Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 196.202.111.134
This IP address has been reported a total of
70
times from
64 distinct
sources.
196.202.111.134 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 17
reports;
United States of America
with 14
reports;
France
with 4
reports.
The most common categories in these recent reports were:
Brute-Force
56
times;
SSH
25
times;
Port Scan
18
times;
Hacking
6
times;
Email Spam
3
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Suspicious activity detected from IP 196.202.111.134 based on mailserver logs.
Sample logs:
2026-09- ...
show moreSuspicious activity detected from IP 196.202.111.134 based on mailserver logs.
Sample logs:
2026-09-27 23:18:15,159 INFO [qtp2102534528-545139] [ip=172.16.0.182;oip=196.202.111.134;oport=41478;oproto=smtp;port=46016;soapId=36666084;] soap - AuthRequest elapsed=0
2026-09-27 23:25:13,714 INFO [qtp2102534528-545148] [name=**@*.id;ip=172.16.0.182;oip=196.202.111.134;oport=54499;oproto=smtp;port=60006;soapId=36666092;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate: invalid credentials
2026-09-27 23:25:13,714 INFO [qtp2102534528-545148] [name=**@*.id;ip=172.16.0.182;oip=196.202.111.134;oport=54499;oproto=smtp;port=60006;soapId=36666092;] soap - AuthRequest elapsed=90
2026-09-27 23:55:03,489 INFO [qtp2102534528-545299] [] misc - Access from IP 196.202.111.134 suspended, for repeated failed login.
2026-09-27 23:57:04,819 INFO [qtp2102534528-545305] [] misc - Access from IP 196.202.111.134 suspended, for repeated failed login.
Re
show less
This address opens SMTP sessions to our mail server, asks whether authentication is offered, and han ...
show moreThis address opens SMTP sessions to our mail server, asks whether authentication is offered, and hangs up. This is reconnaissance for credential attacks on mail accounts, seen from many addresses at once; blocked. Please check what runs on this address. | 2026-09-27 12:43 UTC
show less
