JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.173.80.22

31.173.80.22 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 2%: ?

ISP	Metropolitan branch of OJSC MegaFon
Usage Type	Mobile ISP
ASN	AS25159
Domain Name	megafon.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.173.80.22

Whois 31.173.80.22

IP Abuse Reports for 31.173.80.22:

This IP address has been reported a total of 16 times from 11 distinct sources. 31.173.80.22 was first reported on July 24th 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Bharat Datacenter	2026-08-14 04:29:46 (4 days ago)	16: date=2026-08-14 time=09:24:35 eventtime=1786679676182678701 tz="+0530" logid="0720018432" type=" ... show more 16: date=2026-08-14 time=09:24:35 eventtime=1786679676182678701 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=31.173.80.22 srccountry="Russian Federation" dstip=198.105.113.205 dstcountry="Netherlands" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=123426 attack="tcp_syn_flood" srcport=8283 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4039 > threshold 2000, repeats 123426 times since last log, pps 4079 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇮🇳 Bharat Datacenter	2026-08-14 04:14:02 (4 days ago)	9: date=2026-08-14 time=09:24:35 eventtime=1786679676182678701 tz="+0530" logid="0720018432" type="u ... show more 9: date=2026-08-14 time=09:24:35 eventtime=1786679676182678701 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=31.173.80.22 srccountry="Russian Federation" dstip=198.105.113.205 dstcountry="Netherlands" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=123426 attack="tcp_syn_flood" srcport=8283 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4039 > threshold 2000, repeats 123426 times since last log, pps 4079 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇮🇳 Bharat Datacenter	2026-08-14 03:57:18 (4 days ago)	1: date=2026-08-14 time=09:24:35 eventtime=1786679676182678701 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-08-14 time=09:24:35 eventtime=1786679676182678701 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=31.173.80.22 srccountry="Russian Federation" dstip=198.105.113.205 dstcountry="Netherlands" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=123426 attack="tcp_syn_flood" srcport=8283 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4039 > threshold 2000, repeats 123426 times since last log, pps 4079 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇺🇸 EGP Abuse Dept	2026-06-19 08:53:05 (1 month ago)	forum signup bot	Web Spam Blog Spam Web App Attack
Anonymous	2026-04-17 17:00:56 (4 months ago)	2026-04-17T18:00:55.137868+01:00 vps kernel: [38185465.391728] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-04-17T18:00:55.137868+01:00 vps kernel: [38185465.391728] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=31.173.80.22 DST=54.37.14.118 LEN=48 TOS=0x00 PREC=0x20 TTL=103 ID=31404 DF PROTO=TCP SPT=12594 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇦🇺 oncord	2025-09-13 11:32:58 (11 months ago)	Form spam	Web Spam
Anonymous	2025-06-14 13:39:56 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 MAGIC	2025-02-23 20:05:40 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 ⓔⓜⓙⓔⓔ	2025-02-10 12:34:48 (1 year ago)	SMB 🖴 Honeypot: connected to port 445 by 31.173.80.22: port 16853	Port Scan
🇩🇪 IP Analyzer	2025-02-10 11:31:07 (1 year ago)	Unauthorized connection attempt from IP address 31.173.80.22 on Port 445(SMB)	Port Scan
Anonymous	2025-02-07 05:38:15 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇳🇱 Study Bitcoin 🤗	2025-02-06 13:56:22 (1 year ago)	Port probe to tcp/445 (smb) [srv124]	Port Scan Hacking
🇪🇸 Michael McCarthy	2024-05-10 07:43:06 (2 years ago)		Web Spam
🇩🇪 IP Analyzer	2023-09-12 12:00:16 (2 years ago)	Unauthorized connection attempt from IP address 31.173.80.22 on Port 445(SMB)	Port Scan
🇦🇺 oncord	2023-07-06 06:40:14 (3 years ago)	Form spam	Web Spam

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.112.142.65

🇵🇱 195.164.49.74

🇺🇸 162.216.149.191

🇹🇷 147.45.66.116

🇮🇳 110.172.140.70

🇫🇷 91.231.89.168

🇺🇸 91.230.168.120

🇺🇸 74.91.136.105

🇺🇸 54.92.132.174

🇬🇧 31.14.254.106

🇷🇺 217.198.6.42

🇺🇸 198.41.227.196

🇺🇸 195.184.76.225

🇲🇽 189.190.217.141

🇦🇷 181.224.184.95

🇳🇱 169.150.196.10

🇱🇾 150.228.109.132

🇸🇪 104.23.221.200

🇭🇰 103.146.158.141

🇵🇷 72.50.1.29