JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.205.15.131

20.205.15.131 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.205.15.131

Whois 20.205.15.131

IP Abuse Reports for 20.205.15.131:

This IP address has been reported a total of 71 times from 13 distinct sources. 20.205.15.131 was first reported on January 18th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kuj	2023-02-15 16:13:56 (3 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force
🇫🇮 MindSolve	2023-02-15 16:07:27 (3 years ago)	2023-02-15 17:07:26.848831 [WARNING] sofia_reg.c:2935 Can't find user [[email protected]] from 20. ... show more 2023-02-15 17:07:26.848831 [WARNING] sofia_reg.c:2935 Can't find user [[email protected]] from 20.205.15.131 show less	Fraud VoIP Hacking Brute-Force
🇫🇮 sgofferj	2023-02-14 12:49:54 (3 years ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇵🇱 6GNet.pl	2023-02-14 03:20:23 (3 years ago)	[2023-02-14 04:01:11] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2023-02-14 04:01:11] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-02-14T04:01:11.848+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="126",SessionID="0x7fb49c092270",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/20.205.15.131/55794",Challenge="14352391",ReceivedChallenge="14352391",ReceivedHash="53a589e80c5b4d37b787bbd9e32fcdf8" [2023-02-14 04:07:03] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-02-14T04:07:03.870+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="127",SessionID="0x7fb49c4e1760",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/20.205.15.131/50573",Challenge="1db50bb2",ReceivedChallenge="1db50bb2",ReceivedHash="cb465ee11c5dce354dc0506559015829" [2023-02-14 04:13:36] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-02-14T04:13:36.051+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="128", ... show less	Fraud VoIP Brute-Force
🇺🇸 Aidar Kamalov	2023-02-14 03:17:15 (3 years ago)	Feb 14 02:58:43 melbourne-sip-ulap-net /usr/sbin/kamailio[661665]: NOTICE: {REGISTER 1 3 REGISTER e5 ... show more Feb 14 02:58:43 melbourne-sip-ulap-net /usr/sbin/kamailio[661665]: NOTICE: {REGISTER 1 3 REGISTER e5f4a859602258e4f7a26} <script>: AUTH: REGISTER FAILED from 20.205.15.131 (code: -3) fd=152.69.190.114, adu=sip:152.69.190.114:5060, aa=MD5, ar=152.69.190.114, au=126, ad=, aU=126, [email protected] Feb 14 03:04:16 melbourne-sip-ulap-net /usr/sbin/kamailio[661667]: NOTICE: {REGISTER 1 1 REGISTER e5f4a634348490e4f7a27} <script>: AUTH: REGISTER FAILED from 20.205.15.131 (code: -5) fd=152.69.190.114, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] Feb 14 03:04:16 melbourne-sip-ulap-net /usr/sbin/kamailio[661668]: NOTICE: {REGISTER 1 2 REGISTER e5f4a634348490e4f7a27} <script>: AUTH: REGISTER FAILED from 20.205.15.131 (code: -3) fd=152.69.190.114, adu=sip:152.69.190.114:5060, aa=MD5, ar=152.69.190.114, au=127, ad=, aU=127, [email protected] Feb 14 03:04:16 melbourne-sip-ulap-net /usr/sbin/kamailio[661663]: NOTICE: {REGISTER 1 3 REGISTER e5f4a6343 ... show less	Fraud VoIP
🇨🇭 Inaxas AG	2023-02-14 03:09:32 (3 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 2 times between: 14/02/2023 - 04:03 and 14/02/2023 - 04:09. Unauthorized dial attempt: 1 times between: 14/02/2023 - 04:04 and 14/02/2023 - 04:04. show less	Fraud VoIP Port Scan Brute-Force
🇺🇸 kuj	2023-02-14 03:08:10 (3 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force
🇫🇮 MindSolve	2023-02-14 03:01:06 (3 years ago)	2023-02-14 04:01:06.588829 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ... show more 2023-02-14 04:01:06.588829 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected]] from ip 20.205.15.131 show less	Fraud VoIP Hacking Brute-Force
🇺🇸 Aidar Kamalov	2023-02-14 02:59:42 (3 years ago)	Feb 14 02:59:41 sydney-sip-ulap-net /usr/sbin/kamailio[689914]: NOTICE: {REGISTER 1 1 REGISTER e5f4a ... show more Feb 14 02:59:41 sydney-sip-ulap-net /usr/sbin/kamailio[689914]: NOTICE: {REGISTER 1 1 REGISTER e5f4a934906414e4f7a26} <script>: AUTH: REGISTER FAILED from 20.205.15.131 (code: -5) fd=192.9.164.107, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] ... show less	Fraud VoIP
🇫🇷 0xNath	2023-02-14 02:58:32 (3 years ago)	[Feb 14 03:58:31] SECURITY[4420] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023- ... show more [Feb 14 03:58:31] SECURITY[4420] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-14T03:58:31.281+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="126",SessionID="e5f4a756869691e4f7a26",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/20.205.15.131/59797" [Feb 14 03:58:31] SECURITY[4420] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-14T03:58:31.469+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="126",SessionID="e5f4a756869691e4f7a26",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/20.205.15.131/59797" [Feb 14 03:58:31] SECURITY[4420] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2023-02-14T03:58:31.469+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="e5f4a756869691e4f7a26",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/20.205.15.131/59797",Challenge="1676343511/25c15425cb333db324f881a286 ... show less	Fraud VoIP Brute-Force
🇫🇮 MindSolve	2023-02-12 05:40:11 (3 years ago)	2023-02-12 06:40:11.468834 [WARNING] sofia_reg.c:2935 Can't find user [[email protected]] from 20. ... show more 2023-02-12 06:40:11.468834 [WARNING] sofia_reg.c:2935 Can't find user [[email protected]] from 20.205.15.131 show less	Fraud VoIP Hacking Brute-Force
🇷🇺 alexanderzhirov	2023-02-11 14:34:35 (3 years ago)	FB2 blocked BF	Brute-Force
🇺🇸 kuj	2023-02-09 18:08:51 (3 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force
🇫🇮 MindSolve	2023-02-09 18:05:11 (3 years ago)	2023-02-09 19:05:11.364370 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ... show more 2023-02-09 19:05:11.364370 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected]] from ip 20.205.15.131 show less	Fraud VoIP Hacking Brute-Force
🇫🇮 MindSolve	2023-02-08 11:58:49 (3 years ago)	2023-02-08 12:58:48.728297 [WARNING] sofia_reg.c:2935 Can't find user [[email protected]] from 20. ... show more 2023-02-08 12:58:48.728297 [WARNING] sofia_reg.c:2935 Can't find user [[email protected]] from 20.205.15.131 show less	Fraud VoIP Hacking Brute-Force

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.154.35.203

🇺🇸 134.122.21.135

🇺🇸 18.226.14.143

🇳🇱 195.242.118.208

🇸🇬 152.42.175.252

🇨🇳 47.120.58.211

🇸🇬 47.84.134.69

🇧🇷 187.109.163.94

🇪🇨 157.100.53.42

🇸🇽 131.161.84.72

🇵🇰 110.93.224.226

🇳🇱 91.92.243.207

🇮🇹 88.147.30.59

🇱🇹 77.90.185.97

🇺🇸 52.154.22.63

🇨🇳 49.115.219.90

🇳🇱 45.148.10.151

🇦🇷 190.112.102.1

🇧🇩 182.48.80.240

🇨🇳 180.76.236.214