JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

201.202.13.231

Recent Activity

Abuse confidence score ?

4% Caution

18 reports

17 reporters · latest 3 days ago

ISP	EL ROBLE
Usage Type	Fixed Line ISP
ASN	AS11830
Domain Name	ice.go.cr
Country	🇨🇷 Costa Rica
City	San Isidro, San Jose

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 201.202.13.231

Export CSV

This IP address has been reported a total of 18 times from 17 distinct sources. 201.202.13.231 was first reported on May 10th 2023, and the most recent report was 3 days ago. In the last 60 days, the only reporter location was: United States of America with 1 report. The most common categories in these recent reports were: Bad Web Bot 1 time; Brute-Force 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-02 04:35:32 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 201.202.13.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 201.202.13.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:35:25.318890 2026] [security2:error] [pid 1346:tid 1421] [client 201.202.13.231:47960] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|prominentregroup.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "prominentregroup.com"] [uri "/"] [unique_id "ar80jdB2PAZa-LcYhVOr7QAAAIQ"], referer: https://whitehatlinkbuilding.website/dir/backlinks-for-website-growth-167649 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-07-14 19:12:07 (2 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇺🇸 SiliSoftware	2026-03-01 16:30:46 (7 months ago)	/phpBB3/viewforum.php?f=3&sid=1e1f19897fe70967b5506167f8ee0bb0	Web App Attack
Anonymous	2025-11-21 16:29:57 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-03-21 03:12:56 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-01-02 06:39:14 (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇨🇭 unifr	2024-04-03 00:05:01 (2 years ago)	Unauthorized IMAP connection attempt	Brute-Force
Anonymous	2024-04-02 21:20:31 (2 years ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇿 lp	2024-04-02 19:53:59 (2 years ago)	Email account brute force: 1 attempts were recorded from 201.202.13.231 2024-04-02T21:30:34+02:00 wa ... show more Email account brute force: 1 attempts were recorded from 201.202.13.231 2024-04-02T21:30:34+02:00 warning: unknown[201.202.13.231]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇦 Julio Covolato	2024-04-02 19:15:01 (2 years ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇩🇪 dwmp	2024-04-02 18:57:14 (2 years ago)	Apr 2 20:57:12 plesk postfix/smtpd[1724929]: warning: unknown[201.202.13.231]: SASL LOGIN authentic ... show more Apr 2 20:57:12 plesk postfix/smtpd[1724929]: warning: unknown[201.202.13.231]: SASL LOGIN authentication failed: authentication failure Apr 2 20:57:13 plesk postfix/smtpd[1724929]: lost connection after AUTH from unknown[201.202.13.231] Apr 2 20:57:13 plesk postfix/smtpd[1724929]: disconnect from unknown[201.202.13.231] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2024-04-02 18:47:49 (2 years ago)	(smtpauth) Failed SMTP AUTH login from 201.202.13.231 (CR/Costa Rica/-): 5 in the last 3600 secs; Po ... show more (smtpauth) Failed SMTP AUTH login from 201.202.13.231 (CR/Costa Rica/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-04-02 13:57:38 dovecot_plain authenticator failed for (herlixera) [201.202.13.231]:44073: 535 Incorrect authentication data ([email protected]) 2024-04-02 14:02:02 dovecot_plain authenticator failed for (extiver) [201.202.13.231]:43218: 535 Incorrect authentication data ([email protected]) 2024-04-02 14:33:15 dovecot_login authenticator failed for ([201.191.123.132]) [201.202.13.231]:40749: 535 Incorrect authentication data ([email protected]) 2024-04-02 14:41:38 dovecot_plain authenticator failed for (couper) [201.202.13.231]:42717: 535 Incorrect authentication data ([email protected]) 2024-04-02 14:47:46 dovecot_login authenticator failed for ([181.194.226.235]) [201.202.13.231]:43421: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇱🇹 Evag Touf	2024-04-02 18:12:12 (2 years ago)	(smtpauth) Failed SMTP AUTH login from 201.202.13.231 (CR/Costa Rica/-)	Brute-Force
🇺🇸 PeravixGroup	2024-04-02 17:23:04 (2 years ago)	2024-04-02T18:22:59.909732 AdbuseHP sshd[308176]: Invalid user admin from 201.202.13.231 port 43084 ... show more 2024-04-02T18:22:59.909732 AdbuseHP sshd[308176]: Invalid user admin from 201.202.13.231 port 43084 ... show less	Brute-Force SSH
🇩🇪 itak	2024-04-02 17:20:01 (2 years ago)	IMAP SASL Brute-Force Attack	Port Scan Hacking Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.18

🇳🇱 193.47.62.69

🇮🇳 192.178.116.173

🇬🇧 185.247.137.235

🇨🇳 183.63.125.162

🇦🇷 170.238.9.227

🇨🇳 113.66.180.105

🇲🇦 105.155.220.210

🇷🇴 92.118.39.49

🇺🇸 91.230.168.241

🇺🇸 52.224.109.126

🇨🇳 49.74.195.2

🇧🇷 170.79.192.230

🇺🇸 129.121.116.121

🇧🇬 82.147.142.205

🇰🇷 220.86.208.195

🇲🇽 189.232.105.194

🇮🇳 125.21.59.218

🇻🇳 103.28.37.12

🇷🇺 94.25.40.30