Is 131.72.94.28 malicious?

IP reputation report for 131.72.94.28: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

131.72.94.28 is listed on 11 threat intelligence sources

Detected by 11 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictListed on blocklists

Appears on threat intelligence blocklists — treat with caution.

Blocklist detections11 sources

Categoriesbruteforce, suspicious, malware, phishing, abuse, c2

Confidence score100/100

Aggregated confidence across the sources reporting this indicator.

First seen2026-07-29

Last updated2026-08-04

Detections

Telnet Loginbruteforce
IPsum Level 1suspicious
IPsum - Malicious IPsmalware
Duggytuxy - Blacklist Ips For Fortinet Firewall Aa.txt
Romain Marcoux - Malicious IPsphishing
IPsum Level 2suspicious
ThreatHive - Hive Blocklist
Borestad - AbuseIPDB Blocklist (1d)abuse
Data-Shield IPv4 Blocklistmalware
Bitwire - Inbound Blocklistmalware
Borestad - AbuseIPDB Blocklist (30d)abuse

Threat categories

suspicious malware phishing abuse c2

Related malicious IPs on nearby networks

131.72.94.29 131.72.94.56 131.72.17.144 131.72.161.23 131.72.12.145 131.72.175.102 131.72.191.205 131.72.46.53

Run a live scan of 131.72.94.28 Download IP blocklists →