31.129.235.152
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- ISP Syndicate
- Usage Type
- Fixed Line ISP
- ASN
- AS50012
- Domain Name
- syndicate.net.ua
- Country
- 🇺🇦 Ukraine
- City
- Zhovkva, Lviv
Abuse Reports
Total reports
31 from
24 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇩🇪 Admins@Storch |
IPS:drop <match> dstport=23
|
Brute-Force Exploited Host | |
| 🇩🇪 KPS |
PortscanN
|
Port Scan | |
| 🇩🇪 DerDoktor |
I1106 16:46:42.88998
fail2ban action triggered
|
Port Scan Brute-Force SSH | |
| 🇫🇮 mikkopal88 |
TCP SYN port scan to Telnet 23-2323
|
Port Scan IoT Targeted | |
| Anonymous |
Honeypot: 3 connection attempts (Honeypot SSH, Honeypot Telnet). Automated report.
|
Port Scan Brute-Force SSH IoT Targeted | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-11-05 19:29:54 | LAST=2026-11-05 19:29:54. Last seen 2026-11-05 19:29:54.
|
Port Scan | |
| Anonymous |
PORT & IP Scan.
|
Port Scan Brute-Force | |
| Anonymous |
SSH tarpit (endlessh) connection from 31.129.235.152
|
Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇺🇸 seb6062 |
SSH tarpit on port 22: 2 connection(s) in the last 24h, held 1960 s in total, longest 1020 s. Unsolicited SSH to a port with no SSH service: SSH client held by the tarpit (brute-force tool behavior). Automated endlessh tarpit report.
|
Brute-Force SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 50079
TTL: 49
Packet length: 60
TOS: 0x00
This report (for 31.129.235.152) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown