5.37.131.192

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
62% Elevated
17 reports
16 reporters · latest 1 week ago
ISP
OmanMobile Telecommunication company LLC
Usage Type
Fixed Line ISP
ASN
AS28885
Hostname(s)
5.37.131.192.dynamic-dsl-ip.omantel.net.om
Domain Name
omantel.om
Country
🇴🇲 Oman
City
Muscat, Muscat
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇫🇷 France 3 🇩🇪 Germany 2
Most common categories Port Scan 13 Brute-Force 5 Hacking 4 Web Spam 1 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 SOC Blue Team
IPs get by Hunting on SIEM
Phishing Web Spam Port Scan Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:33580 dst:23
Port Scan
🇺🇸 scharsey
Honeypot: 2 TELNET events incl. login attempts
Brute-Force IoT Targeted
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 41072 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 5.37.131.192) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 51 observed events targeting TCP/23.
Port Scan
🇳🇱 knock
Knock-Knock honeypot brute-force: Telnet (28 total hits)
Brute-Force
🇮🇩 FallingGong2833
tcp/23
Port Scan
🇺🇸 RAP
2026-10-23 16:48:55 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇵🇱 rafamiga
fail2ban/ufw - Port scan detected. ...
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇫🇷 wiredalter
Blocked by fail2ban on o2VPS [23/tcp] Source Port: 58664 TTL: 46 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Brute-Force SSH
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=54270 dstport=23
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:37306 dst:23
Port Scan
🇭🇰 mutebot.net
SRC=5.37.131.192, PROTO=TCP, SPT=47802, DPT=23
Port Scan
🇩🇪 jann
Honeypot: connection to unused port 23 at 2026-10-20 11:01:46 UTC. No service runs there, any connection is unsolicited scanning.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 139.170.73.233
🇮🇩 103.209.184.210
🇧🇩 103.41.244.237
🇷🇴 92.118.39.14
🇺🇿 45.150.26.106
🇳🇱 45.148.10.247
🇳🇱 45.144.212.150
🇹🇭 34.15.150.42
🇳🇱 195.178.110.218
🇫🇷 193.151.191.252
🇺🇸 160.3.42.33
🇸🇪 91.189.92.23
🇹🇷 78.135.111.47
🇺🇸 43.166.130.123
🇺🇸 195.184.76.26
🇵🇱 172.64.198.86
🇨🇳 122.14.226.74
🇨🇦 66.23.115.214
🇧🇷 45.167.226.242
🇷🇺 5.165.76.148
feedback