JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.199.116.19

Neutral Activity

Abuse confidence score ?

0% Low Risk

50 reports

17 reporters · latest 3 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇫🇷 France
City	Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.199.116.19 has been reported 50 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.199.116.19

Export CSV

This IP address has been reported a total of 50 times from 17 distinct sources. 20.199.116.19 was first reported on August 3rd 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 biztactix.com.au	2022-10-29 08:07:08 (3 years ago)	VOIP Registration/Call Bruteforcing	Fraud VoIP
🇮🇩 daru ittek	2022-09-01 07:40:41 (4 years ago)	[Aug 31 17:34:31] NOTICE[1173105] chan_sip.c: Registration from '<sip:[email protected]>' failed for ... show more [Aug 31 17:34:31] NOTICE[1173105] chan_sip.c: Registration from '<sip:[email protected]>' failed for '20.199.116.19:59580' - Wrong password [Aug 31 17:34:31] SECURITY[1173116] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-08-31T17:34:31.883+0700",Severity="Error",Service="SIP",EventVersion="2",AccountID="4521",SessionID="0x7fdaddb19f10",LocalAddress="IPV4/UDP/202.10.57.3/5060",RemoteAddress="IPV4/UDP/20.199.116.19/59580",Challenge="3146e9c5",ReceivedChallenge="3146e9c5",ReceivedHash="6e52bf4488dcc5c76c04bf47261352ae" [Sep 1 00:40:13] NOTICE[1173105] chan_sip.c: Registration from '<sip:[email protected]>' failed for '20.199.116.19:52766' - Wrong password [Sep 1 00:40:13] SECURITY[1173116] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-09-01T00:40:13.196+0700",Severity="Error",Service="SIP",EventVersion="2",AccountID="4593",SessionID="0x7fdadd390450",LocalAddress="IPV4/UDP/202.10.57.3/5060",RemoteAddress="IPV4/UDP/20.199.116.19/52766",Challenge="5cf ... show less	Brute-Force SSH
🇫🇮 MindSolve	2022-09-01 05:03:59 (4 years ago)	2022-09-01 11:03:58.997154 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ... show more 2022-09-01 11:03:58.997154 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected]] from ip 20.199.116.19 show less	Fraud VoIP Hacking Brute-Force
🇳🇱 Aidar Kamalov	2022-08-31 20:57:12 (4 years ago)	Sep 1 00:57:12 siptest-ulap-net /usr/sbin/kamailio[377924]: NOTICE: {REGISTER 1 1 REGISTER e5f4a294 ... show more Sep 1 00:57:12 siptest-ulap-net /usr/sbin/kamailio[377924]: NOTICE: {REGISTER 1 1 REGISTER e5f4a29464141e4f7a4578} <script>: AUTH: REGISTER FAILED from 20.199.116.19 (code: -5) fd=143.47.178.158, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] ... show less	Fraud VoIP
🇨🇭 Inaxas AG	2022-08-31 13:41:27 (4 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 3 times between: 31/08/2022 - 04:02 and 31/08/2022 - 19:40. Unauthorized dial attempt: 2 times between: 31/08/2022 - 04:03 and 31/08/2022 - 19:41. show less	Fraud VoIP Port Scan Brute-Force
🇫🇮 MindSolve	2022-08-31 03:28:01 (4 years ago)	2022-08-31 09:28:00.977186 [WARNING] sofia_reg.c:2935 Can't find user [[email protected]] from 20 ... show more 2022-08-31 09:28:00.977186 [WARNING] sofia_reg.c:2935 Can't find user [[email protected]] from 20.199.116.19 show less	Fraud VoIP Hacking Brute-Force
🇩🇪 Sandro	2022-08-31 01:07:37 (4 years ago)	[2022-08-31 05:07:36] NOTICE[2474240] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:4 ... show more [2022-08-31 05:07:36] NOTICE[2474240] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '20.199.116.19:63134' (callid: e5f4a654738725e4f7a4517) - No matching endpoint found [2022-08-31 05:07:36] SECURITY[7794] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2022-08-31T05:07:36.392+0000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="4517",SessionID="e5f4a654738725e4f7a4517",LocalAddress="IPV4/UDP/94.130.148.43/5060",RemoteAddress="IPV4/UDP/20.199.116.19/63134" [2022-08-31 05:07:36] NOTICE[2128766] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '20.199.116.19:63134' (callid: e5f4a654738725e4f7a4517) - No matching endpoint found [2022-08-31 05:07:36] NOTICE[2128766] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '20.199.116.19:63134' (callid: e5f4a654738725e4f7a4517) - Failed to authenticate [2022-08-31 05:07:36] SECURITY[7794] ... show less	Brute-Force
🇷🇺 webserfer	2022-08-31 01:07:33 (4 years ago)	[f2b] asterisk scan [W1:2:1d]	Fraud VoIP Brute-Force
🇦🇪 Aidar Kamalov	2022-08-30 18:52:45 (4 years ago)	Aug 30 22:52:45 dubai /usr/sbin/kamailio[1469846]: NOTICE: {REGISTER 1 1 REGISTER e5f4a965809560e4f7 ... show more Aug 30 22:52:45 dubai /usr/sbin/kamailio[1469846]: NOTICE: {REGISTER 1 1 REGISTER e5f4a965809560e4f7a4578} <script>: AUTH: REGISTER FAILED from 20.199.116.19 (code: -5) fd=193.123.82.1, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] ... show less	Fraud VoIP
🇨🇦 Vince Yelle	2022-08-30 08:13:09 (4 years ago)	sip brute force	Fraud VoIP
🇺🇸 Aidar Kamalov	2022-08-29 06:30:51 (4 years ago)	Aug 29 10:30:50 sjc-sip-ulap-net /usr/sbin/kamailio[4118701]: NOTICE: {REGISTER 1 1 REGISTER e5f4a53 ... show more Aug 29 10:30:50 sjc-sip-ulap-net /usr/sbin/kamailio[4118701]: NOTICE: {REGISTER 1 1 REGISTER e5f4a535684969e4f7a} <script>: AUTH: REGISTER FAILED from 20.199.116.19 (code: -5) fd=155.248.212.156, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] Aug 29 10:30:50 sjc-sip-ulap-net /usr/sbin/kamailio[4118703]: NOTICE: {REGISTER 1 2 REGISTER e5f4a535684969e4f7a} <script>: AUTH: REGISTER FAILED from 20.199.116.19 (code: -3) fd=155.248.212.156, adu=sip:155.248.212.156:5060, aa=MD5, ar=155.248.212.156, au=6745, ad=, aU=6745, [email protected] Aug 29 10:30:51 sjc-sip-ulap-net /usr/sbin/kamailio[4118700]: NOTICE: {REGISTER 1 3 REGISTER e5f4a535684969e4f7a} <script>: AUTH: REGISTER FAILED from 20.199.116.19 (code: -3) fd=155.248.212.156, adu=sip:155.248.212.156:5060, aa=MD5, ar=155.248.212.156, au=6745, ad=, aU=6745, [email protected] ... show less	Fraud VoIP
Anonymous	2022-08-29 02:30:51 (4 years ago)	SIP	Fraud VoIP
Anonymous	2022-08-29 01:00:50 (4 years ago)	2022-08-28 05:05:34,127 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.1920 ... show more 2022-08-28 05:05:34,127 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 07:05:30,819 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 09:05:30,456 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 11:05:29,850 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 13:05:34,604 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 15:05:32,209 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 17:05:31,668 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 19:05:43,604 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 19:05:45,587 fail2ban.actions\[13878\]: WARNING \[recidive-report\] Ban 20.199.116.192022-08-28 21:05:51,344 fail2ban.actions\[13878\]: WARNING \[asterisk-iptables\] Ban 20.199.116.192022-08-28 23:05:50,67 ... show less	Fraud VoIP Brute-Force SSH
🇺🇸 kuj	2022-08-28 23:33:21 (4 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force
🇪🇸 www.rentelwifi.com	2022-08-28 23:32:54 (4 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.218

🇨🇴 181.54.70.40

🇺🇸 164.92.117.229

🇳🇱 130.12.180.155

🇺🇸 107.0.200.227

🇮🇳 103.58.153.134

🇺🇸 91.230.168.221

🇺🇸 65.49.1.178

🇺🇸 47.85.183.250

🇫🇷 46.105.31.171

🇧🇷 45.229.13.67

🇨🇴 38.225.57.46

🇬🇧 35.203.211.16

🇰🇷 1.250.67.190

🇺🇸 199.182.214.84

🇸🇻 190.87.168.137

🇨🇴 190.60.34.210

🇲🇽 187.216.224.85

🇪🇨 186.71.3.33

🇨🇱 179.60.68.99