JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

201.170.63.131

Neutral Activity

Abuse confidence score ?

0% Low Risk

19 reports

19 reporters · latest 10 months ago

ISP	Telefonos del Noroeste, S.A. de C.V.
Usage Type	Fixed Line ISP
ASN	AS8151
Hostname(s)	201.170.63.131.dsl.dyn.telnor.net
Domain Name	telnor.com
Country	🇲🇽 Mexico
City	Tijuana, Baja California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

201.170.63.131 has been reported 19 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 201.170.63.131

This IP address has been reported a total of 19 times from 19 distinct sources. 201.170.63.131 was first reported on January 12th 2023, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-11-19 22:43:33 (10 months ago)	scanning http requests from known botnet	Web App Attack
🇯🇵 zwh	2023-01-27 03:14:15 (3 years ago)	SMTP Brute-Force	Brute-Force
🇩🇪 Ba-Yu	2023-01-23 12:40:10 (3 years ago)	SMTP SASL brute-force attempt	Brute-Force Exploited Host
🇸🇮 basing	2023-01-23 02:26:31 (3 years ago)	2023-01-22 22:26:31 bs5 SASL PLAIN auth failed: rhost=201.170.63.131...	Brute-Force
🇧🇷 SvrAdmin	2023-01-22 03:59:06 (3 years ago)	[STX CWP] (smtpauth) Failed SMTP AUTH login from 201.170.63.131 (MX/Mexico/201.170.63.131.dsl.dyn.te ... show more [STX CWP] (smtpauth) Failed SMTP AUTH login from 201.170.63.131 (MX/Mexico/201.170.63.131.dsl.dyn.telnor.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jan 22 00:57:49 cwp01 postfix/smtpd[27219]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Jan 22 00:58:15 cwp01 postfix/smtpd[27219]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Jan 22 00:58:30 cwp01 postfix/smtpd[27219]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Jan 22 00:58:48 cwp01 postfix/smtpd[27219]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Jan 22 00:59:04 cwp01 postfix/smtpd[27219]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2023-01-22 02:50:05 (3 years ago)	Jan 22 03:50:04 mx1 postfix/submission/smtpd[499604]: NOQUEUE: reject: RCPT from 201.170.63.131.dsl. ... show more Jan 22 03:50:04 mx1 postfix/submission/smtpd[499604]: NOQUEUE: reject: RCPT from 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: 554 5.7.1 <201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]>: Client host rejected: Access denied; from=<nouth@mx1.***.de> to=<[email protected]> proto=ESMTP helo=<localhost> show less	Email Spam Brute-Force
Anonymous	2023-01-22 02:08:12 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 201.170.63.131 (MX/Mexico/201.170.63.131.dsl.dyn.telnor.net): ... show more (smtpauth) Failed SMTP AUTH login from 201.170.63.131 (MX/Mexico/201.170.63.131.dsl.dyn.telnor.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH show less	Brute-Force
🇺🇸 imgzit	2023-01-21 21:48:48 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 201.170.63.131 (MX/Mexico/201.170.63.131.dsl.dyn.telnor.net): ... show more (smtpauth) Failed SMTP AUTH login from 201.170.63.131 (MX/Mexico/201.170.63.131.dsl.dyn.telnor.net): ; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-01-21 13:48:43 plain authenticator failed for 201.170.63.131.dsl.dyn.telnor.net [201.170.63.131]: 535 Incorrect authentication data (set_id=postmaster) show less	Brute-Force
🇺🇸 scatterzoom	2023-01-20 21:36:37 (3 years ago)	Jan 20 21:35:57 rice postfix/submission/smtpd[839503]: NOQUEUE: reject: RCPT from 201.170.63.131.dsl ... show more Jan 20 21:35:57 rice postfix/submission/smtpd[839503]: NOQUEUE: reject: RCPT from 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: 554 5.7.1 <201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Jan 20 21:36:04 rice postfix/submission/smtpd[839503]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Jan 20 21:36:17 rice postfix/submission/smtpd[839503]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Jan 20 21:36:36 rice postfix/submission/smtpd[839503]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Connection lost to authentication server Jan 20 21:36:36 rice postfix/submission/smtpd[839503]: lost connection after AUTH from 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131] ... show less	Email Spam Brute-Force
🇳🇱 Godert Jan van Manen	2023-01-20 08:12:29 (3 years ago)	Jan 20 09:11:46 odin postfix/submission/smtpd[8190]: warning: 201.170.63.131.dsl.dyn.telnor.net[201. ... show more Jan 20 09:11:46 odin postfix/submission/smtpd[8190]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Jan 20 09:11:58 odin postfix/submission/smtpd[8212]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: Jan 20 09:12:14 odin postfix/submission/smtpd[8190]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL PLAIN authentication failed: show less	Brute-Force
🇺🇸 Rocky Mountain Bioengineering Symposium	2023-01-20 05:52:06 (3 years ago)	Jan 19 22:52:06 KLAS-A postfix/submission/smtpd[95612]: NOQUEUE: reject: RCPT from 201.170.63.131.ds ... show more Jan 19 22:52:06 KLAS-A postfix/submission/smtpd[95612]: NOQUEUE: reject: RCPT from 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: 554 5.7.1 <201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> ... show less	Email Spam
🇺🇸 wteiken	2023-01-17 11:35:23 (3 years ago)	Jan 17 06:34:35 rocinante postfix/smtpd[443083]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170. ... show more Jan 17 06:34:35 rocinante postfix/smtpd[443083]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentication failure Jan 17 06:34:52 rocinante postfix/smtpd[443083]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentication failure Jan 17 06:34:55 rocinante postfix/smtpd[443083]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentication failure Jan 17 06:35:05 rocinante postfix/smtpd[443083]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentication failure Jan 17 06:35:12 rocinante postfix/smtpd[443083]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentication failure Jan 17 06:35:22 rocinante postfix/smtpd[443083]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentic ... show less	Brute-Force
🇩🇰 Jan Hessner	2023-01-16 18:58:17 (3 years ago)	Jan 16 19:57:40 mail2 postfix/submission/smtpd\[44295\]: warning: 201.170.63.131.dsl.dyn.telnor.net\ ... show more Jan 16 19:57:40 mail2 postfix/submission/smtpd\[44295\]: warning: 201.170.63.131.dsl.dyn.telnor.net\[201.170.63.131\]: SASL PLAIN authentication failed: Jan 16 19:58:01 mail2 postfix/submission/smtpd\[44295\]: warning: 201.170.63.131.dsl.dyn.telnor.net\[201.170.63.131\]: SASL PLAIN authentication failed: Jan 16 19:58:16 mail2 postfix/submission/smtpd\[44295\]: warning: 201.170.63.131.dsl.dyn.telnor.net\[201.170.63.131\]: SASL PLAIN authentication failed: ... show less	Email Spam Brute-Force
🇩🇪 Inter-Technics.net	2023-01-16 15:50:48 (3 years ago)	Jan 16 16:49:27 inter-technics postfix/smtpd[2841656]: warning: 201.170.63.131.dsl.dyn.telnor.net[20 ... show more Jan 16 16:49:27 inter-technics postfix/smtpd[2841656]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentication failure Jan 16 16:50:10 inter-technics postfix/smtpd[2841908]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentication failure Jan 16 16:50:24 inter-technics postfix/smtpd[2841656]: warning: 201.170.63.131.dsl.dyn.telnor.net[201.170.63.131]: SASL CRAM-MD5 authentication failed: authentication failure ... show less	Brute-Force
🇦🇺 Bay13	2023-01-16 07:55:44 (3 years ago)	f2b mail	Email Spam Spoofing

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 176.44.203.87

🇩🇪 36.255.97.194

🇵🇪 200.107.163.195

🇲🇦 196.92.7.249

🇳🇱 185.136.15.77

🇵🇰 182.191.149.130

🇸🇬 172.104.33.43

🇩🇪 167.94.146.51

🇭🇰 154.83.15.101

🇮🇩 124.40.252.3

🇰🇷 112.156.166.41

🇧🇩 103.152.147.116

🇸🇬 43.163.6.201

🇺🇸 35.87.186.117

🇻🇳 210.245.95.13

🇺🇸 195.184.76.128

🇧🇬 185.255.215.51

🇧🇷 177.92.75.122

🇪🇬 154.183.131.184

🇺🇸 147.90.234.19