This IP address has been reported a total of
409
times from
195 distinct
sources.
31.220.103.30 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reported by Fail2Ban: 2025-11-22 06:03:46,636 fail2ban.actions [858]: NOTICE [sshd] Ban 31.2 ...
show moreReported by Fail2Ban: 2025-11-22 06:03:46,636 fail2ban.actions [858]: NOTICE [sshd] Ban 31.220.103.30
show less
[Auto ban] Fail2Ban jail sshd on host: 3 failures in 2h. Excerpt: 2025-11-22T12:18:48.822583+00:00 U ...
show more[Auto ban] Fail2Ban jail sshd on host: 3 failures in 2h. Excerpt: 2025-11-22T12:18:48.822583+00:00 Ubuntu-Toronto1 sshd[80741]: Invalid user ftpuser from 31.220.103.30 port 39860
2025-11-22T12:20:25.412158+00:00 Ubuntu-Toronto1 sshd[80753]: Invalid user user3 from 31.220.103.30 port 57306
2025-11-22T12:23:33.801321+00:00 Ubuntu-Toronto1 sshd[80792]: Invalid user ec2-user from 31.220.103.30 port 59368
show less
Nov 22 12:38:11 mail sshd[4128936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreNov 22 12:38:11 mail sshd[4128936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.103.30 user=root
Nov 22 12:38:13 mail sshd[4128936]: Failed password for root from 31.220.103.30 port 39800 ssh2
Nov 22 12:39:55 mail sshd[4129158]: Invalid user mirror from 31.220.103.30 port 52774
...
show less
(sshd) Failed SSH login from 31.220.103.30 (US/United States/vmi1745484.contaboserver.net): 5 in the ...
show more(sshd) Failed SSH login from 31.220.103.30 (US/United States/vmi1745484.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Nov 22 05:06:37 16762 sshd[789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.103.30 user=root
Nov 22 05:06:39 16762 sshd[789]: Failed password for root from 31.220.103.30 port 41028 ssh2
Nov 22 05:10:57 16762 sshd[1075]: Invalid user zhouhao from 31.220.103.30 port 45958
Nov 22 05:10:59 16762 sshd[1075]: Failed password for invalid user zhouhao from 31.220.103.30 port 45958 ssh2
Nov 22 05:12:40 16762 sshd[1209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.103.30 user=root
show less
Nov 22 12:12:08 mail sshd[4124982]: Invalid user zhouhao from 31.220.103.30 port 52648
Nov 22 12:12: ...
show moreNov 22 12:12:08 mail sshd[4124982]: Invalid user zhouhao from 31.220.103.30 port 52648
Nov 22 12:12:08 mail sshd[4124982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.103.30
Nov 22 12:12:10 mail sshd[4124982]: Failed password for invalid user zhouhao from 31.220.103.30 port 52648 ssh2
...
show less
2025-11-22T12:11:55.635381+01:00 neo sshd[2171731]: Invalid user zhouhao from 31.220.103.30 port 517 ...
show more2025-11-22T12:11:55.635381+01:00 neo sshd[2171731]: Invalid user zhouhao from 31.220.103.30 port 51758
...
show less
2025-11-22T11:03:00.612348+01:00 khalid sshd-session[526292]: Invalid user ts3 from 31.220.103.30 po ...
show more2025-11-22T11:03:00.612348+01:00 khalid sshd-session[526292]: Invalid user ts3 from 31.220.103.30 port 52810
2025-11-22T11:03:00.620563+01:00 khalid sshd-session[526292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.103.30
2025-11-22T11:03:02.925186+01:00 khalid sshd-session[526292]: Failed password for invalid user ts3 from 31.220.103.30 port 52810 ssh2
show less
Nov 22 03:02:50 b146-09 sshd[3428485]: Invalid user ts3 from 31.220.103.30 port 41778
Nov 22 03:02:5 ...
show moreNov 22 03:02:50 b146-09 sshd[3428485]: Invalid user ts3 from 31.220.103.30 port 41778
Nov 22 03:02:50 b146-09 sshd[3428485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.103.30
Nov 22 03:02:52 b146-09 sshd[3428485]: Failed password for invalid user ts3 from 31.220.103.30 port 41778 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 409 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩