This IP address has been reported a total of
3
times from
2 distinct
sources.
31.94.2.241 was first reported on
March 9th 2026 , and the most recent report was
3 days ago United Kingdom of Great Britain and Northern Ireland
with 2
reports.
The most common categories in these recent reports were:
SSH
2
times;
Brute-Force
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
spufidoo
2026-10-15 18:36:01
(3 days ago)
2026-10-15T19:35:56.802801+01:00 heimdall kernel: [13150965.691543] [UFW BLOCK] IN=eth0 OUT= MAC=b8: ...
show more
2026-10-15T19:35:56.802801+01:00 heimdall kernel: [13150965.691543] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:ac:9d:00:00:34:06:f2:da SRC=31.94.2.241 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=44189 PROTO=TCP SPT=38472 DPT=22 WINDOW=64800 RES=0x00 SYN URGP=0
2026-10-15T19:35:57.793679+01:00 heimdall kernel: [13150966.682425] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:16:d2:00:00:34:06:88:a6 SRC=31.94.2.241 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=5842 PROTO=TCP SPT=38472 DPT=22 WINDOW=64800 RES=0x00 SYN URGP=0
2026-10-15T19:35:58.820449+01:00 heimdall kernel: [13150967.709177] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:f4:26:00:00:34:06:ab:51 SRC=31.94.2.241 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=62502 PROTO=TCP SPT=38472 DPT=22 WINDOW=64800 RES=0x00 SYN URGP=0
...
show less
Brute-Force
SSH
🇬🇧
spufidoo
2026-10-15 18:17:00
(3 days ago)
2026-10-15T19:16:56.614145+01:00 heimdall kernel: [13149825.502606] [UFW BLOCK] IN=eth0 OUT= MAC=b8: ...
show more
2026-10-15T19:16:56.614145+01:00 heimdall kernel: [13149825.502606] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:1c:7f:00:00:34:06:82:f9 SRC=31.94.2.241 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=7295 PROTO=TCP SPT=37748 DPT=22 WINDOW=64800 RES=0x00 SYN URGP=0
2026-10-15T19:16:57.654600+01:00 heimdall kernel: [13149826.542623] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:7e:ef:00:00:34:06:20:89 SRC=31.94.2.241 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=32495 PROTO=TCP SPT=37748 DPT=22 WINDOW=64800 RES=0x00 SYN URGP=0
2026-10-15T19:16:58.674126+01:00 heimdall kernel: [13149827.562153] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:2a:22:00:00:34:06:75:56 SRC=31.94.2.241 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=10786 PROTO=TCP SPT=37748 DPT=22 WINDOW=64800 RES=0x00 SYN URGP=0
...
show less
Brute-Force
SSH
🇸🇬
mypatricks
2026-03-09 04:22:59
(7 months ago)
31.94.2.241 | Port: 9305 | DNS: 31.94.2.241 2026-03-09T12:22:57+08:00 Europe/London | IPs reserved l ...
show more
31.94.2.241 | Port: 9305 | DNS: 31.94.2.241 2026-03-09T12:22:57+08:00 Europe/London | IPs reserved list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /hashtag/superhero/?27274bd10599dc505003=AUD&code=AUD | Ref: https://xxxxxx/hashtag/superhero/?c02656cc49ffc8aa4ef58=AUD&code=AUD | Country: GB/United Kingdom/+00:00 IP City: Bristol macOS 9d974d2e6f3e952f-LHR/London, United Kingdom 1 hits/0 secs Robots 4
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
Showing 1 to
3
of 3 reports
