AbuseIPDB » 131.196.111.196
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example previewIP Abuse Reports for 131.196.111.196:
This IP address has been reported a total of 11 times from 9 distinct sources. 131.196.111.196 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 3 reports; United States of America with 3 reports; France with 1 report. The most common categories in these recent reports were: Port Scan 7 times; Hacking 2 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 MPL |
tcp/23 (4 or more attempts)
|
Port Scan | ||
| 🇩🇪 bescared |
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -c23856ef-
|
Port Scan | ||
| 🇫🇷 Petre 21_ip |
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-29 18:15:58 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-28 06:18:16 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | ||
| 🇩🇪 Tsumugi Kotobuki |
|
Port Scan Hacking | ||
| 🇺🇸 quilla |
Botnet infected device observed in honeypot (Vector: TCP)
|
DDoS Attack | ||
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | ||
| 🇨🇭 backslash |
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
|
Bad Web Bot | ||
| Anonymous |
scanning http requests from known botnet
|
Web App Attack |
Showing 1 to 11 of 11 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩