139.196.252.131

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
126 reports
58 reporters ยท latest 7 hours ago
ISP Aliyun Computing Co., LTD
Usage Type Data Center/Web Hosting/Transit
ASN AS37963
Domain Name alibabacloud.com
Country ๐Ÿ‡จ๐Ÿ‡ณ China
City Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 139.196.252.131

This IP address has been reported a total of 126 times from 58 distinct sources. 139.196.252.131 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 44 reports; United States of America with 31 reports; France with 7 reports. The most common categories in these recent reports were: Port Scan 63 times; Brute-Force 37 times; Hacking 22 times; SQL Injection 2 times; Exploited Host 2 times; Other 4 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฎ๐Ÿ‡ณ Mr.Singh
NFT blocked 139.196.252.131 on 20-Oct-2026..
Port Scan Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช Da_tschek
Port scanning
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท zulzeen
[incypit-web] Blocked by SysWarden Firewall [GEO] (Database/Cache Attack)
Hacking Brute-Force
๐Ÿ‡ณ๐Ÿ‡ฑ donarev419
Connection to port 445 with data transfer. Data preview:
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
firewall-block, port(s): 445/tcp
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ HamSammich
Automated sensor: 2 SMB connection/probe attempts over the last 24h (latest 2026-10-16T12:09Z).
Hacking Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ thororen
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Phil Schuyler
Repeated probing against a public Windows honeypot: 3 observed events targeting SMB on TCP/445.
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Jochen Pretli
connection to honeypot
Email Spam Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช D3RP4UL
SMB traffic on port 445
Hacking
๐Ÿ‡บ๐Ÿ‡ธ sumnone
Port probing on unauthorized port 1433
Port Scan Hacking Exploited Host
๐Ÿ‡ณ๐Ÿ‡ฑ StopAbuse
tcp/445
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช KPS
PortscanT
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช HoneyPot-FrPri
1791344637 - 10/07/2026 05:43:57 Host: 139.196.252.131/139.196.252.131 Port: 445 TCP Blocked ...
Port Scan

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ฏ๐Ÿ‡ต 110.1.101.198
๐Ÿ‡บ๐Ÿ‡ธ 216.25.89.105
๐Ÿ‡บ๐Ÿ‡ธ 209.250.5.22
๐Ÿ‡ฌ๐Ÿ‡ง 188.240.59.16
๐Ÿ‡ญ๐Ÿ‡ฐ 165.154.6.75
๐Ÿ‡ง๐Ÿ‡ฉ 118.179.19.18
๐Ÿ‡จ๐Ÿ‡ณ 111.198.53.188
๐Ÿ‡ฌ๐Ÿ‡ง 86.38.187.96
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.26
๐Ÿ‡บ๐Ÿ‡ธ 57.141.20.21
๐Ÿ‡บ๐Ÿ‡ธ 44.234.72.92
๐Ÿ‡บ๐Ÿ‡ธ 43.153.86.78
๐Ÿ‡ซ๐Ÿ‡ฎ 34.88.80.151
๐Ÿ‡ธ๐Ÿ‡ฆ 2.88.216.111
๐Ÿ‡ณ๐Ÿ‡ฑ 192.42.116.18
๐Ÿ‡จ๐Ÿ‡ณ 183.63.125.162
๐Ÿ‡จ๐Ÿ‡ณ 120.246.127.30
๐Ÿ‡ป๐Ÿ‡ณ 116.99.174.150
๐Ÿ‡ฎ๐Ÿ‡ณ 106.213.85.204
๐Ÿ‡ญ๐Ÿ‡ฐ 103.103.245.7