104.224.31.217

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
54% Elevated
18 reports
10 reporters · latest 1 week ago
ISP
Parchment Geode
Usage Type
Data Center/Web Hosting/Transit
ASN
AS931
Domain Name
as931.net
Country
🇺🇸 United States of America
City
Secaucus, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇫🇷 France 3 🇬🇧 United Kingdom of Great Britain and Northern Ireland 3
Most common categories Port Scan 18 Hacking 5 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 uthul
T-Pot honeypot: 39 hits on ports [3386, 3388] (automated)
Port Scan
🇬🇧 essinghigh
IPS Detection: 104.224.31.217 -> DPT: 3387
Port Scan
🇺🇸 sandra361
Port scan detected: 31 attempts across 1 port (3378). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=104.224.31.217 LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=18026 DF PROTO=TCP SPT=58081 DPT=3378 WINDOW=65392 RES=0x00 ACK FIN URGP=0
Port Scan
🇫🇷 uthul
T-Pot honeypot: 57 hits on ports [3379, 3384, 3386] (automated)
Port Scan
🇬🇧 sandra361
Port scan detected: 24 attempts across 1 port (3387). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=104.224.31.217 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=31161 PROTO=TCP SPT=56264 DPT=3387 WINDOW=65392 RES=0x00 ACK FIN URGP=0
Port Scan
🇩🇪 _ArminS_
SP-Scan 57711:3384 detected 2026.11.05 10:18:49 blocked until 2026.12.25 03:21:36
Port Scan
🇬🇧 essinghigh
IPS Detection: 104.224.31.217 -> DPT: 3381
Port Scan
🇭🇰 sandra361
Port scan detected: 6 attempts across 1 port (3385). | Evidence: REAPER_TARPIT: IN=eth0 SRC=104.224.31.217 LEN=59 TOS=0x14 PREC=0x00 TTL=117 ID=38795 DF PROTO=TCP SPT=56677 DPT=3385 WINDOW=65392 RES=0x00 ACK PSH FIN URGP=0
Port Scan
🇦🇺 LiftUp Hosting
Honeypot hit: Unauthorized traffic (19 bytes of payload); 3382 [3] TCP
Port Scan
🇳🇱 donarev419
Connection to port 3375 with data transfer. Data preview: 
Port Scan Hacking
🇧🇷 somosbr
[2026-11-05T06:55:18Z] Unsolicited scan from 104.224.31.217 to port 3380/tcp
Port Scan
🇺🇸 donarev419
Connection to port 3381 with data transfer. Data preview: 
Port Scan Hacking
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (19 bytes of payload); 3385 [3] TCP
Port Scan
🇺🇸 donarev419
Connection to port 3382 with data transfer. Data preview: 
Port Scan Hacking
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 52.180.154.81
🇬🇧 188.240.59.41
🇫🇷 176.129.197.222
🇸🇬 172.70.92.195
🇺🇸 147.185.132.61
🇺🇸 66.132.195.168
🇺🇸 62.233.51.126
🇭🇰 35.220.205.43
🇳🇱 35.214.227.58
🇳🇱 217.60.242.58
🇺🇸 137.184.26.250
🇷🇸 109.198.26.218
feedback