AbuseIPDB » 131.153.56.198

131.153.56.198
Recent Activity This IP has received recent abuse reports, which causes the score to increase.
86 reports found in our database
100% Critical
Abuse confidence score ?
ISP
CWIE LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
Hostname(s)
mail.1855arex.pro
Domain Name
cwie.net
Country
🇺🇸 United States of America
City
Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 131.153.56.198:

This IP address has been reported a total of 86 times from 76 distinct sources. 131.153.56.198 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 21 reports; United States of America with 19 reports; France with 9 reports. The most common categories in these recent reports were: SSH 79 times; Brute-Force 76 times; Port Scan 3 times; Hacking 2 times; Exploited Host 1 time.

Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 ACE-INFORMATIQUE.NC
Brute-Force + SSH (honeypot) blocked by Fail2ban
Brute-Force SSH
🇺🇸 seraph.ws
SSH honeypot contact — automated credential stuffing attempt
Brute-Force SSH
🇩🇪 nicosqc
Invalid user bitcoin from 131.153.56.198 port 52084
Brute-Force SSH
🇨🇳 pengpeng
monitor: on VM-0-7-ubuntu | port: 22 | ttl: 250 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH
🇩🇪 vcis.de
SSH brute force attack detected from [131.153.56.198]
SSH Brute-Force
🇫🇷 GoXLd
Brute-Force SSH
Anonymous
Brute-Force SSH
🇦🇺 Mashpot
2026-09-12T12:20+00:00 ssh: Several authentication failures from 131.153.56.198
Brute-Force SSH
Anonymous
Brute-Force Exploited Host
🇨🇳 さいとうあすか
Sep 12 20:18:07 pbs sshd[2989380]: Connection closed by 131.153.56.198 port 38302 [preauth] ...
Brute-Force SSH
🇸🇪 Random
Fail2Ban sshd jail triggered for 131.153.56.198
Brute-Force SSH
🇫🇷 Vincent6785_0
Brute-Force SSH
🇵🇹 WebTejo
Brute-Force SSH
🇩🇪 MatzeAusL
Brute-Force SSH
🇳🇱 donarev419
Brute-Force SSH

Showing 1 to 15 of 86 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 175.139.151.249
🇦🇷 170.155.150.129
🇵🇭 165.154.58.251
🇨🇳 125.77.73.145
🇺🇸 68.225.62.250
🇳🇱 45.154.98.57
🇺🇸 45.132.227.99
🇰🇪 41.215.133.245
🇺🇸 35.192.27.145
🇧🇷 201.149.125.197
🇭🇰 199.45.155.48
🇳🇱 195.178.110.217
🇳🇱 192.153.57.121
🇦🇷 181.25.205.49
🇩🇪 167.94.145.29
🇺🇸 165.154.202.254
🇳🇬 152.32.141.9
🇸🇬 136.85.36.4
🇺🇸 71.251.9.182
🇬🇧 35.203.210.215