Total reports
6 from
6 distinct
reporters
First reported
November 13th 2026
Most recent report
2 hours ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
3
🇫🇷
France
2
🇩🇪
Germany
1
Most common categories
Port Scan
6
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
schuh
2026-11-14 03:23:32
UTC ·
(2 hours ago)
14-11-2026:03:22:47UTC [Port Scan] unique_ports:6 ports:2375,2376,6380,7007,4243,6379 (6 packets). SRC=104.131.81.232 TTL=55 DF PROTO=TCP SPT=41000 DPT=2375 SYN
Port Scan
🇺🇸
sandra361
2026-11-14 01:57:50
UTC ·
(4 hours ago)
Port scan detected: 6 packets across 5 ports (2376, 4243, 6379, 6380, 7007). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=104.131.81.232 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=15952 DF PROTO=TCP SPT=55294 DPT=7007 WINDOW=64240 RES=0x00 SYN URGP=0
Port Scan
2026-11-13 23:39:45
UTC ·
(6 hours ago)
2026-11-13T18:39:44.307269-05:00 localhost kernel: [1582046.974000] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=104.131.81.232 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=2241 DF PROTO=TCP SPT=59432 D ...
show more
2026-11-13T18:39:44.307269-05:00 localhost kernel: [1582046.974000] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=104.131.81.232 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=2241 DF PROTO=TCP SPT=59432 DPT=2375 SEQ=3901750675 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080AC1E3FAD70000000001030307)
2026-11-13T18:39:44.308278-05:00 localhost kernel: [1582046.974152] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=104.131.81.232 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=39393 DF PROTO=TCP SPT=48832 DPT=2376 SEQ=2015705849 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080AC1E3FAD70000000001030307)
2026-11-13T18:39:44.308285-05:00 localhost kernel: [1582046.981011] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=104.131.81.232 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=61311 DF PROTO=TCP SPT=43112 DPT=4243 SEQ=1473226831 ACK=0 WINDOW=64240 RES=0x00 S
show less
Port Scan
🇫🇷
sthoyer.de
2026-11-13 23:09:51
UTC ·
(6 hours ago)
Nov 14 00:09:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.131.81.232 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=52692 DF PROTO=TCP SPT=49930 DPT=2375 WINDOW=64240 RES=0x00 SYN ...
show more
Nov 14 00:09:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.131.81.232 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=52692 DF PROTO=TCP SPT=49930 DPT=2375 WINDOW=64240 RES=0x00 SYN URGP=0
Nov 14 00:09:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.131.81.232 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=18541 DF PROTO=TCP SPT=34668 DPT=2376 WINDOW=64240 RES=0x00 SYN URGP=0
Nov 14 00:09:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.131.81.232 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=58328 DF PROTO=TCP SPT=38778 DPT=6380 WINDOW=64240 RES=0x00 SYN URGP=0
Nov 14 00:09:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.131.81.232 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=45635 DF PROTO=TCP SPT=59084 DPT=4243 WI
...
show less
Port Scan
🇫🇷
Little Iguana
2026-11-13 22:43:32
UTC ·
(7 hours ago)
trying to access non-authorized port
Port Scan
🇺🇸
Phil Schuyler
2026-11-13 00:00:00
UTC ·
(1 day ago)
Repeated probing against public honeypot services: 8 observed events targeting TCP/6379.
Port Scan
