Showing current intelligence for this indicator.

IP Information for 31.14.254.27

Location City of London, 🇬🇧 United Kingdom
ASN AS25369 — BANDWIDTH-AS, GB
BGP Prefix 31.14.254.0/24
Registry ripencc
IP Address 31.14.254.27

IOC Matches

ID Type Tag Source Last seen Comments
319692 IP honeypot 4 2026-05-12 08:51:15
  • 2026-05-12: Observed 8 times. Targeted ports: 61692. Country: United Kingdom. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
  • 2026-05-11: Observed 7 times. Targeted ports: 8000. Country: United Kingdom.
  • 2026-05-09: Observed 25 times. Targeted ports: 51426, 53385, 54120, 55539, 62670. Country: United Kingdom.
  • 2026-05-08: Observed 8 times. Targeted ports: 29530. Country: United Kingdom.
  • 2026-05-07: Observed 7 times. Targeted ports: 21118. Country: United Kingdom.
  • 2026-05-04: Observed 24 times. Targeted ports: 11688, 52477, 52985, 61988, 65156. Country: United Kingdom. Reputation: known attacker.
  • 2026-05-03: Observed 12 times. Targeted ports: 14720, 30796. Country: United Kingdom. Reputation: known attacker.
  • 2026-05-01: Observed 8 times. Targeted ports: 52986. Country: United Kingdom. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
  • 2026-04-30: Observed 31 times. Targeted ports: 19986, 50233, 54150, 60898, 63082. Country: United Kingdom.
  • 2026-04-29: Observed 11 times. Targeted ports: 52379. Country: United Kingdom.
  • 2026-04-28: Observed 42 times. Targeted ports: 36488, 49232, 50107, 53172, 53973, 55226, 58226, 60437, 63971. Country: United Kingdom.
  • 2026-04-27: Observed 8 times. Targeted ports: 56811. Country: United Kingdom. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

URLs on this IP

No URLs found for this IP.

Passive DNS

No pDNS records found for 31.14.254.27.

Search History

ID Source Last seen
57995 web 2026-05-15 14:05:07
56175 web 2026-05-09 06:42:03

Whois

No Whois record yet. The worker will fetch it when this IP is in the queue.