JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.181.67.214

31.181.67.214 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 37%: ?

37%

ISP	OJSC Rostelecom Macroregional Branch South
Usage Type	Fixed Line ISP
ASN	AS12389
Domain Name	rt.ru
Country	🇷🇺 Russian Federation
City	Krasnodar, Krasnodar Krai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.181.67.214

Whois 31.181.67.214

IP Abuse Reports for 31.181.67.214:

This IP address has been reported a total of 7 times from 5 distinct sources. 31.181.67.214 was first reported on July 13th 2026, and the most recent report was 19 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 crnpekgoz	2026-07-14 01:54:23 (19 minutes ago)	[PortScan] Risk=100 ASN=12389 (portscan) Port=445 HoneypotTrap=true \| Reported by WardenIPS: https:/ ... show more [PortScan] Risk=100 ASN=12389 (portscan) Port=445 HoneypotTrap=true \| Reported by WardenIPS: https://github.com/msncakma/WardenIPS show less	Port Scan
🇫🇷 sthoyer.de	2026-07-13 18:54:22 (7 hours ago)	Jul 13 20:54:21 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 13 20:54:21 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=31.181.67.214 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=13403 DF PROTO=TCP SPT=61921 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 EvoX	2026-07-13 17:27:24 (8 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 61338) to a pas ... show more 🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 61338) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇫🇷 sthoyer.de	2026-07-13 14:53:29 (11 hours ago)	Jul 13 16:53:28 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 13 16:53:28 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=31.181.67.214 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=14802 DF PROTO=TCP SPT=55352 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-07-13 14:52:22 (11 hours ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-07-13 12:38:46 (13 hours ago)	Jul 13 14:38:45 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 13 14:38:45 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=31.181.67.214 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=15405 DF PROTO=TCP SPT=59341 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-07-13 11:04:57 (15 hours ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.22.1.254

🇫🇮 147.185.133.6

🇰🇷 222.232.176.7

🇲🇳 203.21.120.126

🇬🇧 185.216.145.180

🇧🇪 172.253.90.24

🇩🇪 164.90.237.71

🇮🇩 103.253.245.222

🇮🇩 103.144.179.38

🇺🇸 71.6.233.2

🇲🇽 45.134.9.27

🇻🇳 42.96.20.16

🇧🇪 34.62.28.49

🇺🇸 20.106.32.192

🇬🇧 5.226.140.125

🇧🇷 189.113.47.155

🇳🇱 159.223.220.100

🇸🇳 154.124.128.121

🇺🇸 151.240.232.52

🇧🇷 138.122.233.129