JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.131.201.2

201.131.201.2 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 33%: ?

33%

ISP	Computadoras y Servicios Especiales SA de CV
Usage Type	Fixed Line ISP
ASN	AS28387
Hostname(s)	002.internetcomunicate.mx
Domain Name	blacom.com.mx
Country	🇲🇽 Mexico
City	Huauchinango, Puebla

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.131.201.2

Whois 201.131.201.2

IP Abuse Reports for 201.131.201.2:

This IP address has been reported a total of 17 times from 15 distinct sources. 201.131.201.2 was first reported on January 28th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-09 04:27:21 (4 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
🇨🇦 polycoda	2026-05-30 11:37:45 (2 weeks ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇬🇧 PeravixGroup	2026-05-10 22:40:33 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇳🇱 VMHeaven.io	2026-05-10 21:55:08 (1 month ago)	Blocked by UFW [23/tcp] Source port: 37139 TTL: 38 Packet length: 60	Port Scan Hacking Brute-Force
🇬🇧 PeravixGroup	2026-05-09 14:28:25 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇨🇳 ThreatBook.io	2026-05-05 00:23:47 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/201.131.201.2	SSH
🇩🇪 Da_tschek	2026-05-03 19:08:25 (1 month ago)	Port scanning	Port Scan Hacking
🇺🇸 xmission.com	2026-05-03 10:14:29 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 10990 TTL: 49 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 10990 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 201.131.201.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-05-03 09:02:48 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇩🇪 filstal.org	2026-05-01 08:29:24 (1 month ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (compatible; MSIE 7.0; Windows 98; Trident/3.1)). Mass ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (compatible; MSIE 7.0; Windows 98; Trident/3.1)). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2026-04-28 23:23:42 (1 month ago)	webserver:80 [29/Apr/2026] "GET http://ashunledevles.eu.org/setcookie_vidpage-rmy-ou_hu_de.html HTT ... show more webserver:80 [29/Apr/2026] "GET http://ashunledevles.eu.org/setcookie_vidpage-rmy-ou_hu_de.html HTTP/1.1" 302 465 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-08 03:49:39 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 201.131.201.2 (002.internetcomunicate.mx): 1 in ... show more (mod_security) mod_security (id:217210) triggered by 201.131.201.2 (002.internetcomunicate.mx): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 23:49:33.582013 2026] [security2:error] [pid 2622835:tid 2622835] [client 201.131.201.2:49720] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|moon7exactlys.top\|F\|4"] [data "GET http://moon7exactlys.top HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "moon7exactlys.top"] [uri "/"] [unique_id "adXQTRf28tLc0yAKeWslowAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-03-14 21:41:44 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.432 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.432 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇺🇸 matt	2026-03-02 22:42:00 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇸🇬 mypatricks	2026-03-02 21:55:05 (3 months ago)	201.131.201.2 \| Port: 13420 \| DNS: 002.internetcomunicate.mx 2026-03-03T05:55:04+08:00 America/Mexic ... show more 201.131.201.2 \| Port: 13420 \| DNS: 002.internetcomunicate.mx 2026-03-03T05:55:04+08:00 America/Mexico_City \| IPs Spam list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /account/create/?b78115dc3625089def8c80ca25dbdfd2=1772341012 \| Ref: https://xxxxxx/fondant-3d-superhero-stacked-cake/?cc49ffc8aa4ef58=SGD&code=SGD \| Country: MX/Mexico/−06:00 IP City: Huejotzingo macOS 9d63a4adcc87c007-ATL/Atlanta, GA, United States 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.104.137.55

🇹🇼 198.235.24.112

🇺🇸 162.216.149.92

🇺🇸 147.90.235.40

🇨🇳 122.51.100.190

🇬🇧 118.193.65.212

🇻🇳 103.228.36.70

🇻🇳 103.167.89.222

🇮🇳 103.21.79.242

🇬🇧 91.230.225.41

🇬🇪 91.151.137.33

🇹🇼 49.158.200.4

🇺🇸 2600:1f16:138c:c400:e508:f93b:79fd:e423

🇺🇸 162.216.149.20

🇵🇰 119.152.228.8

🇫🇷 79.143.188.82

🇳🇱 45.148.10.157

🇬🇧 35.203.211.175

🇮🇳 13.205.160.37

🇬🇧 209.38.166.81