43.131.2.20
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Tencent Building, Kejizhongyi Avenue
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS132203
- Domain Name
- tencent.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
40 from
35 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇸 arturotrenard |
WordPress attack blocked (wp-defender): directo-al-origen: 2 peticiones a la IP del origen sin pasar por Cloudflare (sin-host) ej. /
|
Web App Attack | |
| 🇪🇸 robotstxt |
|
Web Spam Web App Attack | |
| 🇪🇸 Linux Fertxo |
Unauthorized connection attempts: 7 hits @ port(s) 40125,80, protocol(s) icmp,tcp,udp
|
Port Scan Hacking | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| 🇪🇸 masterguru |
*Port Scan* detected from 43.131.2.20 (DE/Germany/-). 11 hits in the last 72 seconds (0-122)
|
Port Scan | |
| 🇪🇸 henkaiser2001 |
|
Brute-Force | |
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host | |
| Anonymous |
Fail2ban Nginx log integration.
|
Brute-Force SSH Port Scan | |
| 🇩🇰 jodk |
SSH brute-force + malware deployment (Redtail miner). 5 hits on honeypot. Uploaded clean.sh, setup.sh, redtail binaries. Injected SSH backdoor key.
|
Brute-Force SSH | |
| 🇩🇰 RhQM |
|
Bad Web Bot Exploited Host Web App Attack | |
| 🇯🇵 VXG-NET |
port=1025, indicator_type=N/A
|
Port Scan Hacking | |
| Anonymous |
2026-10-24 12:30:42.581 [685382] no host name found for IP address 43.131.2.20
2026-10-24 12:30:42.707 [685383] no host name found for IP address 43.131.2.20
2026-10-24 12:30:48.430 [685403] no host name found for IP address 43.131.2.20
...
|
Email Spam | |
| 🇩🇪 kreativstrecke |
|
Brute-Force | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-10-24 UTC.
|
Exploited Host | |
| 🇯🇵 VXG-NET |
port=22, indicator_type=N/A
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown