71.31.223.254
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- WINDSTREAM COMMUNICATIONS LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS7029
- Hostname(s)
- h254.223.31.71.dynamic.ip.windstream.net
- Domain Name
- onecommunications.net
- Country
- 🇺🇸 United States of America
- City
- Scranton, Pennsylvania
Abuse Reports
Total reports
104 from
60 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T11:46:17Z.
|
Bad Web Bot | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-01T19:47:50Z.
|
Bad Web Bot | |
| 🇦🇺 MAGIC |
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack Bad Web Bot | |
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 71.31.223.254: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇩🇪 netclix.gr |
(old_win_chrome) Blocked old Windows Chrome 71.31.223.254 (US/United States/h254.223.31.71.dynamic.ip.windstream.net)
|
Hacking | |
| 🇩🇪 LRob |
Shop search flood (L7 DDoS) | path: /111-bons-plan-vtt | query: q=Famille-E%5C-Mountain-Pulsium-Voltage | src_port: 53553
|
DDoS Attack Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:47666 dst:23
|
Port Scan | |
| 🇬🇧 BananaLlama |
Unsolicited SSH (TCP/22) connection attempts blocked at edge firewall; no public SSH service is exposed.
|
Port Scan SSH | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 71.31.223.254
|
Port Scan Brute-Force SSH | |
| Anonymous |
|
Brute-Force | |
| 🇨🇦 lakered |
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan | |
| 🇫🇮 iamxorum |
|
Port Scan IoT Targeted | |
| 🇺🇸 MPL |
tcp ports: 23,22 (8 or more attempts)
|
Port Scan | |
| 🇺🇸 anon333 |
Hacker syslog review 1787740440
|
Hacking | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown