This IP address has been reported a total of
62
times from
35 distinct
sources.
131.196.246.235 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
ICS Labs identified 131.196.246.235 as a malicious indicator from threat intelligence.
DDoS Attack
Port Scan
Hacking
Brute-Force
Exploited Host
Anonymous
Jul 7 20:28:33 www sshd\[16703\]: Invalid user [email protected] from 131.196.2 ...
show moreJul 7 20:28:33 www sshd\[16703\]: Invalid user [email protected] from 131.196.246.235
Jul 7 20:28:34 www sshd\[16707\]: Invalid user gav.iorecords from 131.196.246.235
...
show less
Suspicious activity detected from IP 131.196.246.235 based on mailserver logs.
Sample logs:
2026-06- ...
show moreSuspicious activity detected from IP 131.196.246.235 based on mailserver logs.
Sample logs:
2026-06-24 07:31:27,452 INFO [qtp2102534528-104052] [ip=172.16.0.182;oip=131.196.246.235;oport=52219;oproto=smtp;port=33392;soapId=1e117e44;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-06-24 07:31:27,452 INFO [qtp2102534528-104052] [ip=172.16.0.182;oip=131.196.246.235;oport=52219;oproto=smtp;port=33392;soapId=1e117e44;] soap - AuthRequest elapsed=1
2026-06-24 07:34:40,177 INFO [qtp2102534528-104107] [ip=172.16.0.182;oip=131.196.246.235;oport=51064;oproto=smtp;port=45262;soapId=1e117e52;] account - Error occurred during authentication: authentication failed for [**]. Reason: account not found.
2026-06-24 07:34:40,177 INFO [qtp2102534528-104107] [ip=172.16.0.182;oip=131.196.246.235;oport=51064;oproto=smtp;port=45262;soapId=1e117e52;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-06-24 07:34:40,177 INFO [qtp21
show less
(sshd) Failed SSH login from 131.196.246.235 (MX/Mexico/mail.cliente.quattrocom.mx): 5 in the last 3 ...
show more(sshd) Failed SSH login from 131.196.246.235 (MX/Mexico/mail.cliente.quattrocom.mx): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 4 13:20:00 diana sshd[172571]: Invalid user [email protected] from 131.196.246.235 port 50266
Jun 4 13:20:02 diana sshd[172953]: Invalid user jocemar.br from 131.196.246.235 port 50395
Jun 4 13:20:04 diana sshd[173250]: Invalid user oesteemdesenvolvimento from 131.196.246.235 port 50500
Jun 4 13:20:04 diana sshd[173274]: Invalid user [email protected] from 131.196.246.235 port 50549
Jun 4 13:20:06 diana sshd[173301]: Invalid user jocemar.br from 131.196.246.235 port 50664
show less
(smtpauth) Failed SMTP AUTH login from 131.196.246.235 (MX/Mexico/mail.cliente.quattrocom.mx): 5 in ...
show more(smtpauth) Failed SMTP AUTH login from 131.196.246.235 (MX/Mexico/mail.cliente.quattrocom.mx): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-05-30 13:20:13 SMTP call from [131.196.246.235]:63426 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?\t?", NULL)
2026-05-30 13:20:15 dovecot_plain authenticator failed for H=(KAMALEON) [131.196.246.235]:62814: 535 Incorrect authentication data
2026-05-30 13:20:23 SMTP call from [131.196.246.235]:63983 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?\t?", NULL)
2026-05-30 13:20:30 dovecot_plain authenticator failed for H=(KAMALEON) [131.196.246.235]:63434: 535 Incorrect authentication data
2026-05-30 13:21:36 dovecot_plain authenticator failed for H=(KAMALEON) [131.196.246.235]:54967: 535 Incorrect authentication data ([email protected])
show less
Real-time Intercept: SMTP attack. Reference: 2026-05-27 20:23:28.8535 Login failure: 131.196.246.235 ...
show moreReal-time Intercept: SMTP attack. Reference: 2026-05-27 20:23:28.8535 Login failure: 131.196.246.235 SMTP 2
show less
Brute-Force
Email Spam
Anonymous
May 15 03:43:54 kes sshd[2560763]: Failed password for [redacted] from 131.196.246.235 port 57325 ss ...
show moreMay 15 03:43:54 kes sshd[2560763]: Failed password for [redacted] from 131.196.246.235 port 57325 ssh2
May 15 03:43:56 kes sshd[2560770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.196.246.235 user=[redacted]
May 15 03:43:58 kes sshd[2560770]: Failed password for [redacted] from 131.196.246.235 port 57693 ssh2
May 15 03:44:00 kes sshd[2560778]: Invalid user [redacted] from 131.196.246.235 port 58475
May 15 03:44:00 kes sshd[2560778]: Failed password for [redacted] from 131.196.246.235 port 58475 ssh2
...
show less