JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.22.104.38

31.22.104.38 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	Verda Cloud Oy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198020
Domain Name	verda.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.22.104.38

Whois 31.22.104.38

IP Abuse Reports for 31.22.104.38:

This IP address has been reported a total of 25 times from 19 distinct sources. 31.22.104.38 was first reported on October 23rd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-10-23 18:41:11 (3 days ago)	Firewall: Within 2026-10-23 14:19:05 - 2026-10-23 14:20:28 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-10-23 14:19:05 - 2026-10-23 14:20:28 CEST(+0200) identified: unallowed access from 31.22.104.38 on port 8000(tcp:8000) (1 trial) Fail2ban: Within 2026-10-23 14:19:05 - 2026-10-23 14:20:29 CEST(+0200) banned: 4 times by fail2ban[firewall]; 4 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇫🇷 EvoX	2026-10-23 12:24:20 (3 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (Windows NT ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/125.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate, zstd; 8000 [1] TCP show less	Hacking Bad Web Bot
🇫🇮 anycast_ac	2026-10-23 12:21:44 (3 days ago)	Blocked by UFW on legacypanel [8000/tcp] \| SPT: 36403 \| TTL: 57 \| LEN: 52 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on legacypanel [8000/tcp] \| SPT: 36403 \| TTL: 57 \| LEN: 52 \| TOS: 0x00 • Reported by: FemboyHolding LTD show less	Port Scan
🇫🇮 sonot	2026-10-23 12:20:56 (3 days ago)	Blocked by UFW on mail [8000/tcp] \| SPT: 33418 \| TTL: 57 \| LEN: 52 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [8000/tcp] \| SPT: 33418 \| TTL: 57 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 phil2k	2026-10-23 12:20:31 (3 days ago)	fail2ban:firewall:2026-10-23T14:19:05.706300+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-10-23T14:19:05.706300+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=31.22.104.38 DST=<PRIVATE_IPv4> LEN=52 TOS=0x00 PREC=0x00 TTL=57 ID=13367 PROTO=TCP SPT=38952 DPT=8000 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-23T14:20:28.230288+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=31.22.104.38 DST=<ANONYMIZED_IP> LEN=52 TOS=0x00 PREC=0x00 TTL=57 ID=32340 PROTO=TCP SPT=45156 DPT=8000 WINDOW=65535 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇫🇷 agroman93	2026-10-23 12:20:12 (3 days ago)	T-Pot honeypot: 26 hits on ports [8000] (automated)	Port Scan
🇭🇰 sandra361	2026-10-23 12:18:17 (3 days ago)	Port scan detected: 6 attempts across 1 port (8000). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=31.22.10 ... show more Port scan detected: 6 attempts across 1 port (8000). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=31.22.104.38 LEN=40 TOS=0x14 PREC=0x00 TTL=50 ID=16629 DF PROTO=TCP SPT=45934 DPT=8000 WINDOW=64240 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇩🇪 ValtonTahiri	2026-10-23 12:17:07 (3 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=31.22.104.38; proto=TCP; source_port=36944; target_port=8000 show less	Port Scan
🇩🇪 iNetWorker	2026-10-23 12:16:30 (3 days ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-10-23 12:16:26 (3 days ago)	8000/tcp (1 or more attempts)	Port Scan
🇵🇱 nfsec.pl	2026-10-23 12:15:49 (3 days ago)	Detected: TCP scan on port: 8000 with flags: SYN	Port Scan
🇬🇧 Axel	2026-10-23 12:15:46 (3 days ago)	Blocked by UFW on BGPGB [8000/tcp] \| SPT: 37666 \| TTL: 56 \| LEN: 52 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on BGPGB [8000/tcp] \| SPT: 37666 \| TTL: 56 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 vtchost.com	2026-10-23 12:13:37 (3 days ago)	portscan on honeypot system ...	Port Scan
Anonymous	2026-10-23 12:11:39 (3 days ago)	2026-10-23T14:11:38.007139+02:00 vps kernel: [9128263.653981] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-10-23T14:11:38.007139+02:00 vps kernel: [9128263.653981] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=31.22.104.38 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=55263 PROTO=TCP SPT=39381 DPT=8000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇳🇱 StopAbuse	2026-10-23 11:38:16 (3 days ago)	tcp/8000	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.103.82.40

🇰🇷 106.251.244.178

🇭🇰 36.255.220.145

🇳🇱 200.138.46.26

🇳🇱 193.47.62.69

🇪🇨 190.155.237.211

🇧🇷 179.48.18.42

🇭🇰 165.154.67.144

🇺🇸 129.221.228.107

🇭🇰 119.28.46.114

🇰🇷 118.37.214.187

🇳🇱 77.67.26.212

🇺🇸 64.225.25.172

🇺🇸 64.62.197.182

🇬🇧 35.203.211.3

🇺🇸 35.163.152.164

🇨🇴 181.52.218.106

🇳🇱 178.16.53.91

🇻🇳 125.253.123.34

🇮🇳 122.162.148.98