JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.222.12.180

31.222.12.180 was found in our database!

This IP was reported 243 times. Confidence of Abuse is 84%: ?

84%

ISP	Radovan Ochvat trading as SAO Computers
Usage Type	Fixed Line ISP
ASN	AS197846
Domain Name	paskov.cz
Country	🇨🇿 Czechia
City	Hat, Moravian-Silesian Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.222.12.180

Whois 31.222.12.180

IP Abuse Reports for 31.222.12.180:

This IP address has been reported a total of 243 times from 96 distinct sources. 31.222.12.180 was first reported on April 10th 2022, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 hostsec_za	2026-07-16 16:10:12 (12 hours ago)	IMAP/POP3 Auth Attack. 14 failed logins in 6 hours.	Brute-Force
🇦🇹 joe-abuse	2026-07-16 01:42:05 (1 day ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-14 02:30:54 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-14 02:30:54. Events: 21. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇺🇸 brianbgv	2026-07-13 20:12:51 (3 days ago)	Dovecot mail abuse detected by Fail2Ban	Port Scan Hacking SSH
🇦🇹 joe-abuse	2026-07-13 01:39:04 (4 days ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-11 03:30:47 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-11 03:30:47. Events: 20. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇮🇩 sockominfo	2026-07-12 15:00:56 (4 days ago)	Zimbra: Login failures from malicious IP: 31.222.12.180. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 31.222.12.180. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 rd1742	2026-07-11 20:51:48 (5 days ago)	Jul 11 20:51:47 quad dovecot: auth-worker(3511742): sql(trash,31.222.12.180,<q9aQBlxW0K8f3gy0>): unk ... show more Jul 11 20:51:47 quad dovecot: auth-worker(3511742): sql(trash,31.222.12.180,<q9aQBlxW0K8f3gy0>): unknown user show less	Brute-Force Exploited Host
🇩🇪 jasperedv.de	2026-07-11 12:42:12 (5 days ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇦🇹 joe-abuse	2026-07-11 01:31:41 (6 days ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-09 03:30:44 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-07-09 03:30:44. Events: 21. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇮🇩 sockominfo	2026-07-10 03:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 31.222.12.180. Threat Score: 5.5/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 31.222.12.180. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-07-09 21:21:17 (1 week ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇦🇺 AWW-Admin	2026-07-09 07:33:29 (1 week ago)	(imapd) Failed IMAP login from 31.222.12.180 (PL/Poland/isp-31-222-12-180.saowifi.net)	Brute-Force
🇮🇩 sockominfo	2026-07-08 20:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 31.222.12.180. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 31.222.12.180. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 itak	2026-07-06 16:35:58 (1 week ago)	IMAP SASL Brute-Force Attack	Port Scan Hacking Brute-Force
🇦🇹 joe-abuse	2026-07-05 09:02:20 (1 week ago)	2026-07-05T11:02:19.849054+02:00 ucs1 dovecot: auth-worker(57850): conn unix:auth-worker (pid=1037,u ... show more 2026-07-05T11:02:19.849054+02:00 ucs1 dovecot: auth-worker(57850): conn unix:auth-worker (pid=1037,uid=121): auth-worker<1>: pam(johncoffey,31.222.12.180,<DJBHatlVwKwf3gy0>): unknown user (given password: johncoffey21) ... show less	Brute-Force
🇯🇵 kawanchu	2026-07-04 21:52:06 (1 week ago)	Brute-force attack via SMTP AUTH. Repeated login failures on mail server.	Brute-Force

Showing 1 to 15 of 243 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.187.56.64

🇺🇸 195.184.76.132

🇺🇸 172.217.46.85

🇨🇳 122.114.113.177

🇸🇬 114.119.139.202

🇷🇴 92.118.39.49

🇷🇺 85.113.41.196

🇩🇪 69.5.169.154

🇺🇸 40.124.175.184

🇨🇳 36.135.103.30

🇬🇧 35.203.211.249

🇨🇳 221.225.150.49

🇨🇳 218.21.241.50

🇨🇭 209.99.185.195

🇺🇸 205.210.31.28

🇲🇦 196.92.7.247

🇬🇧 195.206.182.211

🇬🇧 194.50.235.145

🇬🇧 193.176.29.12

🇧🇷 189.8.5.118