31.120.84.89

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
27 reports
22 reporters · latest 4 days ago
ISP
EE Limited
Usage Type
Mobile ISP
ASN
AS2856
Domain Name
ee-limited.co.uk
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
Upper Dean, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇫🇷 France 6 🇩🇪 Germany 3
Most common categories Port Scan 19 Hacking 7 Brute-Force 6 SSH 3 IoT Targeted 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇫🇷 Petre 21_ip
Port Scan
🇵🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 51 | Len: 52B | Win: 14600(1) | F2B/ufw-honeypot@2026-11-10T02:03:41Z
Port Scan Hacking
🇩🇪 goodbytes
Cowrie honeypot (Telnet ports 23/2323), UTC. 2026-11-09 22:39:42 to 2026-11-09 22:39:42: 1 successful logins, 0 commands. Evidence: 2026-11-09 22:39:42 login OK root/unisheen
Brute-Force IoT Targeted
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 whoknows
Telnet honeypot posing as an IoT device: logged in with a factory-default username and password, then sent no commands.
Brute-Force IoT Targeted
🇫🇷 aki
PortScan: TCP/23
Port Scan
🇺🇸 MPL
tcp/23
Port Scan
🇮🇳 lumi
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-11-08T16:17:17Z
Brute-Force SSH
🇦🇺 Block Rockin' Beats
Attempted connection to TCP port 23
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 RAP
2026-11-08 03:56:22 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇧🇷 aosafeshield
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
Port Scan Hacking
🇪🇸 jiossal
IP_Trapped_MikroTik_Firewall_HoneyPot
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.150.214
🇸🇬 104.22.222.119
🇺🇸 70.167.235.92
🇺🇸 45.132.184.28
🇹🇳 196.238.95.177
🇺🇸 178.128.148.1
🇷🇴 92.118.39.71
🇩🇪 87.106.169.169
🇷🇺 5.129.242.247
🇵🇾 200.50.157.83
🇺🇦 195.64.249.203
🇸🇬 194.5.82.26
🇺🇸 147.185.132.113
🇭🇰 124.156.157.91
🇨🇳 118.145.237.239
🇵🇰 110.38.12.45
🇺🇿 92.38.27.114
🇫🇮 80.223.163.253
🇺🇸 68.167.72.232
🇺🇸 67.171.29.65
feedback