31.148.149.232

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
27% Elevated
58 reports
36 reporters · latest 3 weeks ago
ISP
Branch Enterprise Netgroup-Service
Usage Type
Fixed Line ISP
ASN
AS212463
Domain Name
netgroup.ua
Country
🇺🇦 Ukraine
City
Ivano-Frankivsk, Ivano-Frankivsk
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
58 from 36 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇳🇱 Netherlands 2 🇧🇷 Brazil 1
Most common categories Port Scan 6 SSH 4 Brute-Force 4 Hacking 3 IoT Targeted 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 36max
Blocked by firewall: 6 unsolicited inbound connection attempts within 24 hours to ports 22, 23. Automated report from a home network.
Port Scan Brute-Force SSH IoT Targeted
🇧🇷 aosafeshield
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
Port Scan Hacking
🇺🇸 ras07
Brute force SSH login attempts.
Brute-Force SSH
🇮🇳 Parth Maniar
This IP address carried out 4 port scanning attempts on 16-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇺🇸 RAP
2026-10-01 18:18:34 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 57368 TTL: 44 Packet length: 60 TOS: 0x00 This report (for 31.148.149.232) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇺🇸 RAP
2026-09-25 07:06:20 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇰🇷 2048
Brute-Force
🇺🇸 kosada.com
DDoS Attack Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 donarev419
Port scan detected on port 23 (connection without data transfer)
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Unauthorized connection attempt detected on 23/TELNET
Hacking Port Scan
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 31.148.149.232
Port Scan Brute-Force SSH
🇺🇸 LotPhantom
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.149.188
🇺🇸 148.135.85.181
🇫🇮 147.185.133.154
🇳🇱 86.38.187.127
🇳🇱 77.239.124.112
🇩🇪 69.5.169.183
🇺🇸 40.77.167.254
🇰🇷 221.156.126.1
🇺🇸 216.25.89.122
🇺🇿 188.113.211.5
🇸🇬 145.223.150.16
🇨🇳 123.138.18.10
🇻🇳 117.4.247.33
🇳🇱 77.67.26.25
🇩🇪 69.5.169.238
🇬🇧 31.14.254.54
feedback