🇳🇱
maxxsense
2026-04-28 02:14:25
(1 month ago)
(CT) IP 131.196.199.187 (BR/Brazil/131.196.199.0-24.bbhost.com.br) found to have 648 connections
DDoS Attack
2026-04-28 02:14:02
(1 month ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇦🇺
Anytech
2026-03-06 02:17:32
(2 months ago)
CrowdSec detected: conn-monitor/flood: DDoS attack from subnet 131.196.0.0/16
Brute-Force
Web App Attack
🇦🇺
Anytech
2026-02-24 00:04:48
(3 months ago)
CrowdSec detected: conn-monitor/flood: DDoS attack from subnet 131.196.0.0/16
Brute-Force
Web App Attack
🇩🇪
alive
2025-12-29 22:46:44
(5 months ago)
Confirmed malicious activity observed via T-Pot honeypot Observed 49 events on port 443 (unknown) fr ...
show more
Confirmed malicious activity observed via T-Pot honeypot Observed 49 events on port 443 (unknown) from 2025-12-29T22:46:44+00:00 to 2025-12-29T23:50:19.071000+00:00. Sample: {"dest_port": 443, "src_ip": "131.196.199.187", "src_port": 25565}
show less
Port Scan
🇩🇪
403veli
2025-12-29 22:31:04
(5 months ago)
Confirmed malicious activity observed via T-Pot honeypot Observed 22 events on port 443 (unknown) fr ...
show more
Confirmed malicious activity observed via T-Pot honeypot Observed 22 events on port 443 (unknown) from 2025-12-29T22:31:04+00:00 to 2025-12-29T22:41:09+00:00. Sample: {"src_ip": "131.196.199.187", "dest_port": 443, "src_port": 25565}
show less
Port Scan
2025-12-10 11:02:00
(5 months ago)
Linux.Kernel.TCP.SACK.Panic.DoS
Hacking
🇺🇸
anon333
2025-08-03 04:33:59
(10 months ago)
Hacker syslog review 1754195639
Hacking
🇬🇧
essinghigh
2025-08-03 01:38:11
(10 months ago)
IPS Detection: 131.196.199.187 -> DPT: 80
Port Scan
🇳🇱
Study Bitcoin 🤗
2025-04-19 00:52:43
(1 year ago)
60 port probes: tcp/40574, tcp/2925 (firewall redundancy), tcp/4710, tcp/42305, tcp/47926, tcp/9149, ...
show more
60 port probes: tcp/40574, tcp/2925 (firewall redundancy), tcp/4710, tcp/42305, tcp/47926, tcp/9149, tcp/48985, tcp/16916, tcp/9304, tcp/22993, tcp/28092, tcp/19312, tcp/7591, tcp/28159, tcp/47722, tcp/46992, tcp/18409, tcp/47866, tcp/39674, tcp/17011, tcp/22610, tcp/42053, tcp/41587, tcp/46164, tcp/27612, tcp/11984, tcp/48716, tcp/37330, tcp/26609, tcp/28029, tcp/23272, tcp/22785, tcp/40419, tcp/29931, tcp/34070, tcp/18143, tcp/38012, tcp/25132, tcp/27250, tcp/22407, tcp/2130 (swc-xds), tcp/24739, tcp/37901, tcp/37979, tcp/30003, tcp/9257, tcp/5326, tcp/32622, tcp/30754, tcp/35144, tcp/32447, tcp/39242, tcp/36386, tcp/44725, tcp/34109, tcp/1299, tcp/40310, tcp/13338, tcp/5591, tcp/29104
[srv133]
show less
DDoS Attack
Port Scan
🇨🇭
ScanThe.Net
2025-04-19 00:47:42
(1 year ago)
ID: 1912203585 | PORT: 59843 | https://131-196-199-187.scanthe.net
Port Scan
🇳🇱
Study Bitcoin 🤗
2025-04-19 00:36:43
(1 year ago)
133 port probes: tcp/24627, tcp/8861, tcp/18630, tcp/23272, tcp/28442, tcp/471 (mondex), tcp/10780, ...
show more
133 port probes: tcp/24627, tcp/8861, tcp/18630, tcp/23272, tcp/28442, tcp/471 (mondex), tcp/10780, tcp/35614, tcp/17519, tcp/11451, tcp/27086, tcp/18071, tcp/10606, tcp/42929, tcp/44988, tcp/8907, tcp/27270, tcp/34129, tcp/7205, tcp/44397, tcp/16899, tcp/32366, tcp/44131, tcp/41352, tcp/38653, tcp/31217, tcp/43713, tcp/44938, tcp/13269, tcp/31964, tcp/7197, tcp/16625, tcp/31349, tcp/40608, tcp/27875, tcp/32415, tcp/22595, tcp/34952, tcp/48338, tcp/47701, tcp/10722, tcp/19530, tcp/25970, tcp/4493, tcp/8604, tcp/32018, tcp/37160, tcp/31573, tcp/47340, tcp/9611, tcp/48584, tcp/29288, tcp/45895, tcp/6586, tcp/46722, tcp/19117, tcp/41124, tcp/36463, tcp/23507, tcp/22731, tcp/30133, tcp/39939, tcp/43084, tcp/41305, tcp/40751, tcp/21472, tcp/28159, tcp/26219, tcp/14359, tcp/47158, tcp/30310, tcp/16688, tcp/45184, tcp/41395, tcp/7432, tcp/21912, tcp/20930, tcp/48422, tcp/25473, tcp/21149, tcp/23207, tcp/31287,
[srv133]
show less
DDoS Attack
Port Scan
🇨🇭
ScanThe.Net
2025-04-19 00:30:54
(1 year ago)
ID: 1912063410 | PORT: 65208 | https://131-196-199-187.scanthe.net
Port Scan
🇩🇪
sefinek.net
2025-04-19 00:25:36
(1 year ago)
Blocked by UFW on DE01 [443/tcp]
Source port: 60790
TTL: 46
Packet length: 64
TOS: 0x08
This report ...
show more
Blocked by UFW on DE01 [443/tcp]
Source port: 60790
TTL: 46
Packet length: 64
TOS: 0x08
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-04-19 00:24:49
(1 year ago)
87 port probes: tcp/39957, tcp/22675, tcp/30016, tcp/2957 (jamct5), tcp/12092, tcp/12705, tcp/36194, ...
show more
87 port probes: tcp/39957, tcp/22675, tcp/30016, tcp/2957 (jamct5), tcp/12092, tcp/12705, tcp/36194, tcp/34396, tcp/14292, tcp/5452, tcp/8347, tcp/22980, tcp/12841, tcp/43160, tcp/43082, tcp/16565, tcp/8874, tcp/31822, tcp/15131, tcp/36501, tcp/3887, tcp/5310 (outlaws), tcp/12746, tcp/24938, tcp/13929, tcp/26172, tcp/20626, tcp/27964, tcp/35656, tcp/9694, tcp/27006, tcp/47323, tcp/3283 (net assistant), tcp/33553, tcp/31227, tcp/33175, tcp/11696, tcp/39371, tcp/46970, tcp/48566, tcp/240, tcp/3700, tcp/35127, tcp/41027, tcp/4090, tcp/15829, tcp/38463, tcp/36477, tcp/42388, tcp/4454 (nss agent manager), tcp/5462 (ttl publisher), tcp/44896, tcp/47410, tcp/5394, tcp/17328, tcp/24197, tcp/31423, tcp/14835, tcp/14156, tcp/4898, tcp/6435, tcp/14864, tcp/748 (russell info sci calendar manager), tcp/5091, tcp/46123, tcp/5036, tcp/29626, tcp/22067, tcp/19116, tcp/22227, tcp/31679, tcp/19723, tcp/21520, tcp/12561,
[srv133]
show less
DDoS Attack
Port Scan