JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

131.161.66.220

Recent Activity

Abuse confidence score ?

4% Caution

22 reports

15 reporters · latest 59 minutes ago

ISP	IOL REDE DE PROVEDORES LTDA
Usage Type	Fixed Line ISP
ASN	AS264369
Domain Name	iolprovedor.com.br
Country	🇧🇷 Brazil
City	Cipo, Bahia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 131.161.66.220

Export CSV

This IP address has been reported a total of 22 times from 15 distinct sources. 131.161.66.220 was first reported on May 16th 2024, and the most recent report was 59 minutes ago. In the last 60 days, the only reporter location was: United Kingdom of Great Britain and Northern Ireland with 1 report. The only category in these recent reports was: Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Axel	2026-10-12 22:26:55 (59 minutes ago)	Blocked by UFW on BGPGB [null/icmp] \| SPT: null \| TTL: 46 \| LEN: 120 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on BGPGB [null/icmp] \| SPT: null \| TTL: 46 \| LEN: 120 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-08-10 20:03:53 (2 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-08-10 16:23:43 (2 months ago)	Blocked by UFW (TCP on 23) Source port: 54015 TTL: 54 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 54015 TTL: 54 Packet length: 60 TOS: 0x00 This report (for 131.161.66.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇩🇪 EGP Abuse Dept	2026-08-02 03:28:01 (2 months ago)	Scraping webshop URLs (www.ngs.nl), likely botnet drone	Bad Web Bot Exploited Host
🇮🇩 hermawan	2026-06-23 10:55:40 (3 months ago)	[Tue Jun 23 17:55:36.523360 2026] [security2:error] [pid 404168:tid 140408932689600] [client 131.161 ... show more [Tue Jun 23 17:55:36.523360 2026] [security2:error] [pid 404168:tid 140408932689600] [client 131.161.66.220:38717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "ajpmKJPW7TOqzPzqXl5oOAACQhg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[404193] [NHw9menOyq0] [ajpmKJPW7TOqzPzqXl5oOAACQhg] keep_alive=[1] [2026-06-23 17 ... show less	Email Spam Hacking
Anonymous	2026-06-12 08:04:12 (4 months ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇺🇸 xmission.com	2026-06-12 04:25:45 (4 months ago)	Blocked by UFW (TCP on 23) Source port: 25709 TTL: 53 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 25709 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 131.161.66.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-06-12 02:44:56 (4 months ago)	Blocked by UFW (TCP on 23) Source port: 24997 TTL: 53 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 24997 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 131.161.66.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-06-12 02:32:25 (4 months ago)	Port Scan Attack proto:TCP src:55713 dst:23	Port Scan
🇺🇸 Axel	2026-06-12 02:09:49 (4 months ago)	Blocked by UFW on MVI [23/tcp] \| SPT: 9287 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com ... show more Blocked by UFW on MVI [23/tcp] \| SPT: 9287 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
Anonymous	2026-05-04 21:52:05 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 EGP Abuse Dept	2026-04-03 08:52:02 (6 months ago)	Scraping webshop URLs (www.badgehouder.nl), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-03-10 19:36:32 (7 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-01-14 21:53:30 (8 months ago)	Blocked by UFW (TCP on 60023) Source port: 16444 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 60023) Source port: 16444 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 131.161.66.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-11-24 20:58:12 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2400:cb00:555:1000:4e73:368e:46ce:6ca5

🇲🇽 206.135.4.130

🇦🇷 186.177.195.224

🇰🇷 175.202.194.168

🇨🇦 138.197.158.147

🇨🇳 117.185.15.67

🇬🇧 86.191.1.63

🇳🇱 45.115.26.113

🇨🇳 120.221.100.76

🇷🇺 84.51.192.92

🇧🇬 79.124.62.126

🇱🇹 62.60.134.210

🇨🇳 60.16.204.52

🇳🇱 45.148.10.183

🇳🇱 35.204.10.180

🇮🇪 34.245.50.59

🇰🇷 20.194.96.223

🇻🇳 14.187.90.56

🇬🇧 2400:cb00:21:1000:fc42:f1fb:24f7:e154

🇭🇰 223.17.1.118