AbuseIPDB » 104.248.31.197
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example previewIP Abuse Reports for 104.248.31.197:
This IP address has been reported a total of 48 times from 35 distinct sources. 104.248.31.197 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 8 reports; United States of America with 7 reports; France with 3 reports. The most common categories in these recent reports were: Brute-Force 16 times; Port Scan 14 times; Hacking 8 times; SSH 6 times; Web App Attack 6 times; Other 6 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | ||
| 🇩🇪 von44bis33 |
Cowrie SSH honeypot: unauthorized login attempts/commands observed.
|
Brute-Force SSH | ||
| 🇩🇪 Mailguard-FRD |
|
Email Spam Brute-Force | ||
| 🇫🇷 Altai |
Telnet honeypot scan on port 23.
|
Port Scan Brute-Force Exploited Host IoT Targeted | ||
| Anonymous |
25/tcp (1 or more attempts)
|
Port Scan | ||
| 🇭🇷 aktonrs |
|
Port Scan | ||
| 🇪🇸 librebit |
Brute force
|
Brute-Force | ||
| 🇹🇭 MWA SOC |
|
Hacking | ||
| 🇰🇷 winter |
Connection attemp from 104.248.31.197 to port 22
|
Brute-Force SSH | ||
| 🇪🇪 Selckie |
fail2ban: NGINX unusual impact
|
Web App Attack | ||
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | ||
| 🇹🇷 SeczarSecureOps |
Auto-blocked by Seczar SecureOps — IPS Web Attack Signature (3 events in 5min) at 2026-08-24 03:21
|
Web App Attack Bad Web Bot | ||
| Anonymous |
Unauthorized SSH login attempts
|
Brute-Force SSH | ||
| 🇺🇸 kosada.com |
Web vulnerability probing: /evox/about (bogus vhost/SNI)
|
Web App Attack | ||
| 🇦🇪 abusiveIntelligence |
RDP connect attempt: Nmap Scanner
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩