JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.131.201.2

201.131.201.2 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 31%: ?

31%

ISP	Computadoras y Servicios Especiales SA de CV
Usage Type	Fixed Line ISP
ASN	AS28387
Hostname(s)	002.internetcomunicate.mx
Domain Name	blacom.com.mx
Country	🇲🇽 Mexico
City	Huauchinango, Puebla

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.131.201.2

Whois 201.131.201.2

IP Abuse Reports for 201.131.201.2:

This IP address has been reported a total of 16 times from 14 distinct sources. 201.131.201.2 was first reported on January 28th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-05-30 11:37:45 (1 week ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇬🇧 PeravixGroup	2026-05-10 22:40:33 (4 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇳🇱 VMHeaven.io	2026-05-10 21:55:08 (4 weeks ago)	Blocked by UFW [23/tcp] Source port: 37139 TTL: 38 Packet length: 60	Port Scan Hacking Brute-Force
🇬🇧 PeravixGroup	2026-05-09 14:28:25 (4 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇨🇳 ThreatBook.io	2026-05-05 00:23:47 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/201.131.201.2	SSH
🇩🇪 Da_tschek	2026-05-03 19:08:25 (1 month ago)	Port scanning	Port Scan Hacking
🇺🇸 xmission.com	2026-05-03 10:14:29 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 10990 TTL: 49 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 10990 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 201.131.201.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-05-03 09:02:48 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇩🇪 filstal.org	2026-05-01 08:29:24 (1 month ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (compatible; MSIE 7.0; Windows 98; Trident/3.1)). Mass ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (compatible; MSIE 7.0; Windows 98; Trident/3.1)). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2026-04-28 23:23:42 (1 month ago)	webserver:80 [29/Apr/2026] "GET http://ashunledevles.eu.org/setcookie_vidpage-rmy-ou_hu_de.html HTT ... show more webserver:80 [29/Apr/2026] "GET http://ashunledevles.eu.org/setcookie_vidpage-rmy-ou_hu_de.html HTTP/1.1" 302 465 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-08 03:49:39 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 201.131.201.2 (002.internetcomunicate.mx): 1 in ... show more (mod_security) mod_security (id:217210) triggered by 201.131.201.2 (002.internetcomunicate.mx): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 23:49:33.582013 2026] [security2:error] [pid 2622835:tid 2622835] [client 201.131.201.2:49720] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|moon7exactlys.top\|F\|4"] [data "GET http://moon7exactlys.top HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "moon7exactlys.top"] [uri "/"] [unique_id "adXQTRf28tLc0yAKeWslowAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-03-14 21:41:44 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.432 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.432 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇺🇸 matt	2026-03-02 22:42:00 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇸🇬 mypatricks	2026-03-02 21:55:05 (3 months ago)	201.131.201.2 \| Port: 13420 \| DNS: 002.internetcomunicate.mx 2026-03-03T05:55:04+08:00 America/Mexic ... show more 201.131.201.2 \| Port: 13420 \| DNS: 002.internetcomunicate.mx 2026-03-03T05:55:04+08:00 America/Mexico_City \| IPs Spam list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /account/create/?b78115dc3625089def8c80ca25dbdfd2=1772341012 \| Ref: https://xxxxxx/fondant-3d-superhero-stacked-cake/?cc49ffc8aa4ef58=SGD&code=SGD \| Country: MX/Mexico/−06:00 IP City: Huejotzingo macOS 9d63a4adcc87c007-ATL/Atlanta, GA, United States 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇸🇬 mypatricks	2026-03-01 14:21:34 (3 months ago)	201.131.201.2 \| Port: 9542 \| DNS: 002.internetcomunicate.mx 2026-03-01T22:21:33+08:00 America/Mexico ... show more 201.131.201.2 \| Port: 9542 \| DNS: 002.internetcomunicate.mx 2026-03-01T22:21:33+08:00 America/Mexico_City \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0 HTTP/1.1 443 GET \| URL: /fondant-cakes-japan-kitty/?a087480286d566a1=SGD&code=SGD \| Ref: - \| Country: MX/Mexico/−06:00 IP City: Huejotzingo Windows 9d58cef46d17c8e5-IAH/Houston, TX, United States 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.181.108.94

🇨🇦 209.235.136.139

🇺🇸 205.210.31.96

🇳🇱 185.223.235.52

🇺🇸 165.154.134.156

🇺🇸 162.216.150.115

🇺🇸 162.216.150.24

🇻🇳 160.250.186.97

🇫🇮 147.185.133.164

🇹🇼 110.25.112.132

🇧🇩 103.163.117.83

🇳🇱 81.19.216.89

🇲🇾 49.124.148.189

🇺🇸 216.25.89.141

🇧🇷 177.104.171.149

🇺🇸 159.65.168.103

🇭🇰 152.32.211.69

🇨🇳 120.239.44.57

🇺🇸 64.202.190.35

🇰🇷 49.254.50.11