule : env 2026-09-20 02:49:04 *hidden-privacy* GET /.env - 443 - 20.19.168.131 HTTP/1.1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 - pinkuk.com 200 0 0 41206 300 31 - - show less	Hacking SQL Injection
🇫🇷 0d0a	2026-09-20 01:58:33 (15 hours ago)	Automated brute-force report from Fail2Ban	Web App Attack
🇫🇷 ✨	2026-09-20 01:58:10 (15 hours ago)	Domain : pembrokeshireholidaypark.co.uk Rule : env 2026-09-20 01:56:26 *hidden-privacy46 GET /. ... show more Domain : pembrokeshireholidaypark.co.uk Rule : env 2026-09-20 01:56:26 hidden-privacy*46 GET /.env - 80 - 20.19.168.131 HTTP/1.1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 - pembrokeshireholidaypark.co.uk 301 0 0 434 320 24 - - show less	Hacking SQL Injection
🇬🇧 thetomtaylor.co.uk	2026-09-20 01:08:00 (16 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-09-20 00:19:19 (17 hours ago)	80,443	Brute-Force SSH
🇦🇺 paulshipley.com.au	2026-09-19 23:55:26 (18 hours ago)	[Sun Sep 20 09:55:26.101466 2026] [security2:error] [pid 825369] [client 20.19.168.131:62312] [clien ... show more [Sun Sep 20 09:55:26.101466 2026] [security2:error] [pid 825369] [client 20.19.168.131:62312] [client 20.19.168.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.env"] [unique_id "aq8g7lYWySsujsHjDXTFRgAAAA4"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 23:41:17 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.19.168.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.19.168.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 19:41:09.744371 2026] [security2:error] [pid 5358:tid 5358] [client 20.19.168.131:59228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinhole.us"] [uri "/.env"] [unique_id "aq8dlfU5OvonKdstRAEaNwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 pashait	2026-09-19 23:16:05 (18 hours ago)	Auto-blocked by Seczar SecureOps — IPS Web Attack Signature (2 events in 5min) at 2026-09-19 23:16	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-19 21:37:42 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.19.168.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.19.168.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 17:37:37.864419 2026] [security2:error] [pid 15095:tid 15095] [client 20.19.168.131:62741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northfultonneurology.com"] [uri "/.env"] [unique_id "aq8AoQucRDs4n3_rlXlTuwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-19 21:28:46 (20 hours ago)		Web App Attack
🇫🇮 kumiko	2026-09-19 21:11:46 (20 hours ago)	[2026-09-20 00:11:46] Probing for dotfiles "GET /.env HTTP/1.1" 301	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-19 20:47:44 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 20.19.168.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 20.19.168.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 16:47:36.775496 2026] [security2:error] [pid 3907:tid 3907] [client 20.19.168.131:63585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modestosoftwater.com"] [uri "/.env"] [unique_id "aq706B009Dys2UnYHvstHgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-19 20:34:02 (21 hours ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /vendor/phpunit/phpunit/src/Util/PHP ... show more Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1. show less	Hacking Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.20.66.190

🇷🇴 193.46.255.86

🇺🇸 157.238.250.154

🇨🇦 134.122.38.116

🇷🇴 80.94.92.179

🇰🇷 218.239.53.194

🇧🇷 200.168.117.238

🇵🇦 200.46.151.238

🇷🇺 178.20.45.159

🇧🇷 177.126.150.182

🇧🇷 177.53.44.129

🇰🇷 152.32.139.76

🇨🇳 125.46.38.18

🇯🇵 104.252.204.213

🇷🇺 88.87.85.55

🇺🇸 68.225.62.34

🇧🇷 45.59.17.5

🇺🇸 34.148.46.223

🇺🇸 8.234.226.205

🇰🇷 222.232.176.7