131.196.14.124

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
71% Elevated
387 reports
66 reporters · latest 2 days ago
ISP
NEGOCIOS Y TELEFONIA NEDETEL S.A.
Usage Type
Fixed Line ISP
ASN
AS52468
Hostname(s)
124-14-196-131.ufinetlatam.net.ec
Domain Name
nedetel.net
Country
🇪🇨 Ecuador
City
Guayaquil, Guayas
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
387 from 66 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 5 🇨🇿 Czechia 3
Most common categories Brute-Force 10 Hacking 8 Web App Attack 7 Port Scan 7 Bad Web Bot 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 LRob
DDoS Attack Bad Web Bot
🇺🇸 MPL
tcp ports: 23,22 (12 or more attempts)
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇮🇩 IndoAbuse
WordPress brute-force attack detected on wp-login.php / xmlrpc.php. IP automatically banned.
Brute-Force Web App Attack
🇪🇸 Mugen
Unauthorized VPN login attempts
Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 131.196.14.124 2026-11-02T02:09:26+0100 vpn Access-Reject station: 131.196.14.124
Brute-Force Web App Attack
🇫🇷 solution.it
[Sun Nov 01 21:19:14.546110 2026] [php:error] [pid 1666752:tid 1666752] [client 131.196.14.124:42368] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
Web App Attack
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:41272 dst:23
Port Scan
🇮🇹 RaffOne
SSH - Attempt to login using invalid or illegal credential
Brute-Force SSH
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇺🇸 IndigoRidge
Hacking
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP
2026-10-16 15:20:42 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇩🇪 D3vNu11
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Ecuador 1x -> Target Country: Germany SSH
Brute-Force SSH
🇲🇹 Malta
131.196.14.124 - - [16/Oct/2026:15:04:36 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt
Hacking Web App Attack Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 87.58.199.45
🇺🇸 216.25.90.111
🇺🇸 195.63.11.13
🇧🇷 170.244.39.45
🇬🇧 149.248.76.115
🇺🇸 147.185.132.70
🇺🇸 147.185.132.61
🇳🇱 109.160.32.109
🇷🇴 2.57.121.112
🇨🇳 203.189.221.17
🇧🇷 200.216.172.182
🇺🇸 199.165.159.91
🇳🇱 193.47.62.96
🇧🇷 170.239.96.82
🇨🇳 124.174.39.136
🇺🇸 107.170.19.71
🇩🇪 69.5.169.156
🇳🇱 64.205.72.107
🇺🇸 52.186.169.85
🇺🇸 18.227.107.145
feedback