JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.223.4.170

31.223.4.170 was found in our database!

This IP was reported 665 times. Confidence of Abuse is 100%: ?

100%

ISP	TurkNet-DSL
Usage Type	Fixed Line ISP
ASN	AS12735
Hostname(s)	170.4.223.31.srv.turk.net
Domain Name	turknet.net.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.223.4.170

Whois 31.223.4.170

IP Abuse Reports for 31.223.4.170:

This IP address has been reported a total of 665 times from 130 distinct sources. 31.223.4.170 was first reported on August 21st 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-06-13 15:07:45 (2 hours ago)	Jun 13 17:07:44 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 13 17:07:44 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=31.223.4.170 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=56231 PROTO=TCP SPT=54993 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇷 Bruno	2026-06-12 11:31:44 (1 day ago)	Port Scanner: 31.223.4.170	Port Scan
🇦🇺 dyln	2026-06-12 06:46:57 (1 day ago)	Dyls honeypot brute-force: SMB (3 total hits)	Brute-Force
🇫🇷 vtchost.com	2026-06-11 11:38:50 (2 days ago)	Jun 11 13:38:50 vtchost kernel: [41788.129208] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Jun 11 13:38:50 vtchost kernel: [41788.129208] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=31.223.4.170 DST=161.97.181.152 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=51910 PROTO=TCP SPT=42266 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-10 17:51:22 (2 days ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 sthoyer.de	2026-06-10 17:16:52 (2 days ago)	Jun 10 19:16:51 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 10 19:16:51 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=31.223.4.170 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=25700 PROTO=TCP SPT=55418 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 phil2k	2026-06-10 00:54:55 (3 days ago)	portscan on multiple TCP ports : Firewall: Within 2026-06-09 09:52:55 - 2026-06-09 09:52:55 CEST(+02 ... show more portscan on multiple TCP ports : Firewall: Within 2026-06-09 09:52:55 - 2026-06-09 09:52:55 CEST(+0200) identified: unallowed access from 31.223.4.170/32 on port 445(microsoft-ds) (1 trial) Fail2ban: Within 2026-06-09 09:52:55 - 2026-06-09 09:52:55 CEST(+0200) banned: 1 times by fail2ban[firewall] show less	Port Scan
Anonymous	2026-06-09 16:43:45 (4 days ago)	Jun 8 14:30:45 localhost kernel: [109288749.556116] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 8 14:30:45 localhost kernel: [109288749.556116] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=31.223.4.170 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=236 ID=59003 PROTO=TCP SPT=58892 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 8 14:30:45 localhost kernel: [109288749.556125] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=31.223.4.170 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=236 ID=59003 PROTO=TCP SPT=58892 DPT=445 SEQ=1451329464 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (02040218) Jun 9 12:43:44 localhost kernel: [109368727.492911] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=31.223.4.170 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=236 ID=26993 PROTO=TCP SPT=45200 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 9 12:43:44 localhost kernel: [109368727.492940] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=31.223.4.170 DST=[mungedIP2] LEN show less	Port Scan
🇷🇸 Smel	2026-06-09 13:38:12 (4 days ago)	SQL/MH Probe, Scan, Hack -	Port Scan Hacking SQL Injection
🇩🇪 IP Analyzer	2026-06-09 10:00:26 (4 days ago)	Unauthorized connection attempt from IP address 31.223.4.170 on Port 445(SMB)	Port Scan
🇬🇧 PeravixGroup	2026-06-09 07:48:58 (4 days ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-08 16:03:23 (5 days ago)	Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password	Brute-Force
🇺🇸 ShadowWhisperer	2026-06-08 12:26:13 (5 days ago)	SMB port scan / probe. SMB1 Negotiate	Port Scan Hacking
Anonymous	2026-06-07 18:25:35 (5 days ago)	Unauthorized connection to SMB port 445	Port Scan
🇹🇼 kk_it_man	2026-06-07 13:53:02 (6 days ago)	ET SCAN Suspicious inbound to MSSQL port 1433	Port Scan

Showing 1 to 15 of 665 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 113.57.5.139

🇫🇷 45.81.243.62

🇬🇧 5.226.140.115

🇩🇪 212.77.241.90

🇺🇸 209.126.4.130

🇮🇳 182.95.125.42

🇭🇰 165.154.224.19

🇺🇸 162.216.149.211

🇸🇪 158.174.211.17

🇨🇳 106.13.30.117

🇿🇦 105.247.69.196

🇵🇱 87.251.64.156

🇧🇷 45.205.1.70

🇳🇱 45.153.34.112

🇭🇰 8.210.246.67

🇧🇷 191.233.234.186

🇨🇳 112.103.130.62

🇨🇳 59.52.101.253

🇯🇵 47.245.54.58

🇺🇸 8.229.48.12