JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.131.42.226

213.131.42.226 was found in our database!

This IP was reported 316 times. Confidence of Abuse is 91%: ?

91%

ISP	Corporate Customers Network
Usage Type	Fixed Line ISP
ASN	AS35805
Domain Name	utg.ge
Country	🇬🇪 Georgia
City	Tbilisi, Tbilisi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.131.42.226

Whois 213.131.42.226

IP Abuse Reports for 213.131.42.226:

This IP address has been reported a total of 316 times from 98 distinct sources. 213.131.42.226 was first reported on December 21st 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 TrafficAnalyser	2026-07-11 00:05:25 (1 day ago)	Port scanning	Port Scan
🇩🇪 EinfxchFinn	2026-07-10 11:54:51 (1 day ago)	Unauthorized connection attempt to port 1433 from 213.131.42.226	Port Scan
🇸🇰 GOVCERT	2026-07-09 23:32:53 (2 days ago)	Excessive Firewall Denies	DDoS Attack Web Spam
🇩🇪 iNetWorker	2026-07-09 20:10:53 (2 days ago)	firewall-block, port(s): 445/tcp	Port Scan
🇩🇪 HoneyPot-FrPri	2026-07-05 07:55:13 (1 week ago)	1783238112 - 07/05/2026 09:55:12 Host: 213.131.42.226/213.131.42.226 Port: 1088 TCP Blocked ...	Port Scan
🇮🇪 RoboSOC	2026-07-03 07:31:08 (1 week ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇬🇧 Andrew	2026-07-02 23:52:16 (1 week ago)	Blocked by UFW (TCP on port 1433). Source port: 31543 TTL: 117 Packet length: 52 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 1433). Source port: 31543 TTL: 117 Packet length: 52 TOS: 0x00 This report (for 213.131.42.226) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-07-02 14:05:47 (1 week ago)	[RoutePulse \| 2026-07-02T14:05:47Z] ATTACK: Port Scan Horizontal (port 135) TARGET: 4 subnets: 185.5 ... show more [RoutePulse \| 2026-07-02T14:05:47Z] ATTACK: Port Scan Horizontal (port 135) TARGET: 4 subnets: 185.54.81.0/24, 185.54.82.0/24, 185.54.83.0/24 SOURCE: 213.131.42.226 · AS35805 JSC Silknet · Georgia EVIDENCE: severity=warning · 1021 flows · 69 KB · 1020 distinct targets · port 135 INTEL: AbuseIPDB 92% (83 reports) \| RoutePulse score 72/100 24H PERSISTENCE: 3 events (Port Scan Horizontal×2, SIEM Firewall Scan×1) MITRE: T1018 Remote System Discovery, T1046 Network Service Scanning DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-07-02 01:41:28 (1 week ago)	[RoutePulse \| 2026-07-02T01:41:28Z] ATTACK: Port Scan Horizontal (port 445) TARGET: 4 subnets: 185.5 ... show more [RoutePulse \| 2026-07-02T01:41:28Z] ATTACK: Port Scan Horizontal (port 445) TARGET: 4 subnets: 185.54.80.0/24, 185.54.82.0/24, 185.54.83.0/24 SOURCE: 213.131.42.226 · AS35805 JSC Silknet · Georgia EVIDENCE: severity=warning · 1020 flows · 135 KB · 1020 distinct targets · port 445 INTEL: AbuseIPDB 92% (83 reports) \| RoutePulse score 93/100 MITRE: T1018 Remote System Discovery, T1046 Network Service Scanning DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Port Scan
🇳🇱 knock	2026-06-30 19:37:24 (1 week ago)	Knock-Knock honeypot brute-force: SMB (5 total hits)	Brute-Force
🇭🇰 PingMeMaybe	2026-06-30 14:59:09 (1 week ago)	Blocked by UFW on hk [135/tcp] Source port: 38868 TTL: 110 Packet length: 52 TOS: 0x02 This report ... show more Blocked by UFW on hk [135/tcp] Source port: 38868 TTL: 110 Packet length: 52 TOS: 0x02 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-06-26 13:35:46 (2 weeks ago)	[RoutePulse \| 2026-06-26T13:35:46Z] ATTACK: Port Scan Horizontal (port 445) TARGET: 3 subnets: 185.5 ... show more [RoutePulse \| 2026-06-26T13:35:46Z] ATTACK: Port Scan Horizontal (port 445) TARGET: 3 subnets: 185.54.83.0/24, 185.54.82.0/24, 185.54.81.0/24 SOURCE: 213.131.42.226 EVIDENCE: severity=warning · 498 flows · 34 KB · 498 distinct targets · port 445 MITRE: T1018 Remote System Discovery, T1046 Network Service Scanning DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Port Scan
🇫🇷 Hiigara	2026-06-24 01:00:36 (2 weeks ago)	connection attempt : 213.131.42.226 on port : tcp/1433 (MSSQL)	Port Scan
🇺🇸 micropedro	2026-06-23 11:30:36 (2 weeks ago)	3 incidents: malicious activity. First: 2026-06-16 06:30, Last: 2026-06-23 07:30 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-06-16 06:30, Last: 2026-06-23 07:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇫🇷 Soncraft	2026-06-23 10:08:28 (2 weeks ago)	Blocked by UFW on Jellyfin [1433/tcp] Source port: 50758 TTL: 113 Packet length: 52 TOS: 0x08 This ... show more Blocked by UFW on Jellyfin [1433/tcp] Source port: 50758 TTL: 113 Packet length: 52 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 316 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 45.135.141.21

🇺🇸 44.234.155.27

🇳🇱 193.176.31.218

🇷🇺 178.178.194.134

🇨🇳 110.16.97.146

🇩🇪 47.245.140.253

🇩🇪 167.94.146.32

🇹🇭 159.192.97.182

🇻🇳 113.169.84.44

🇩🇰 104.22.69.211

🇹🇷 89.252.146.72

🇩🇪 80.187.125.13

🇺🇸 74.7.227.179

🇺🇸 66.132.195.50

🇳🇱 45.148.10.141

🇳🇱 45.134.225.48

🇧🇷 45.70.54.217

🇩🇿 41.108.41.43

🇸🇬 39.109.233.36

🇻🇳 14.191.62.7