128.2.204.136

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
97 reports
66 reporters · latest 5 hours ago
ISP
Carnegie Mellon University
Usage Type
University/College/School
ASN
AS9
Hostname(s)
crawl-b324-p07.lti.cs.cmu.edu
Domain Name
cmu.edu
Country
🇺🇸 United States of America
City
Pittsburgh, Pennsylvania
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
97 from 66 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 29 🇫🇷 France 18 🇩🇪 Germany 17
Most common categories Port Scan 46 Web App Attack 26 Brute-Force 21 Bad Web Bot 17 Hacking 15
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Hugopvigo
"2026-11-07 21:36:18+00:00 128.2.204.136 IP con score alto (100) detectada en el log."
Brute-Force SSH
🇩🇪 RazorLabs.dev
Automated report from fail2ban: unsolicited TCP connection attempt to port 23/2323 (telnet) on a host running no telnet service, dropped by host firewall.
Port Scan Brute-Force IoT Targeted
🇺🇸 omc
Unauthorized file [PP].
Bad Web Bot
🇫🇷 uthul
T-Pot honeypot: 6 hits on ports [23] (automated)
Port Scan Brute-Force SSH
🇺🇸 MPL
tcp/23
Port Scan
🇩🇪 cloudmax
Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, or hacking attempt
Bad Web Bot
🇫🇷 service Informatique
GET /robots.txt
Web App Attack
🇩🇪 Hugopvigo
"2026-11-06 21:34:25+00:00 128.2.204.136 IP con score alto (100) detectada en el log."
Brute-Force SSH
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇫🇷 bigorre.org
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇫🇷 MatStef132
MatShield L7: blocked on a protected site (suspicious behaviour)
DDoS Attack
🇵🇱 Kitki30.com
Entered Telnet Tarpit (endlessh, server 1). Log: 2026-11-06T14:38:36.973Z ACCEPT host=::ffff:128.2.204.136 port=34866 fd=24 n=35/4096
IoT Targeted Port Scan Brute-Force
🇫🇷 Hiigara
connection attempt : 128.2.204.136 on port : tcp/23 (Telnet)
Port Scan
🇩🇪 LRob
DDoS Attack Bad Web Bot
🇦🇺 dyln
Dyls honeypot brute-force: Telnet (8 total hits)
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 190.57.219.232
🇺🇸 172.236.96.130
🇺🇸 172.104.11.51
🇺🇸 172.98.33.140
🇵🇱 172.64.200.77
🇺🇸 142.173.161.240
🇮🇩 103.187.165.26
🇺🇸 45.146.55.138
🇺🇸 45.131.193.61
🇨🇳 14.103.107.29
🇪🇹 196.191.5.70
🇩🇪 193.26.158.15
🇳🇱 190.2.148.232
🇳🇱 185.242.226.58
🇨🇦 184.146.221.190
🇧🇷 170.238.198.172
🇺🇸 159.117.183.118
🇫🇮 130.49.8.134
🇦🇹 89.144.218.56
🇬🇧 86.153.200.197
feedback